Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File:                     71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier:          S2WE4YAhr1cfxqb4Elj5hV/Ng5Gn2xL9zJE2tZx+Dr8=
Subject key identifier:   87:09:68:CE:27:C3:44:79:E5:26:5E:91:51:15:34:AD:4A:05:DD:CA
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer:       /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial:       01987562C0336827F38875ABBD17F2DABBF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number:          1255
Signing time:             Mon 04 Aug 2025 14:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 14:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 14:01:02 +0000
Files and hashes:         1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=)
                          2: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: jHY8X/DcuLgXs0ZAOCgj5UqSqyZ91uBCioUfxu4rNO0=)
                          3: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=)
                          4: EK6XW48thDOhbEqOrZVkF4wNviY.roa (hash: TaMn+E7YE9NMIOz64w+l5qs88ZBiuzDcpLepxVp30kM=)
                          5: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=)
                          6: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=)
                          7: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=)
                          8: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=)
                          9: dLVFM6LOXJ7fgmVbzXYVW8I5oYY.roa (hash: p6zpbFHToZdevuasfH2dIun4+77hBuovd01laS+bKxs=)
                          10: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=)
                          11: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=)
                          12: n8t1FbmmcHRL1T025PodTqR3IcA.roa (hash: 449VA6EYanQ2mGU5FM+jEwpoRl0iEuk30UHtcfYkgJs=)
                          13: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=)
                          14: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=)
                          15: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:c0:33:68:27:f3:88:75:ab:bd:17:f2:da:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
        Validity
            Not Before: Aug  4 14:01:02 2025 GMT
            Not After : Aug  5 14:01:02 2025 GMT
        Subject: CN=870968ce27c34479e5265e91511534ad4a05ddca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:82:cb:21:5d:52:6e:4b:81:6a:b8:b9:00:
                    9f:6e:c6:2d:e5:8d:46:28:a7:fb:c7:b8:a2:8c:01:
                    97:79:69:23:04:d8:15:93:23:dd:f9:a5:9a:84:7c:
                    f0:61:01:79:5a:28:1d:26:2c:cf:69:f4:00:86:bf:
                    7c:73:b6:f6:73:b9:63:f2:27:99:58:5c:d8:0b:21:
                    9c:92:78:5c:69:2c:ff:0f:21:4d:1e:53:67:9b:62:
                    23:e0:ed:45:33:d4:f4:f3:1a:d5:d5:fc:77:88:32:
                    60:99:5f:a9:2f:bd:3b:a8:0e:77:07:8e:78:a6:74:
                    35:04:36:87:45:fd:82:4f:8b:0b:b4:fb:af:12:19:
                    df:b2:fe:c7:2b:aa:c9:8e:73:fd:d2:9f:ed:76:16:
                    53:96:83:41:5d:b8:28:8e:32:ce:af:77:d6:ce:d6:
                    f4:5e:69:d7:a0:06:09:33:63:01:34:6c:81:88:c2:
                    36:0f:df:e5:bf:5f:fc:56:29:43:a0:61:6d:10:c2:
                    c9:09:68:e1:4b:d5:14:03:e7:be:2a:f2:e2:87:58:
                    22:9f:e0:3d:40:df:ad:1b:24:26:37:1b:bb:67:7d:
                    48:4d:91:04:71:03:b7:bf:40:72:f9:ab:a2:8b:5c:
                    36:28:e8:15:49:b5:6c:5f:ac:11:ea:b6:cd:a2:51:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:09:68:CE:27:C3:44:79:E5:26:5E:91:51:15:34:AD:4A:05:DD:CA
            X509v3 Authority Key Identifier:
                keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:28:05:24:d8:1d:b1:6e:7f:8a:81:96:32:e1:74:dc:c2:e7:
         cc:e2:04:16:a1:a3:f5:16:ea:38:24:78:3e:0c:5e:8c:61:72:
         ca:4a:17:10:a8:17:2b:61:80:d7:54:ee:a9:00:fa:18:ee:0b:
         02:af:ab:41:9a:bc:c3:98:10:a8:2c:6c:9f:93:e4:a2:5f:ce:
         dd:f9:21:ab:a2:ee:58:71:fc:b7:34:22:01:5a:12:d1:b8:06:
         3d:d2:93:76:1e:6e:8d:e1:17:9b:a4:c0:8f:6b:c8:b6:08:44:
         15:0c:9d:36:f3:c1:c4:e9:20:32:9a:2f:a8:23:bf:c6:fd:e6:
         a1:67:e0:f7:79:a1:b2:a8:40:96:30:cd:c0:a7:19:51:09:e5:
         d3:f7:84:4c:26:ce:7a:ca:ef:05:21:e9:d3:a5:96:af:c2:ba:
         08:0a:2a:1d:a8:73:3f:c3:59:b0:21:db:7a:cb:48:36:33:73:
         12:1c:30:27:5f:c4:26:8f:b1:9c:6d:79:0a:d9:df:24:52:eb:
         e4:40:58:19:df:14:bc:35:66:38:64:69:3d:b0:45:7b:e3:5c:
         a9:31:bf:d3:c1:b2:42:b0:06:2b:ce:16:fe:8c:67:cd:16:67:
         64:e8:9d:3d:fd:e7:31:87:88:19:19:09:0f:1d:f1:10:15:35:
         c6:0c:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:19 2025 by rpki-client