Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          MNbukKhe0HFZUcW8vK7uP2/Pq1J7Fkh4SdTozdXP1kQ=
Subject key identifier:   12:29:30:2C:B6:C3:40:E4:3D:DA:5A:19:E6:58:CB:68:F5:21:FB:AC
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       01988DA1BFFCAA9B852CF0E51DD823F68A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 07:00:44 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:44 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:44 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: K3uakpkILxFPjCxpmksogmglCcqvNeAmKzPb5HXIRrU=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:bf:fc:aa:9b:85:2c:f0:e5:1d:d8:23:f6:8a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Aug  9 07:00:44 2025 GMT
            Not After : Aug 10 07:00:44 2025 GMT
        Subject: CN=1229302cb6c340e43dda5a19e658cb68f521fbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:0c:37:fe:06:c5:54:79:72:1e:12:ae:f8:
                    a6:0b:13:11:81:5e:e2:20:30:a5:31:f6:5b:fc:65:
                    82:7d:66:0d:a4:ae:ce:f6:99:b9:aa:5a:62:81:ee:
                    e5:b9:a6:3b:d7:b8:e0:23:54:48:61:53:63:38:d7:
                    ad:cc:59:66:f4:bd:1e:b2:30:e4:9d:50:3e:45:70:
                    a7:70:7b:fb:43:72:2e:8a:aa:c1:4a:60:4f:c7:23:
                    3c:f1:a6:e3:9d:a5:07:34:49:96:69:95:50:3e:8f:
                    ee:50:4f:c7:19:f0:30:e3:04:1f:66:65:fe:dd:3f:
                    37:20:0f:ec:de:7f:6f:37:8d:74:fa:3d:a5:07:19:
                    b5:31:24:ad:a5:7b:5b:7b:da:df:61:6f:c1:7b:ba:
                    26:5d:e4:92:0d:2c:b9:2b:e8:8e:a2:63:2f:75:6d:
                    93:40:4f:ea:f3:8e:76:13:a1:8c:ab:4b:5b:50:20:
                    fe:ba:33:8f:f9:6f:5d:ac:29:bf:f7:97:5f:81:f7:
                    81:34:2c:92:c2:1e:55:6c:52:af:dd:9d:36:a6:40:
                    ab:df:e3:ce:c9:e3:af:4c:97:a8:60:99:31:7a:32:
                    0b:35:72:25:74:3f:9e:3f:68:64:11:17:ae:5a:ec:
                    02:46:8d:0b:87:93:50:cd:3f:97:2b:69:7c:2a:f7:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:30:2C:B6:C3:40:E4:3D:DA:5A:19:E6:58:CB:68:F5:21:FB:AC
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:78:12:e8:97:f3:e2:0f:ee:36:c1:d8:bc:69:fd:05:4c:fc:
         06:46:3d:c2:1a:90:e1:70:0d:42:48:8d:0b:73:09:67:bf:56:
         fc:00:a6:54:07:1c:fd:1e:8a:ac:df:54:30:fc:a4:c4:4e:8d:
         fe:d2:b6:15:68:dd:6a:5d:3e:e3:5b:4f:cd:d3:24:05:65:65:
         3d:68:24:5c:db:66:22:7d:30:f9:7d:aa:88:f1:fc:cf:ad:07:
         9d:21:5d:87:6a:75:c4:2b:5f:54:a3:33:ae:0a:31:98:f5:42:
         d8:25:e8:80:03:27:a3:cf:71:4e:55:a0:0a:7b:e8:23:02:3a:
         3d:87:99:35:b8:fa:84:e6:ed:b3:21:3d:a3:8d:01:56:1f:96:
         cb:52:43:1e:2f:cf:05:93:21:97:14:63:c6:18:1b:e2:0d:f9:
         bd:f5:d7:f0:db:a3:bc:1c:7c:75:ed:87:32:4e:2f:93:d9:30:
         48:7f:63:1a:c5:0a:ec:8c:98:6d:94:13:8c:98:94:09:e2:27:
         9a:53:46:80:e5:a2:06:69:56:bd:4b:11:c5:23:ac:24:cc:b0:
         e6:18:be:2f:7c:1a:34:90:4f:4b:96:3b:0e:ba:41:77:41:e1:
         94:6a:75:26:36:85:52:7c:6c:d4:c5:e1:99:64:06:94:54:2a:
         2d:b6:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:59 2025 by rpki-client