Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
File:                     Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json)
Hash identifier:          lepk3on16S/jJWKV1Xue8v91k8Y6Zb49mM/dtmot4Fc=
Subject key identifier:   59:5D:0C:E5:7F:E5:33:9F:21:98:C8:FF:B7:E2:A0:E7:DD:07:F8:D5
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Certificate issuer:       /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial:       01988FC76E529BAC1797340BCF0274616DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
Manifest number:          0103
Signing time:             Sat 09 Aug 2025 17:01:08 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:08 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:08 +0000
Files and hashes:         1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: hMhe+BS+HfVBlhYZQeukvyOH+fWnHaAQd9Ux8JjSrSc=)
                          2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:6e:52:9b:ac:17:97:34:0b:cf:02:74:61:6d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
        Validity
            Not Before: Aug  9 17:01:08 2025 GMT
            Not After : Aug 10 17:01:08 2025 GMT
        Subject: CN=595d0ce57fe5339f2198c8ffb7e2a0e7dd07f8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:8a:87:6b:77:d5:ba:7f:f7:c2:31:97:5e:
                    4e:e1:f5:f2:57:db:89:d4:5d:bb:f3:bb:7c:2f:3f:
                    b9:59:22:87:dd:c7:38:e0:c9:c4:5d:ee:e8:1d:be:
                    14:4f:73:b4:d2:08:12:55:63:30:56:ce:a8:ce:57:
                    9f:0c:be:68:d3:b8:90:e6:59:52:37:f0:53:46:53:
                    cf:ba:13:b1:e2:9d:76:ef:c0:5a:b4:e3:42:43:64:
                    7e:17:54:a6:3e:f3:16:ad:8e:02:b4:17:68:d0:72:
                    e2:78:a4:be:9e:0a:e5:21:c4:00:63:3d:1e:71:2b:
                    b7:74:b5:7b:6b:af:d0:55:eb:d4:df:25:09:ec:07:
                    52:fd:da:0b:3a:ea:47:ba:ce:0b:4d:47:aa:d4:2e:
                    39:45:c5:5b:18:a3:98:b0:2c:03:83:f8:e7:14:90:
                    5a:f3:c1:2a:af:ac:ed:0a:cc:2f:63:b5:89:ca:c9:
                    bf:63:27:0f:3c:03:9f:d1:17:84:cd:8d:c7:cc:3c:
                    4a:99:b1:dc:cb:72:6a:3e:39:b2:d0:7e:97:75:d8:
                    87:07:c7:c6:71:0b:eb:1c:0b:3c:29:d4:25:45:ec:
                    ba:b9:90:0f:1e:35:88:84:74:75:84:90:65:b4:fe:
                    5c:dd:3f:ae:e0:f1:03:1f:16:da:b0:74:18:46:30:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:0C:E5:7F:E5:33:9F:21:98:C8:FF:B7:E2:A0:E7:DD:07:F8:D5
            X509v3 Authority Key Identifier:
                keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:94:52:f3:5e:75:a0:39:96:22:4f:9c:e3:04:da:de:b1:
         7d:9b:2c:85:cb:89:a3:84:75:98:5a:36:af:1a:7c:c7:17:a2:
         17:ae:a5:46:89:70:5a:17:70:d6:5a:53:2a:1c:fd:ab:e6:25:
         c0:60:8b:16:55:4f:4a:fa:52:77:74:50:2a:52:53:2b:4b:b5:
         1c:c6:98:b1:b2:53:67:e0:f3:18:5d:e6:5b:34:e5:76:9a:48:
         32:d3:ca:64:3f:f7:bd:73:1a:6f:82:46:64:bd:f9:8b:14:da:
         0d:36:f3:86:43:86:ad:09:90:43:d3:c6:70:66:a0:4d:ff:7a:
         80:dc:a4:4c:ee:65:c1:bd:5a:67:a6:f8:7f:c4:5f:d4:90:67:
         f3:3b:09:bf:77:7e:e5:4b:60:11:ca:b0:40:5c:a6:ee:88:c3:
         95:70:ff:a9:fd:f3:26:80:21:95:47:62:2e:d3:d3:63:02:76:
         17:db:c2:d5:2b:94:96:d0:58:1e:bc:f8:96:b7:fb:10:4d:2c:
         03:e5:0a:33:90:56:02:a3:b0:21:8c:89:cb:f8:5d:7c:c0:18:
         31:b1:d7:ea:16:31:f7:cd:b3:8e:89:11:c5:38:f5:8c:11:52:
         ae:6c:1d:60:9b:4a:cd:bc:dd:31:e9:5d:b0:20:5b:d7:e5:aa:
         5b:2c:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:55 2025 by rpki-client