Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          z5kfRWUlX60SCeLkBCHDvRGmvbwmXS8o0X2KlVTCCBI=
Subject key identifier:   7F:96:58:F5:A1:E6:6C:A9:77:D4:43:3E:7F:F3:63:03:1A:2E:5F:8D
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       0198733D04794053C7E5BAD14BA08EB9DF26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          0121
Signing time:             Mon 04 Aug 2025 04:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:35 +0000
Files and hashes:         1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: MsZFdZhK7Gk5XQsngyvMs8HZE/14nELco35CsaYNMV0=)
                          2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
                          3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:04:79:40:53:c7:e5:ba:d1:4b:a0:8e:b9:df:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Aug  4 04:00:35 2025 GMT
            Not After : Aug  5 04:00:35 2025 GMT
        Subject: CN=7f9658f5a1e66ca977d4433e7ff363031a2e5f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:2f:bd:ae:84:d3:7c:7e:59:c4:27:51:5e:
                    e5:5c:d7:08:b7:46:32:dc:4f:b8:5f:e2:12:83:0a:
                    ab:3d:06:81:c7:8f:d4:1b:70:a3:ed:91:4c:22:f1:
                    ba:7b:05:0d:17:98:8d:8c:6b:17:f5:03:3a:7e:73:
                    36:8a:7c:2b:0e:3d:fe:a6:8e:e5:c0:b5:28:14:59:
                    da:e2:9e:53:a9:8d:df:04:5d:38:8e:c1:d8:ff:57:
                    2c:29:49:ee:e1:bc:87:ed:3c:9c:c9:fd:fe:50:7c:
                    9b:31:06:20:c1:8a:96:e8:2e:7b:80:f3:de:d1:eb:
                    99:41:39:f7:4a:97:db:cc:6a:e5:23:8d:bc:97:94:
                    30:05:0f:77:29:fe:d0:c9:9a:b0:25:9a:cb:3c:a1:
                    d1:e3:bf:45:0a:f4:6d:9e:13:e7:55:67:91:52:32:
                    6e:f6:11:ac:51:c9:ab:29:95:bf:13:28:26:c7:45:
                    d5:6b:e5:d6:61:49:96:54:09:5a:0f:fb:e8:ed:cf:
                    d5:79:9f:5d:54:79:9a:77:38:00:e8:b2:cf:cd:cd:
                    df:c3:5d:e4:b7:4d:e7:ea:4a:3b:4e:58:86:6e:2f:
                    6b:d4:73:21:b9:f3:21:b2:31:41:bf:34:e2:ca:df:
                    b0:c1:a9:e8:66:f8:e3:c9:5d:38:d2:1a:46:cf:7b:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:96:58:F5:A1:E6:6C:A9:77:D4:43:3E:7F:F3:63:03:1A:2E:5F:8D
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:3d:19:82:e5:12:1f:4d:e7:6d:58:07:68:1f:d7:1f:90:
         67:6e:23:b8:c5:47:7d:d0:2b:f6:19:c6:c9:41:f4:26:53:77:
         08:c6:f5:51:b3:aa:8e:0e:01:8b:66:d8:65:37:63:81:f8:76:
         7d:c4:e6:46:aa:68:67:93:13:32:15:e6:4a:2e:5e:70:a8:a4:
         3f:0a:11:07:91:3d:b8:a2:30:db:d7:8d:ff:a3:61:1a:cc:c1:
         17:7d:50:1c:75:69:29:d3:07:a5:24:3e:4c:7a:c3:20:a3:a5:
         8b:36:89:e4:f7:4f:4a:1b:9f:17:14:9f:17:d6:87:9d:ba:c9:
         ff:be:54:a4:3e:ed:fe:72:8d:f8:51:01:0c:e3:d6:2e:b7:79:
         9f:81:0b:5e:31:de:bf:c5:51:73:92:4a:a9:8b:d8:db:a4:2e:
         79:40:22:16:05:dc:fb:04:43:b5:cb:00:2d:be:75:dd:ae:21:
         5a:2b:52:ec:88:2b:96:23:2e:35:63:0a:18:b6:ff:1e:5d:20:
         2a:00:9f:50:21:27:8c:92:8f:6f:8d:bf:10:3e:69:7b:b2:e9:
         b5:f4:99:1f:6d:2f:4d:80:4f:ea:9e:6b:67:a1:29:5e:30:aa:
         cc:38:6d:21:3f:84:49:b9:e2:00:a0:38:04:c9:b5:d2:43:4f:
         fd:87:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:05 2025 by rpki-client