Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
File:                     u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json)
Hash identifier:          rjlnlz7bm1mVj3o11Vf/vdXSz85Tfj6hltpzlDGropo=
Subject key identifier:   3D:5A:3B:E9:14:6F:44:68:3F:1D:AF:87:BC:93:77:05:89:8A:A6:62
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Certificate issuer:       /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial:       01987C0944E1C810626A5B15B88A8060F4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
Manifest number:          1672
Signing time:             Tue 05 Aug 2025 21:00:38 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:38 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:38 +0000
Files and hashes:         1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=)
                          2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=)
                          3: 9O1Q-3Ywi0b25vTek4jn6aALJH8.roa (hash: 9hRHI+r8i611pC+IiRqeXl+fIkiVZ4LVc9f7yiLG3X0=)
                          4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=)
                          5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=)
                          6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=)
                          7: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=)
                          8: fi7u_8aaxqQqH2QeccD8KGKx3hM.roa (hash: 0Mmbiog2iLNRJeesgr68dLzWfBwYCoI0LBsDE3h2PiQ=)
                          9: kJbqugGzjcar_vQMB3lbuYt_PTw.roa (hash: emVPsJYUnPe+oYUzPMkJk5nNc+wu7Ryrw0pN/lbLOi8=)
                          10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: 9pcBYgVBEMAWQAk/teIrr9iwYqqn2fgjSxSx7bFAi/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:44:e1:c8:10:62:6a:5b:15:b8:8a:80:60:f4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
        Validity
            Not Before: Aug  5 21:00:38 2025 GMT
            Not After : Aug  6 21:00:38 2025 GMT
        Subject: CN=3d5a3be9146f44683f1daf87bc937705898aa662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:96:1a:eb:da:17:d8:b3:1b:5b:69:98:f6:
                    8a:0f:46:1a:9f:ff:06:92:4e:c9:8b:79:b6:7b:1b:
                    16:fb:75:b6:fc:13:2c:4e:96:bd:2f:dc:70:33:42:
                    4e:8b:6c:11:94:b9:cf:88:05:02:62:82:39:94:ae:
                    7d:21:fb:d8:61:ad:1a:8c:c1:ac:15:d6:84:94:88:
                    43:41:eb:4f:b2:a3:84:ff:00:99:57:59:42:d1:f9:
                    3d:65:42:0a:c3:6f:0d:b3:b2:da:1d:f5:e4:93:bc:
                    f2:f5:18:29:83:a6:b9:59:a4:d6:87:af:e3:a8:23:
                    2e:f8:32:77:5f:c5:e5:75:ae:9f:fa:34:3b:36:09:
                    b9:ff:de:5d:b9:c9:40:4c:76:44:34:a7:e2:96:ca:
                    11:6e:5b:72:24:99:85:fe:ca:f1:fe:d4:c1:09:82:
                    ba:94:06:75:da:d0:09:1b:22:6c:a0:90:fe:8d:8a:
                    e7:85:63:23:ae:29:c3:a6:28:13:f4:5b:8d:68:ba:
                    ca:ab:40:f0:58:75:73:56:c4:a3:33:e8:e2:02:fa:
                    6d:18:d9:7b:01:c8:0f:36:ce:8b:e1:5c:d9:79:1f:
                    b2:a4:27:b1:7c:cf:4e:69:d7:02:e9:1f:fd:cc:6d:
                    40:55:a5:19:d4:78:23:ca:42:d7:61:ed:e0:ec:3a:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:3B:E9:14:6F:44:68:3F:1D:AF:87:BC:93:77:05:89:8A:A6:62
            X509v3 Authority Key Identifier:
                keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:21:2c:84:39:7d:cd:3e:31:33:52:b0:27:15:54:30:3a:73:
         03:8d:51:fe:55:f6:6f:9a:e9:fa:fc:19:0d:c6:03:81:d6:2e:
         e9:a8:ba:c5:60:38:c0:8c:a9:7a:1d:40:fb:0b:38:1b:ae:a0:
         2f:d2:7c:a9:1d:48:72:c4:28:34:4b:2e:d3:5c:e0:6a:8e:68:
         7d:84:f0:b1:3a:37:95:91:7f:a0:8c:56:7d:6e:64:67:cb:3d:
         7c:be:63:dc:e8:ce:c5:22:7b:61:33:ab:35:33:29:8e:cd:91:
         87:f9:cc:46:53:17:c8:97:2d:ca:be:19:85:03:0f:67:59:e4:
         51:4c:6d:80:88:f2:f0:a1:76:f9:da:63:80:89:79:b5:40:f1:
         f0:e7:c2:e1:95:5b:5f:bb:a5:13:34:19:27:e2:e0:5e:77:28:
         80:65:1a:9b:88:d8:95:e7:56:f7:46:eb:1d:2f:4b:5e:47:f9:
         c3:22:d4:e7:34:0c:65:2f:e0:06:31:1c:ec:94:19:70:c9:b5:
         09:41:d4:41:9a:15:af:08:2d:13:e8:ce:0d:b8:d9:51:e6:83:
         c6:34:29:90:0d:a3:44:7c:bc:37:8f:fa:cc:34:1f:e8:4c:a6:
         a6:da:cd:df:49:9a:78:1e:4f:42:fc:2e:a7:60:9f:30:fc:db:
         37:ef:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:36 2025 by rpki-client