Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          olZDF+A00F6NzrDaF4cC1vjQ8o4mRS+pHEAWdckPRSI=
Subject key identifier:   93:37:4D:17:BC:75:33:5F:0C:BC:9F:54:A1:96:23:7C:B6:6C:2D:14
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       019873E28B790E777820B2F183FA040942DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 07:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:23 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: ckvq91z8dwSUbOgyuEbLUbIP4BYj4FxBw5UHBE8D6pw=)
                          2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:8b:79:0e:77:78:20:b2:f1:83:fa:04:09:42:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Aug  4 07:01:23 2025 GMT
            Not After : Aug  5 07:01:23 2025 GMT
        Subject: CN=93374d17bc75335f0cbc9f54a196237cb66c2d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:5d:5d:ac:f4:04:c7:d8:b2:b9:0d:ed:d9:
                    6c:81:64:85:9d:a5:e3:a6:84:52:45:91:d1:72:da:
                    cd:43:1c:6a:a7:22:99:84:17:6d:ae:a9:0e:cb:c4:
                    0f:c7:28:06:45:2f:f8:29:7e:32:e6:74:24:40:52:
                    48:72:f1:a2:14:70:d7:d4:6b:89:9a:59:ec:41:0f:
                    f8:d1:ef:9a:94:0d:aa:e9:41:b2:f9:30:36:b2:eb:
                    7b:5d:10:7d:a8:c2:40:a2:5e:ff:97:f4:cc:5b:cb:
                    03:9c:08:4a:5d:e2:7e:74:58:ff:41:dc:cf:99:e8:
                    b0:d7:5e:ba:87:e2:a0:d8:7e:ee:0e:2f:91:0b:17:
                    ba:c3:22:e1:bc:10:b5:d0:2e:80:30:2b:c8:1e:40:
                    ce:bc:11:0a:d4:03:f6:33:0d:31:d1:2c:f2:8e:a6:
                    d8:71:58:17:50:0f:ad:ab:9b:7c:1c:c8:72:b4:77:
                    8b:72:b5:40:51:72:a9:c6:e4:51:72:f7:c9:a9:ac:
                    50:1c:ea:ce:24:dd:ae:d1:92:32:ff:cf:2f:1d:8f:
                    03:80:b8:78:4f:9c:5c:e0:66:fa:24:51:b4:5f:1d:
                    0c:de:53:d0:0a:69:db:78:99:b3:55:84:77:60:ac:
                    cb:a7:ea:4b:22:58:a8:7c:ed:1f:b2:3e:8e:2e:8c:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:4D:17:BC:75:33:5F:0C:BC:9F:54:A1:96:23:7C:B6:6C:2D:14
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:31:78:4d:fa:f1:b5:63:89:30:4e:8d:2b:db:b2:be:86:
         ef:c8:03:c5:a3:c2:16:5e:55:bf:b7:d7:a5:8a:92:7d:18:84:
         b0:02:77:0e:73:cc:70:81:1c:b1:dd:af:1c:e9:63:65:54:ff:
         f1:a5:91:7e:06:b8:fc:f9:82:ec:11:77:38:d6:67:dc:7a:5a:
         60:9d:95:0c:5a:df:53:46:c2:7f:14:56:93:90:0d:9d:1b:9e:
         04:06:0a:af:a3:78:1a:80:d6:3c:96:04:f1:fe:c9:2f:8a:95:
         7d:26:9b:89:03:10:82:f1:b1:08:a1:45:02:c9:69:7a:f7:36:
         e2:07:bc:aa:df:f2:e0:93:d8:e0:9e:c6:88:31:31:fc:bc:3c:
         1d:ad:53:5a:ab:ff:47:2a:3f:cb:5b:f0:ca:03:da:06:fc:df:
         34:a6:0b:ba:2a:ff:83:b7:4b:a5:cd:d7:98:98:b8:3d:44:b1:
         ab:6a:44:99:46:34:79:cf:47:2d:f8:1c:0e:8c:9a:b7:d6:12:
         2c:c1:df:da:45:e2:31:36:89:30:e7:ad:43:d7:41:49:02:b0:
         70:90:97:2a:97:cd:db:74:24:37:bd:ac:f1:7a:03:39:1c:00:
         53:47:0a:a2:9d:0f:9e:99:42:63:d8:fe:4d:a5:bb:71:a6:48:
         64:48:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:42 2025 by rpki-client