Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File:                     _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier:          IP8SmN+a+5nZ4o+Qq/4Gs88Hsov8vZ21clAoe/hBNcQ=
Subject key identifier:   C4:F0:CD:10:B1:0F:37:A0:4E:A8:AE:1C:DA:A6:96:92:0B:4E:4C:46
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer:       /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial:       01988AA10F4821CDF1B84F437F0B5CB174D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 17:01:07 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:07 +0000
Manifest next update:     Sat 09 Aug 2025 17:01:07 +0000
Files and hashes:         1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
                          2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
                          3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: ntUZiDOWwPC7Z+kV02EdilWzmjuTd+/hMsK0ekCsPQE=)
                          4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a1:0f:48:21:cd:f1:b8:4f:43:7f:0b:5c:b1:74:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
        Validity
            Not Before: Aug  8 17:01:07 2025 GMT
            Not After : Aug  9 17:01:07 2025 GMT
        Subject: CN=c4f0cd10b10f37a04ea8ae1cdaa696920b4e4c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:44:9d:25:e9:3a:99:0b:8a:86:1b:70:04:
                    d6:94:56:d1:94:93:8e:60:81:da:1e:f2:22:df:f7:
                    5f:05:89:29:c0:8f:c4:b2:31:32:8e:ee:32:bc:c4:
                    8a:49:34:72:02:25:79:73:5d:d4:02:98:b0:86:e6:
                    e4:c4:01:4d:b5:a7:b4:66:df:66:f6:6a:f2:8f:91:
                    a8:91:c4:26:93:0c:df:53:34:1a:75:c2:e0:e7:56:
                    17:bf:5d:c5:de:53:51:3a:23:07:bb:e9:28:58:09:
                    99:33:11:f6:85:b9:59:a7:53:74:c3:9a:20:27:5b:
                    96:0e:08:1c:30:df:91:7d:17:f5:08:2f:a7:9c:88:
                    80:65:3a:a9:fc:80:ef:a7:4e:69:81:cc:b8:a8:7c:
                    97:88:38:2e:b4:10:38:7b:7d:b4:35:05:76:a5:af:
                    26:1e:aa:b4:e8:66:1e:ab:ef:6c:57:64:c1:2c:d9:
                    49:fa:a9:3f:26:c4:89:cf:bc:bf:be:8a:4f:ca:f8:
                    4a:67:2a:5c:42:ad:90:a4:48:af:16:bf:55:59:85:
                    ee:b3:1c:b4:74:ed:e3:d0:37:87:cc:8e:55:e5:be:
                    05:82:0a:6b:22:cd:26:89:05:43:ef:66:b3:48:9b:
                    78:82:66:17:dc:cf:2d:93:af:fb:9b:ee:0d:c0:7b:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F0:CD:10:B1:0F:37:A0:4E:A8:AE:1C:DA:A6:96:92:0B:4E:4C:46
            X509v3 Authority Key Identifier:
                keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:7a:80:49:c0:35:39:3a:56:17:19:ed:59:c9:36:d3:a6:
         51:0d:0b:4b:52:70:d1:26:cb:70:38:6f:65:d8:ea:57:09:a4:
         a1:e0:aa:49:71:c7:2e:f8:03:71:02:8e:1b:b8:fe:f5:03:c4:
         23:de:57:3e:20:57:a1:c9:bf:4d:98:62:c3:99:96:79:5b:16:
         90:20:c8:a7:d7:c7:70:41:59:6c:0e:37:3b:29:ed:f0:27:10:
         ed:ec:cd:be:4a:69:e2:65:64:51:aa:f7:e3:b1:7d:48:ea:62:
         34:77:fb:d4:67:56:e8:61:06:4d:63:6f:ef:3e:96:58:06:56:
         64:ea:89:42:aa:ac:39:15:c2:8a:30:86:41:47:a6:06:93:bd:
         c9:35:87:e6:05:8a:9e:88:1f:0e:65:7c:34:74:2c:8e:4a:91:
         e5:fc:b5:4b:48:91:78:7a:18:75:66:10:b1:5c:5e:bc:3c:bd:
         d2:83:3b:4d:7e:3c:8f:e5:74:cd:8d:fa:5f:25:2b:b3:4a:d6:
         eb:ce:18:16:d3:d7:ab:8d:12:18:ac:ec:9b:90:69:4b:f5:41:
         bc:0b:7f:39:ee:4d:61:33:99:00:0c:07:c3:33:3f:79:20:07:
         f5:93:7d:da:5b:35:9c:62:9b:dd:67:08:cb:14:f6:86:20:78:
         c3:3f:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:21 2025 by rpki-client