Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File:                     aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier:          wKOFnmZT4dKv84YEnvd9NenLHyjkv4lOjxO6n/Ij9y8=
Subject key identifier:   FF:56:DA:E7:CF:64:B0:B1:EE:63:E5:7B:32:42:02:3C:D7:F4:EE:50
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       019874BDD86913FCDB668C6CB2BA0A0D330F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number:          14FE
Signing time:             Mon 04 Aug 2025 11:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:55 +0000
Files and hashes:         1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
                          2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
                          3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
                          4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
                          5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
                          6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: BPIqI9CYh5CTsKgThID9oxSE3sx+HJznZL93xNgt7lM=)
                          7: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (hash: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=)
                          8: egq6xFpWrLpO_u50yZL8HaDkVzk.roa (hash: hw9YCYHpnSpyNNxfxUiBMiNI5Kne7OkazLDcgOYFclU=)
                          9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:d8:69:13:fc:db:66:8c:6c:b2:ba:0a:0d:33:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Aug  4 11:00:55 2025 GMT
            Not After : Aug  5 11:00:55 2025 GMT
        Subject: CN=ff56dae7cf64b0b1ee63e57b3242023cd7f4ee50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:b0:cb:1a:1f:76:36:6d:2f:c2:20:ea:35:
                    5c:e3:6a:2a:99:9d:3e:cc:c9:d8:b7:00:c7:d0:4c:
                    19:09:5a:10:6e:bb:5f:8b:81:72:ae:9c:97:14:36:
                    59:e9:66:fa:89:57:e9:8f:06:6a:51:8d:cf:30:58:
                    bc:df:08:7e:bf:32:09:0c:94:41:e4:a4:30:8b:26:
                    1d:1b:93:cf:9d:ef:91:81:74:86:d2:07:a5:2c:3e:
                    71:77:24:ab:83:78:82:2e:33:6e:8c:37:de:22:e9:
                    47:bb:6c:fc:22:4d:82:7f:76:18:31:4a:d1:f3:da:
                    56:17:3c:12:be:9d:07:58:57:fc:77:ce:af:ae:30:
                    98:4b:8b:35:5c:fa:8c:c0:9d:2f:96:9b:ac:df:04:
                    ab:01:2d:3e:df:d3:f5:d3:c9:32:38:26:f5:82:26:
                    c2:4e:43:88:19:27:e8:a8:e1:f6:83:a2:a0:78:51:
                    8d:5a:f5:12:9d:20:d3:de:0b:79:5d:b4:f2:16:d9:
                    85:75:66:f7:6d:8c:72:c5:8a:f1:e0:fc:7e:e3:3b:
                    30:9e:48:cc:6a:7e:02:75:f1:1a:1c:b0:f6:af:91:
                    5d:90:ea:21:de:96:ee:29:98:7d:ce:45:e9:d4:21:
                    3b:56:42:e4:86:12:97:d3:c1:d9:cf:37:67:cf:fc:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:DA:E7:CF:64:B0:B1:EE:63:E5:7B:32:42:02:3C:D7:F4:EE:50
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:5b:f4:26:17:f7:7b:ca:b7:5d:97:62:5a:13:4e:73:57:
         e9:86:fa:7a:9d:45:93:46:9e:74:05:50:8d:ab:d0:ff:e4:20:
         ff:82:ba:34:43:7c:fa:37:17:ed:df:97:93:f8:74:06:69:aa:
         3d:f3:7b:b0:25:c9:e5:c7:b2:13:42:a6:d4:2d:f0:87:d7:55:
         64:93:ff:d3:5e:1f:22:aa:7f:88:7c:4a:be:cd:0d:36:78:0c:
         e9:20:18:36:93:84:ff:12:e1:dd:a2:28:1d:a9:6b:7d:47:04:
         a8:be:7c:01:cf:4e:7c:45:36:4f:08:6d:00:39:26:3a:85:13:
         de:33:bb:d3:ff:18:f0:0f:c5:8d:0b:29:a2:61:c0:88:c0:30:
         fc:a7:f6:f5:98:f0:77:f5:47:8f:85:d9:2b:a2:75:73:55:48:
         68:c9:ed:a7:54:f0:ba:e0:30:73:37:e5:a4:f3:d3:32:7d:07:
         5a:05:71:84:c3:26:af:4c:d7:05:b5:17:dd:6e:20:4c:79:f5:
         0d:75:17:48:09:4c:ee:85:49:9e:30:ef:ff:76:80:89:eb:85:
         3b:f7:4a:db:55:3f:13:bc:66:4f:e2:8a:e8:6b:6b:06:5a:b6:
         70:f7:63:74:f8:6b:49:0f:36:88:7a:52:de:14:03:05:42:cf:
         b4:c1:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:25 2025 by rpki-client