Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          wg75qNxCWUj4Mti2mlfmmg4IDAIPW80BlGazoDrYmRM=
Subject key identifier:   5E:E1:8E:B3:C6:18:E4:2C:2D:97:EA:0E:BF:E8:19:89:EE:EC:FA:5F
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       019877C03322CF3035BF412008ACC60B7F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          1627
Signing time:             Tue 05 Aug 2025 01:02:21 +0000
Manifest this update:     Tue 05 Aug 2025 01:02:21 +0000
Manifest next update:     Wed 06 Aug 2025 01:02:21 +0000
Files and hashes:         1: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=)
                          2: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=)
                          3: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=)
                          4: lR6zP5U5RH-kGUiT4tee76n_n7U.roa (hash: d+2joVrqEnxO1Au13OpUY3xGwfVao9EUryyrW7jhHKE=)
                          5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=)
                          6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: PrMqxLqCmkTTtGhRSmKf51k06SkqaN0wYyGgCQ+bE2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:77:c0:33:22:cf:30:35:bf:41:20:08:ac:c6:0b:7f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Aug  5 01:02:21 2025 GMT
            Not After : Aug  6 01:02:21 2025 GMT
        Subject: CN=5ee18eb3c618e42c2d97ea0ebfe81989eeecfa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:ba:a3:97:38:c9:e2:1a:67:52:1a:7a:02:
                    46:52:0b:a1:4c:81:9b:68:18:fb:b1:01:c0:4a:8c:
                    22:a9:a9:0b:40:78:73:1b:c9:59:29:48:87:18:dd:
                    23:36:72:00:96:75:1e:e4:bb:ca:ee:f7:82:5f:75:
                    6f:b2:ae:ad:88:74:5f:fd:0f:d6:ab:f3:01:36:74:
                    ea:23:10:d4:7b:50:42:a4:54:80:f0:6c:1d:e3:da:
                    97:6e:0e:13:7f:e2:6a:e9:ab:5f:e3:8b:39:ca:0a:
                    82:b4:bf:36:b8:3f:9f:cc:9e:16:28:1e:a4:86:38:
                    2d:f9:2a:b9:24:f5:2b:8a:74:f9:95:51:2d:14:aa:
                    e6:32:60:ab:4a:01:9c:96:1c:6c:8d:92:e6:4d:f3:
                    dd:68:cc:6f:6b:7d:f8:a1:03:f2:e0:23:19:99:f5:
                    df:08:8a:da:3e:97:ea:82:98:5a:04:60:cc:0d:0b:
                    16:e0:58:12:0b:51:1c:df:70:d1:96:14:dc:8b:43:
                    81:c7:57:a8:76:c7:40:ed:ce:f0:4b:8e:72:a5:65:
                    9a:27:af:26:e7:0d:5b:b4:14:b3:98:9d:74:e2:91:
                    d7:8c:a5:6d:02:49:ed:05:d0:df:2a:af:64:0d:2c:
                    f0:3e:7c:41:7d:a4:5b:80:77:2c:98:be:9d:e4:33:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:8E:B3:C6:18:E4:2C:2D:97:EA:0E:BF:E8:19:89:EE:EC:FA:5F
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:14:ec:d2:5a:81:ec:c9:85:71:8a:8f:67:24:24:e9:c6:
         4e:15:cc:eb:d7:84:ec:e4:df:1a:62:1a:6b:b1:b7:66:29:e2:
         68:3a:64:d1:fb:8c:2d:d4:75:b0:4a:70:92:18:9d:da:f1:cb:
         a5:b7:63:22:0b:cb:08:52:b0:3f:b9:ce:bc:08:a4:53:db:bc:
         31:48:dc:eb:e9:4d:9f:74:06:63:5d:ff:ca:65:46:fe:06:1b:
         fe:45:4b:d0:52:d6:a9:02:d5:65:45:28:8e:45:e2:15:24:2a:
         a3:77:f0:8c:d9:20:c8:85:01:dd:ee:29:78:d1:44:02:b6:7b:
         7d:0c:10:33:84:fe:44:b3:13:e8:06:a8:1c:26:e3:81:bf:1f:
         07:dc:4a:9c:5b:a0:bd:3a:14:0d:c9:73:2b:19:a2:c6:ab:9f:
         d0:63:76:74:b8:3a:c3:a7:f4:56:ef:d7:3f:e5:cc:0a:2e:28:
         2c:63:51:3b:4f:f8:47:b2:e6:22:de:9b:69:48:4d:79:b0:cc:
         12:02:68:51:4f:38:fb:05:83:9e:72:d7:28:72:75:5c:0a:b1:
         c4:56:ab:f7:f6:4e:5c:b4:62:4e:29:9c:f0:1f:a6:47:bf:da:
         a1:8c:f3:64:a6:9c:30:27:91:67:7d:01:89:7a:53:ec:fb:80:
         59:61:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:44 2025 by rpki-client