Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File:                     iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier:          wkB0Y62RHp9ElSmSbCx74/DwnHX65QwnkkHIIFI8Xmo=
Subject key identifier:   A1:BF:3B:90:A1:14:29:B0:4B:2C:1D:73:83:56:23:96:26:5E:53:EE
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer:       /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial:       0198752BC0020970609CA6451FE66C760B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number:          11C0
Signing time:             Mon 04 Aug 2025 13:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:58 +0000
Files and hashes:         1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
                          2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
                          3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: kMQRvlP/ueL0xUCUmVPTop1xBokQ3/gdQnosObdhoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:c0:02:09:70:60:9c:a6:45:1f:e6:6c:76:0b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
        Validity
            Not Before: Aug  4 13:00:58 2025 GMT
            Not After : Aug  5 13:00:58 2025 GMT
        Subject: CN=a1bf3b90a11429b04b2c1d7383562396265e53ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:d5:28:0a:e3:30:a8:f4:ec:f9:49:e0:01:
                    76:84:f8:bd:82:f4:4f:bd:57:11:5c:7b:3e:cc:59:
                    85:99:e0:bf:f3:96:06:d1:f8:f9:cc:bb:ee:f4:f1:
                    1f:c9:ef:88:d9:47:31:6a:e3:d4:29:48:9f:9d:57:
                    95:b4:8e:63:12:06:eb:65:6c:00:45:d0:00:e9:5c:
                    28:fc:84:a7:b9:6e:2b:de:69:46:db:97:72:48:64:
                    e9:3b:f0:ea:c5:54:ab:98:8a:3f:11:23:ef:8c:d8:
                    69:cb:73:dc:28:0b:75:c3:11:3b:20:88:c5:7f:f8:
                    bb:bc:5f:84:80:60:02:da:b7:85:8f:d8:f4:52:fd:
                    46:8a:54:6c:b7:d2:e4:0d:bc:48:e3:17:ca:f9:3b:
                    d4:94:21:de:c8:55:61:d3:fc:21:7e:17:5a:11:ed:
                    d3:d3:b6:27:44:8e:03:71:24:40:96:21:9e:3b:4c:
                    c2:60:e8:d5:41:48:96:ce:7f:ea:32:88:31:81:9d:
                    bf:fc:89:9d:a9:eb:53:7b:48:bd:ec:1a:94:d2:39:
                    37:c9:3e:34:e5:b7:c8:e7:df:4b:0e:e3:97:dd:23:
                    5d:99:bf:96:d6:56:57:35:c3:fb:77:b5:aa:3a:aa:
                    75:57:20:f4:94:44:5e:10:bf:95:a9:a0:41:1c:84:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:3B:90:A1:14:29:B0:4B:2C:1D:73:83:56:23:96:26:5E:53:EE
            X509v3 Authority Key Identifier:
                keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:53:3f:84:de:06:bd:cf:9b:a3:c3:65:3a:68:e4:58:af:
         fb:09:df:22:c9:33:02:8e:33:e4:33:a6:76:bf:60:e4:63:93:
         53:39:f3:0d:05:e1:09:c1:5f:e9:db:23:2d:62:b8:58:88:c7:
         8f:35:b1:74:91:3f:75:de:4a:44:30:fd:ef:b4:c7:88:07:c3:
         1a:70:a1:8b:b6:10:f7:ed:1d:4e:13:fc:8c:8f:1a:87:cc:ff:
         ce:ad:4b:91:70:f6:c6:59:78:b8:34:52:0c:61:ea:1f:9d:44:
         53:49:7c:d2:59:14:59:6b:29:b6:ec:37:9d:f1:9a:b4:e6:ef:
         dd:e2:01:82:83:88:13:2f:a1:01:73:ef:d4:e1:31:01:72:e6:
         9d:e4:6c:91:73:87:e2:0f:5f:29:ad:ba:28:bb:2c:92:58:d6:
         e4:b8:e0:9b:25:86:d4:72:3c:c5:8a:e1:65:6f:ce:b1:ec:a8:
         7d:86:62:10:42:20:82:0d:79:11:00:33:a4:ed:d1:20:69:bf:
         fe:f5:f1:f9:15:05:03:c2:97:ea:d7:0e:c1:2e:34:2d:db:e7:
         76:7e:6f:22:f6:07:94:a9:7f:42:6a:c6:72:b6:89:3b:c7:ef:
         79:1d:71:58:98:3b:17:da:90:43:b6:78:b3:26:ee:77:e9:72:
         82:9b:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:22 2025 by rpki-client