Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          Yx17o4VaXgKTprysQPuUAOlgdedBHl90huAqdoL8UGE=
Subject key identifier:   88:B2:A0:3F:C5:7E:7A:3A:25:25:47:6A:31:12:9D:4F:BD:FC:B5:3D
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       01987418F33D24BC9624CF8742570C07569F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          15AA
Signing time:             Mon 04 Aug 2025 08:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:48 +0000
Files and hashes:         1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
                          2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: jZ3oz0/8zswsIwIk2kw11BObwIok6lyVNFe1eG/gWe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:f3:3d:24:bc:96:24:cf:87:42:57:0c:07:56:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Aug  4 08:00:48 2025 GMT
            Not After : Aug  5 08:00:48 2025 GMT
        Subject: CN=88b2a03fc57e7a3a2525476a31129d4fbdfcb53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:d2:d3:fa:f6:9b:d7:f4:a4:e3:53:3c:24:
                    b5:7d:1a:1e:37:b7:29:56:57:e7:da:14:25:bb:71:
                    f9:e8:c0:96:f4:21:49:46:c5:0e:c8:78:ca:1a:a5:
                    bf:38:40:2c:25:1d:d4:26:03:6a:1a:fa:ad:20:5a:
                    06:4b:01:f1:95:5b:39:51:de:cb:58:ac:e4:0d:0c:
                    e2:45:cb:18:68:70:09:aa:82:e9:c9:45:65:bf:a9:
                    e6:e4:52:a7:dd:8a:ce:5f:d5:5b:1a:13:6c:26:1f:
                    ea:ce:0b:47:b4:98:62:e2:a5:9e:8c:f1:a2:13:5c:
                    07:ed:21:a4:54:1e:62:17:2c:62:6f:39:1b:b9:48:
                    09:d4:8c:04:ab:a8:40:69:6e:f6:dd:e4:68:64:dd:
                    be:c9:77:f2:db:17:55:d8:59:84:1f:db:79:cf:f9:
                    75:f1:02:80:a0:e0:4e:04:4b:23:bf:f3:f1:ef:e2:
                    af:6a:b2:a2:e5:85:eb:a4:5a:1d:f2:3e:38:2b:7a:
                    e5:4d:d1:ad:c5:c4:26:17:f8:0d:a4:e4:ab:aa:aa:
                    8f:39:96:dd:4b:b8:50:24:fd:03:ee:83:af:4f:b8:
                    d0:93:85:e6:d8:ce:f7:e3:8f:93:28:f0:48:23:90:
                    92:db:3e:33:fa:7b:04:1f:3f:c8:8e:db:54:bd:50:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:A0:3F:C5:7E:7A:3A:25:25:47:6A:31:12:9D:4F:BD:FC:B5:3D
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:47:90:4d:66:e1:e8:cc:55:64:06:7e:15:a5:ba:75:47:94:
         2a:10:1f:a4:7f:a3:0e:d2:60:5e:e7:39:0e:2a:b2:ee:2c:30:
         e7:f0:10:d7:9b:aa:7e:3f:aa:36:91:59:8c:af:08:7a:ec:4f:
         d1:fa:fb:70:c9:72:75:24:c0:ad:1e:f3:bd:7d:6c:ab:6d:a2:
         84:46:c0:31:48:6f:d6:88:55:08:2c:49:bd:b5:16:52:d6:c5:
         a4:bf:20:86:35:f5:e9:b3:d6:5e:d1:83:f8:3a:24:75:c8:13:
         ae:0e:4d:2c:c5:2f:a4:82:b4:f4:80:21:0c:54:39:65:11:42:
         92:3b:4e:c2:bc:81:bd:55:ce:6d:5b:0e:80:09:22:7a:57:0d:
         df:d4:3e:77:44:73:a9:07:60:e7:30:a5:ff:e7:91:45:25:0d:
         60:2d:9d:a6:cc:6d:18:1f:70:2a:e1:8f:47:a9:cf:0d:18:73:
         ca:f2:eb:f6:ff:3d:73:9a:d1:9c:52:9c:62:74:ca:89:d4:1b:
         0c:6d:74:46:20:d6:09:95:b7:33:ad:75:9a:17:c9:82:09:05:
         b7:af:ae:f7:39:f7:9d:d9:94:e4:d4:cf:66:4a:19:fc:cf:76:
         dd:dd:f9:19:e2:f2:2d:c4:50:1c:82:17:8e:ec:d9:f4:9a:89:
         fe:bb:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:55 2025 by rpki-client