Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          2bGPaGCqJ2bW3xtp7uf5EQ1CoXyVyQG6nRQdKJszUSU=
Subject key identifier:   58:16:26:45:65:7B:ED:6B:BA:E9:A1:FC:7A:51:97:DF:23:71:F9:B8
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       019873066FF0761A5ED9244D7D369105E911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 03:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:58 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: dD85D+NyWe7HsP/lpSu2MpmgKYEoxQH/ALGcclzUzy4=)
                          2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:6f:f0:76:1a:5e:d9:24:4d:7d:36:91:05:e9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: Aug  4 03:00:58 2025 GMT
            Not After : Aug  5 03:00:58 2025 GMT
        Subject: CN=58162645657bed6bbae9a1fc7a5197df2371f9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:9b:9e:53:ea:b2:57:1c:00:4b:3c:9a:c6:
                    f6:ba:27:59:71:51:c2:d3:6e:63:01:10:68:85:61:
                    37:7e:37:90:ef:55:73:d1:a9:4e:19:5e:2e:73:08:
                    79:85:54:c7:33:eb:0d:d2:1f:cb:17:04:7d:3c:86:
                    1f:9f:58:61:c3:45:0b:6e:b7:7f:b1:9c:2c:8e:ce:
                    6b:5f:73:b7:b4:a7:af:ce:5d:f3:38:c7:0a:f0:99:
                    bb:8f:63:1a:31:54:bd:a6:11:e5:5b:10:5b:3d:0e:
                    54:b8:48:25:aa:ca:4f:c2:31:11:f2:23:13:8a:63:
                    a7:94:4d:95:15:5c:e4:ba:53:df:e6:af:e1:8e:25:
                    0d:c6:0c:2d:69:9b:ff:75:00:5c:a0:4d:c3:94:7b:
                    d4:21:0b:ca:45:63:d7:be:88:af:da:02:1c:d7:09:
                    0c:10:19:8f:40:8b:50:87:af:f9:af:7e:1b:92:ec:
                    e5:ef:14:a8:ea:2f:b0:c3:45:f6:b1:7a:08:11:fd:
                    bb:a9:a4:cb:0b:96:bc:ac:e5:05:ef:2c:d4:da:6e:
                    6b:3b:b9:67:d2:c7:9d:be:81:5a:9f:5f:d4:da:8d:
                    4c:d6:99:43:f6:15:ad:ce:7e:e6:70:f2:e4:df:09:
                    e3:4d:81:78:19:4e:3a:e9:91:16:5e:cd:05:e8:90:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:26:45:65:7B:ED:6B:BA:E9:A1:FC:7A:51:97:DF:23:71:F9:B8
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:c9:df:72:64:ed:2d:73:4a:1c:a5:29:34:d0:ff:7d:9b:
         2c:98:94:d7:bc:7b:e2:15:74:01:cc:2c:06:f5:8f:a0:04:cf:
         ae:b8:0a:ad:84:0b:64:c9:e4:92:7e:61:91:36:df:a4:43:86:
         21:a6:83:6e:cb:fc:20:4e:d0:ce:c8:8c:ef:59:3e:36:a8:f4:
         fc:51:bf:51:ce:5a:3c:b6:24:6c:0a:9f:7c:e9:9a:92:4c:88:
         c1:22:72:7f:f1:0d:79:e2:ee:f3:95:0b:25:02:c5:57:ec:19:
         7e:21:84:32:c7:82:ed:22:39:e7:fe:04:36:41:a3:c3:9d:ce:
         00:1c:cd:44:07:7e:16:44:f1:d2:ce:e9:6f:a9:d9:8a:01:42:
         39:9f:60:96:25:be:d8:38:f3:99:12:b3:3d:49:2a:86:e7:68:
         3b:79:e6:8c:47:10:2d:aa:68:20:2e:9d:1c:47:6c:4d:ec:4a:
         b1:03:68:df:de:b3:44:af:67:15:1e:a1:da:00:a2:a8:21:20:
         94:ed:58:a0:f4:86:4d:dd:0d:37:81:9c:49:52:51:1c:3f:df:
         15:78:64:88:e9:02:d6:93:4b:c1:62:19:0a:4b:29:da:3b:fd:
         c4:5a:19:a7:1a:37:42:7e:10:4b:5e:1e:f6:42:c1:3e:8a:7e:
         bc:67:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:31 2025 by rpki-client