Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File:                     R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier:          M8LfxYbTq3t29vz0g7UC/BQucMBsFtZuzcHnaEWt90E=
Subject key identifier:   34:8C:65:45:24:AD:1F:AB:E5:07:4E:15:69:0F:F5:A8:98:6D:42:06
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       01988FC7AFCC2F75C2E4ACAE218C22D8EBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number:          0E00
Signing time:             Sat 09 Aug 2025 17:01:25 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:25 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:25 +0000
Files and hashes:         1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
                          2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: zByOIOHaThNEfSu2cvULkYEgydTMZpVPOckwnEham8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:af:cc:2f:75:c2:e4:ac:ae:21:8c:22:d8:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Aug  9 17:01:25 2025 GMT
            Not After : Aug 10 17:01:25 2025 GMT
        Subject: CN=348c654524ad1fabe5074e15690ff5a8986d4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:29:04:e5:5d:f8:16:e0:36:d4:03:e4:79:
                    87:b5:f3:56:6d:aa:f2:52:75:61:7b:95:8e:57:d1:
                    5f:df:62:9d:05:ff:52:b8:17:fd:12:05:57:a5:14:
                    b3:eb:bd:8d:a5:e3:37:46:80:f0:0a:04:b1:d5:cc:
                    8f:e7:63:ed:47:10:d9:bf:c6:72:e5:61:a7:b0:d7:
                    7e:74:ac:02:e6:35:bb:bf:c7:92:4a:f7:15:ea:88:
                    a3:18:a4:f7:9e:ac:b6:00:1b:f0:03:0e:df:dd:2c:
                    3c:37:3c:76:11:26:a1:fb:cf:d0:bc:4e:c4:24:9a:
                    43:24:86:72:72:49:3c:1f:f0:25:6a:1f:ac:20:ff:
                    36:cd:c3:3c:f5:5d:a3:5d:67:33:16:25:d8:2e:7e:
                    fc:a6:53:60:eb:64:47:35:f9:71:d2:50:b7:f0:f4:
                    dc:43:b0:5c:d3:cf:d5:4d:61:61:3a:e8:47:83:2c:
                    8c:f2:d1:2c:95:31:fe:99:28:01:8a:88:15:af:14:
                    7f:4a:1e:87:ba:03:ea:ef:fc:f7:2c:6d:01:c2:bf:
                    dd:ae:ce:d0:f9:19:e7:db:eb:17:23:c0:a9:26:92:
                    4c:cc:11:79:15:46:51:78:70:4b:cf:ea:d4:3c:3e:
                    03:06:46:e8:71:6d:12:76:e9:56:97:7d:59:28:40:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:65:45:24:AD:1F:AB:E5:07:4E:15:69:0F:F5:A8:98:6D:42:06
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:23:d1:f1:97:25:9e:32:81:77:6a:83:04:f3:e2:f5:e2:
         69:7d:52:7d:9f:cd:4f:26:09:66:90:5a:38:cb:f3:09:da:1f:
         b7:60:4a:fb:46:ab:b5:55:f3:91:77:99:a3:c4:a4:b1:63:59:
         0c:b6:2b:ae:70:80:b7:34:6d:44:ce:f6:1a:d1:05:52:1c:9b:
         1a:89:11:11:38:f4:fe:f4:b7:74:32:a8:6b:42:0d:50:1e:8e:
         55:e4:7f:75:0a:f9:5a:df:1a:92:b5:d1:62:5d:3f:81:95:ad:
         43:2b:ac:bf:41:4b:df:f1:17:3e:3e:0d:4f:e9:1e:17:a8:c2:
         c0:d7:01:8e:ed:43:49:34:97:bb:8f:13:d3:85:6b:a8:df:2e:
         c2:ef:cf:76:73:1f:52:e2:bc:1c:13:5d:cd:19:e9:d3:d9:fb:
         b0:36:ac:99:5e:46:67:b2:16:e1:43:0f:89:90:a5:ab:3b:b3:
         db:97:0a:12:4a:0d:01:d7:d3:eb:72:a5:ac:66:df:f9:63:18:
         69:f3:1e:09:16:2c:12:49:cc:15:d7:60:7f:71:af:87:4f:d5:
         40:2b:b3:c1:4d:87:23:27:53:46:4f:15:16:3f:d2:fd:ae:67:
         e2:94:4d:b9:1c:3c:85:f5:2f:04:08:36:a6:a4:ce:61:b9:d6:
         c2:0f:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:06 2025 by rpki-client