Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          s2uoS11O/hulZWUPC+8hW/S1Ct8Sbxokhfby84UA8xE=
Subject key identifier:   58:11:D2:3F:E6:89:9D:BE:CF:24:78:E0:B6:B1:ED:F7:06:D9:E1:7B
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       0198819E06712B0C283348D3DE4FD1D6BF77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1620
Signing time:             Wed 06 Aug 2025 23:01:13 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:13 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:13 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: ZONspZf6vdJBXjiCZs6+fCfJ5Oozcr7PyuqGlBzkyE8=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:06:71:2b:0c:28:33:48:d3:de:4f:d1:d6:bf:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Aug  6 23:01:13 2025 GMT
            Not After : Aug  7 23:01:13 2025 GMT
        Subject: CN=5811d23fe6899dbecf2478e0b6b1edf706d9e17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:16:49:c9:a4:21:b0:f8:28:3a:de:db:7b:
                    82:26:11:52:f9:35:d6:69:5e:dc:21:d8:ae:19:5b:
                    79:76:82:60:b9:e2:2e:14:58:73:f1:18:97:b3:84:
                    aa:eb:3a:18:a2:29:a0:3f:ef:e2:4b:d3:bf:3c:11:
                    72:c1:65:7d:64:7e:dd:50:97:fa:38:27:e4:43:39:
                    17:c9:e5:82:40:bf:3d:98:da:a7:8a:bc:48:b2:f2:
                    d8:30:a2:1f:e1:82:c9:3e:d6:14:de:31:e7:3d:d2:
                    a7:e3:07:22:aa:11:43:3f:31:23:d9:76:c3:fd:9f:
                    0d:07:98:4f:3c:e1:b1:e1:a0:ac:4d:ab:58:85:2e:
                    5e:bf:c8:aa:be:de:ee:88:a4:cf:c7:33:fd:42:96:
                    88:1f:fb:38:65:f9:78:6b:a5:eb:ff:78:77:6e:d1:
                    2d:2e:b1:4a:68:2d:19:7a:c5:a5:86:95:2b:24:80:
                    04:e2:c7:65:43:48:cb:2d:84:01:1a:04:a3:79:df:
                    e5:f7:fb:1f:4c:f9:93:01:54:6d:52:e3:a3:2d:13:
                    12:80:80:cf:89:0b:fb:12:3c:0c:3c:39:dd:9e:cf:
                    94:4c:7a:95:e0:b8:5d:38:38:ca:92:23:30:5c:7b:
                    5f:10:eb:9e:08:01:03:a4:56:11:8c:01:25:10:9c:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:D2:3F:E6:89:9D:BE:CF:24:78:E0:B6:B1:ED:F7:06:D9:E1:7B
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:82:fc:6b:87:9e:85:03:29:86:c9:02:e4:99:32:0a:c2:
         17:aa:e6:09:77:22:46:09:3e:bf:b6:d1:16:9d:92:44:fc:e2:
         61:e9:dd:d5:03:e2:27:c7:a0:80:6f:3f:7c:48:1a:23:09:3d:
         69:3b:c2:ad:b3:1b:06:16:37:e2:59:ab:fb:32:10:f2:f6:dd:
         1d:fd:74:d5:2f:28:f0:51:16:0c:c7:98:c8:dd:a2:33:e2:04:
         41:06:71:af:46:9d:96:66:04:c7:81:5c:3a:48:c0:70:f8:6f:
         14:f6:28:f8:87:65:50:66:43:f7:6b:be:35:f7:fb:96:06:06:
         b8:e7:9d:7a:7c:72:f4:37:e5:7c:a9:7d:2f:f7:7e:f1:90:a9:
         af:54:62:7d:76:a1:65:4d:6b:17:c3:dc:af:60:95:6e:d6:e9:
         fa:9c:d8:41:59:f6:d2:1d:db:61:fd:57:4b:f8:ba:5d:11:34:
         5d:bf:74:c6:04:e7:79:04:56:76:da:6b:de:81:95:5b:93:cf:
         ac:bd:30:f5:a8:c4:91:dd:75:b2:27:2a:9a:81:f9:be:d6:16:
         80:7b:56:20:cd:32:7a:08:cb:62:1d:89:3c:54:ec:66:86:5a:
         26:7e:12:79:65:8d:a7:64:35:8a:fc:52:3d:f2:df:a1:67:a5:
         14:75:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:10 2025 by rpki-client