Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File:                     sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier:          0PCWBd43zrWMf1mkA8GcurbOh6Bf7o3Jz7V5DCL/9jQ=
Subject key identifier:   B7:48:11:CE:10:46:51:3A:83:09:33:57:21:EB:98:23:AD:38:02:73
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer:       /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial:       01987374770863D765D1E0753E050BDB4F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number:          052D
Signing time:             Mon 04 Aug 2025 05:01:09 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:09 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:09 +0000
Files and hashes:         1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=)
                          2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: Xi+GIDw7zcqCHjKiy9aS0ZsPTJQ6RHpbQRwaGVvo5+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:77:08:63:d7:65:d1:e0:75:3e:05:0b:db:4f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
        Validity
            Not Before: Aug  4 05:01:09 2025 GMT
            Not After : Aug  5 05:01:09 2025 GMT
        Subject: CN=b74811ce1046513a8309335721eb9823ad380273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:40:a5:ab:fa:46:99:5c:17:10:f2:be:55:
                    07:0d:32:05:66:56:50:73:6f:25:c4:25:5f:42:53:
                    65:a7:66:1f:78:5a:63:f2:49:65:3a:53:76:bb:9f:
                    98:26:ec:04:1a:40:a4:b6:5c:02:50:31:52:63:4b:
                    ec:c7:d2:ea:8c:37:5b:e3:c4:ee:b2:56:9a:aa:73:
                    db:5e:ab:d6:37:a9:5a:06:6a:94:14:ca:be:13:ad:
                    89:7e:02:7a:bb:4e:c1:7a:85:c9:9c:fe:13:b8:a4:
                    b4:fb:d0:ee:57:da:2c:91:05:58:a3:60:90:e4:0b:
                    3c:64:46:b2:c4:de:9f:d7:72:b2:c5:bc:29:3b:d1:
                    26:48:ed:31:b6:04:c2:d7:24:5a:b6:99:e4:6d:f5:
                    36:fe:b4:37:94:87:84:52:c7:f0:32:a8:e5:19:39:
                    c8:3a:57:ef:3d:b9:2b:f3:d6:05:9b:1d:3d:04:7c:
                    2b:69:c8:ac:66:dd:07:40:34:2a:51:3a:d5:07:00:
                    84:d5:d5:bf:ae:c1:98:53:c9:94:0e:ec:79:47:c6:
                    c3:25:cc:63:8a:a5:e2:b5:5f:bb:38:8e:92:59:a4:
                    8e:10:7f:1c:8c:06:38:8d:1f:80:d3:49:54:86:57:
                    3f:7c:c2:f9:4e:7a:00:96:83:80:e7:fd:b8:2c:ef:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:11:CE:10:46:51:3A:83:09:33:57:21:EB:98:23:AD:38:02:73
            X509v3 Authority Key Identifier:
                keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:04:34:eb:5e:8e:ac:88:c8:5a:8e:c7:d7:f0:8e:96:20:68:
         dd:3f:12:9f:cd:6b:54:1a:d5:9c:d3:b1:16:65:e2:99:7d:b3:
         2e:b2:6f:e7:9f:fc:4f:b5:f0:ee:83:cd:f3:3a:ed:bf:83:26:
         f2:4f:51:02:e0:47:c0:8f:03:f3:25:b3:4b:45:06:51:8b:9b:
         6a:59:f2:3d:c9:b8:c8:82:fc:ce:ee:9a:25:38:be:6f:af:ae:
         e9:dd:bc:71:ac:a0:58:5f:01:df:5b:e3:d4:fd:bb:a2:5a:2d:
         c6:cc:42:8c:74:63:4c:95:60:d9:bd:46:52:89:71:06:46:7b:
         fb:cc:5e:da:89:58:e4:f1:b3:79:18:b2:8c:96:c4:3d:d5:a0:
         6e:54:2b:19:9b:22:08:9f:cc:35:3c:90:f0:9b:81:2d:9a:e3:
         b3:53:0d:3c:cf:ec:77:a9:85:4b:c3:a8:05:6b:0f:97:6a:8f:
         46:0c:5a:fc:54:59:26:8e:6a:60:e1:bf:03:95:2b:6c:5d:94:
         bb:85:e4:3c:6a:d4:18:da:4f:8d:65:d5:8d:90:1f:8d:c4:ff:
         72:73:31:57:85:9c:6e:f5:d6:88:3a:da:dd:47:64:6e:0c:1c:
         ac:af:8c:d1:d9:69:4b:8f:29:6e:13:c5:b0:fd:3b:8c:3c:bd:
         9e:46:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:51 2025 by rpki-client