Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          Lmz1zzuWJk797WxefJnbKsgv1qZ/4hc8AvYv1c519wY=
Subject key identifier:   09:49:9C:AA:16:BF:79:07:64:95:FF:12:A6:1D:9F:D0:61:6C:33:93
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       01989034D5A2F91EB6EA559651CAC872E0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          1669
Signing time:             Sat 09 Aug 2025 19:00:38 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:38 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:38 +0000
Files and hashes:         1: 3KkVFS5E_0OXY2I0JPm831xlJRY.roa (hash: O3hSmLSCj4vhYoS62smX0V+VSwAD/D1TNqXoWq8n6pI=)
                          2: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: ui2AJDn4PuZqlqjFkg7Q6oYJ4fvvooeIR64wr6Wpt3Y=)
                          3: YYYjBm1cHK07qbUZvnPjiWS8SJc.roa (hash: MDsHneIlPDU9EFijEVHpgaP4TeikhndTgWyCvxSYX5M=)
                          4: ZLyEHguTDj7_eAwLYTv1l-ESnW8.roa (hash: kfxLXEBdhl8n9+7tXLKP0Rx1fp10fHwf5ZErtSpKDqE=)
                          5: np5ApzvF3lA5ni3WwjjgrcdZ2Tk.roa (hash: jhCq+3Rux2qXuCc1aEm0+2wjAzlzRIc5exfEKvJ2iL8=)
                          6: sJLQX0xj_JXH1h41N6UVjiWKBII.roa (hash: +Hmj+iesuGr60ujxMyJDlZF5PIcV2l7P1ugWqsp11rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:d5:a2:f9:1e:b6:ea:55:96:51:ca:c8:72:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Aug  9 19:00:38 2025 GMT
            Not After : Aug 10 19:00:38 2025 GMT
        Subject: CN=09499caa16bf79076495ff12a61d9fd0616c3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:b2:77:52:f4:61:a8:c4:6a:a5:98:79:3c:
                    45:ba:41:f8:45:5d:0f:c6:9d:2f:86:7a:0f:ec:9c:
                    9d:e7:eb:20:39:9e:b0:93:9e:50:84:5a:a9:5e:21:
                    b3:0f:ce:cf:df:ce:25:f5:5b:ad:03:0c:6c:d0:cf:
                    36:62:f6:4f:b2:de:f9:c6:52:49:95:db:df:f8:52:
                    52:bc:32:9e:5f:ea:fa:e0:40:9f:1c:97:27:0d:f4:
                    33:3a:35:5d:cd:ae:33:fe:6d:ba:03:75:9f:7a:47:
                    95:b6:0d:42:17:97:75:53:38:d5:ef:ba:4b:da:04:
                    9b:7f:c4:bc:d1:e0:85:7e:6b:93:f8:50:0d:f3:28:
                    cb:1d:ae:82:52:89:04:cb:74:00:ea:77:4d:4d:6e:
                    84:08:10:77:48:e3:c2:75:75:44:61:75:fa:a8:59:
                    28:49:b5:48:b8:0e:bc:d2:d6:bc:e3:a6:05:fa:e2:
                    d0:8a:65:35:f4:e4:7c:d6:da:83:26:8b:ab:02:25:
                    3b:16:3b:97:d3:60:70:ab:e4:06:39:81:69:0d:b6:
                    48:b2:46:f2:01:e1:95:00:dc:39:9a:5f:54:3d:5d:
                    61:71:bb:20:18:6c:81:78:9a:06:c3:10:86:38:a0:
                    f5:5e:e8:84:2c:ac:ca:7e:e3:7c:9b:85:bd:fb:93:
                    8d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:9C:AA:16:BF:79:07:64:95:FF:12:A6:1D:9F:D0:61:6C:33:93
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:75:6c:85:15:e3:ee:4a:9c:17:81:59:f7:17:ad:14:f2:05:
         37:ef:be:56:d3:6b:3c:5b:3b:fc:99:d2:d3:68:df:a4:8c:1d:
         39:3b:ac:94:59:ec:b7:57:14:6a:d3:4f:ef:a6:f5:a3:83:fe:
         d1:c8:32:b7:cb:2c:66:43:4d:5a:26:ca:f5:40:09:8a:22:3a:
         32:b3:b8:9b:9d:8e:3c:99:82:1c:59:9c:cb:28:d2:4d:97:0e:
         3e:d0:73:41:8b:66:c0:6e:ee:87:65:00:2c:02:77:8f:f6:3f:
         9f:94:71:62:d8:92:89:e4:1a:d3:3c:f3:6b:19:20:f2:a5:35:
         1d:e9:7e:54:82:b6:fa:13:89:e7:79:52:f0:b2:1b:80:6b:2f:
         f1:07:64:df:3a:1b:08:72:2c:c3:35:5c:0f:d3:5f:90:6a:ac:
         28:5d:e3:4d:ce:02:46:9b:0f:f1:1a:42:7a:4a:78:1c:94:12:
         3d:1b:59:6b:96:98:cd:17:7a:b1:10:c2:d0:f1:4a:00:1c:f6:
         1b:26:5e:18:ea:3b:d2:47:ee:52:a4:40:e3:aa:b4:14:d9:f6:
         b8:c9:f5:65:ef:c0:89:e9:5f:be:9e:0e:59:ed:a4:91:62:80:
         92:8f:ab:a0:d6:c2:64:b2:7e:62:aa:50:39:cb:29:07:30:f5:
         a3:e8:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:52 2025 by rpki-client