Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          tc1KFVBeaUr+mN6jPRx+C17rHPb8kaLJnmQ/zJBuQ/k=
Subject key identifier:   1F:70:47:B8:A2:7A:1D:07:58:55:77:F3:E4:3A:09:AF:5D:EC:FD:E4
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01987373FB66DCD701F35A24C09D96D312AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          12E8
Signing time:             Mon 04 Aug 2025 05:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:37 +0000
Files and hashes:         1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=)
                          2: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=)
                          3: dpEUD5Ic4PND631hV_WLYlzOm-Q.roa (hash: jkB5/8OIzhFzu0rc7J2Og2F1itTEOg0Rs+XbStzpkvQ=)
                          4: mOMTOzklCOsSuB9v2boILVZdvLA.roa (hash: mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=)
                          5: pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa (hash: L3xcP7+zXuAEnHkbFJ8G7AgoW2gbRSxFSqISwohVgeo=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: E70y9iJ01nFCgk9yViFjKQfsohPsSu1NrWyeCfy3OR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:fb:66:dc:d7:01:f3:5a:24:c0:9d:96:d3:12:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Aug  4 05:00:37 2025 GMT
            Not After : Aug  5 05:00:37 2025 GMT
        Subject: CN=1f7047b8a27a1d07585577f3e43a09af5decfde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:a7:cc:de:f5:29:9e:ba:fb:8d:2d:9a:da:
                    23:32:0f:12:7d:37:0c:56:6e:1e:20:5b:7a:5c:0f:
                    ba:1f:db:95:66:61:1f:9e:e8:1c:3c:21:29:97:6b:
                    4d:88:dc:65:ca:3b:7b:c8:5c:ba:aa:2d:15:9d:0a:
                    c9:6c:5e:91:69:42:47:fb:67:af:c4:39:4a:dc:4d:
                    08:c5:78:cd:6c:af:4b:04:98:5d:69:b1:68:a8:58:
                    25:6f:ee:65:ce:7b:d2:37:38:d7:f9:b1:56:18:7a:
                    eb:c6:7f:fa:cc:4e:c2:16:4a:8a:0b:91:b1:f9:c0:
                    89:7f:94:2b:15:f4:16:d8:d2:cb:45:65:3f:df:43:
                    97:10:e5:71:01:79:02:a2:fc:53:3a:3d:0e:56:3f:
                    2e:b5:23:dd:cc:ac:30:cd:dd:ad:86:fa:f4:bb:c0:
                    39:ae:59:f8:a3:1b:51:42:ed:84:4a:dd:1c:68:95:
                    3e:97:11:8e:f3:cd:db:79:e4:b8:0f:67:06:e5:9f:
                    00:4d:5e:a3:17:80:7a:18:90:bf:04:4b:6e:a9:d2:
                    d7:03:0d:70:3b:b5:1a:93:bb:f9:9d:a8:fc:e5:2e:
                    d0:c4:a8:bc:bc:8b:56:29:92:97:a9:ff:95:cf:4e:
                    54:f1:fb:f6:43:ac:83:e5:92:31:2a:83:ff:18:4d:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:70:47:B8:A2:7A:1D:07:58:55:77:F3:E4:3A:09:AF:5D:EC:FD:E4
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:cd:5a:ba:5d:54:99:a2:8a:21:e5:66:03:ec:51:9f:8e:
         21:ed:12:c0:52:a4:05:33:25:3e:40:69:30:87:54:b5:ee:21:
         ce:c2:2c:13:20:88:cd:fc:e2:2f:db:6c:8c:7a:3f:f5:67:a2:
         2f:39:59:ae:71:9e:f7:6a:07:0c:8f:73:34:0e:40:5a:d9:64:
         a6:8a:84:df:aa:2c:93:42:a0:cc:d8:91:24:e7:cb:7d:62:53:
         3f:d3:62:e9:d6:36:5f:43:dd:83:cf:c8:eb:1e:29:84:ec:b8:
         4b:b4:b2:15:19:b8:bb:ea:fe:26:5e:f0:65:20:50:b8:39:c0:
         69:ae:4a:dd:99:f2:3b:e3:8c:16:7f:60:13:0c:1f:6d:e6:cf:
         0a:c6:57:43:a9:8e:e8:22:52:d6:07:51:d1:71:1b:62:b6:0d:
         90:35:38:e8:d7:0c:e2:ae:39:9b:3a:1a:5c:2b:a4:f0:62:3a:
         2a:77:3e:1e:34:0d:94:4e:f8:ac:9e:0a:c5:3d:35:c9:f2:a6:
         2a:64:bb:be:54:37:30:03:45:60:ba:56:4f:8f:ba:0f:9c:af:
         1c:67:32:61:86:92:5b:f0:6a:b5:97:28:50:ab:03:4b:df:ec:
         ff:23:81:4a:9d:ee:d6:2c:65:33:ef:36:2c:e7:2e:da:fd:9f:
         92:2c:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:14 2025 by rpki-client