Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          RcBS00RbOxjWmY1MU9gcbWWzC7J1rjvO7pUXRtrFHU8=
Subject key identifier:   A3:49:51:8C:B7:05:69:CB:7C:EF:AD:69:11:70:89:8F:18:AD:35:A5
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       01987373F0F4D2964AF6FD387B83BB4DC7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1630
Signing time:             Mon 04 Aug 2025 05:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:34 +0000
Files and hashes:         1: 1fKC4KlaigxvzJPCnKhmCCUh-Xk.roa (hash: 9k1E+nI8fcOzCgY/dKFDHJJgbLXTinSFoPGIrR08t58=)
                          2: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=)
                          4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: Z8GM9jZLSUaWZRtBb3FWGp9f4T0Bz/xHpIK9rQWOO9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:f0:f4:d2:96:4a:f6:fd:38:7b:83:bb:4d:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Aug  4 05:00:34 2025 GMT
            Not After : Aug  5 05:00:34 2025 GMT
        Subject: CN=a349518cb70569cb7cefad691170898f18ad35a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:2d:de:cc:56:d0:7e:c2:24:eb:a1:80:57:
                    5e:21:e1:ac:23:5b:07:b8:b0:00:cc:d1:45:38:bd:
                    8a:d3:d2:9e:a0:2f:8c:f0:5c:e0:ae:40:e9:fc:96:
                    52:35:6b:44:e8:54:0b:65:1a:97:a9:d1:cf:43:27:
                    dd:6d:54:d8:5a:32:70:94:a3:b4:01:96:15:e3:12:
                    5e:65:8e:0e:8e:a5:e1:66:b5:35:3a:06:bf:f9:f9:
                    1a:78:98:68:43:85:18:80:08:34:f9:f5:4c:8f:fe:
                    3d:5c:06:ba:9c:21:91:38:e0:c7:d5:8f:4f:10:ec:
                    8c:f7:b3:73:ce:53:48:26:6a:27:16:0c:09:23:f4:
                    a9:0e:90:63:4d:1f:04:cf:e0:ab:62:9c:44:01:ef:
                    28:98:36:d5:db:18:cb:c8:23:c8:b8:a1:61:d9:74:
                    4c:c4:52:b2:62:20:2f:88:31:75:7b:21:e9:51:f8:
                    6f:df:cb:bc:eb:ae:d1:bf:8e:e9:9d:92:a6:df:be:
                    39:59:ef:06:11:e4:80:12:75:82:8c:f9:0b:ce:ee:
                    e9:f2:a8:88:d7:54:f2:e6:c0:0f:9e:80:1d:44:ac:
                    dd:57:46:22:8a:13:a0:d8:b3:64:59:fc:7b:97:7a:
                    8a:4b:8b:d1:31:b3:c5:20:fe:c7:84:1c:1a:d9:dc:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:51:8C:B7:05:69:CB:7C:EF:AD:69:11:70:89:8F:18:AD:35:A5
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:fd:fe:b2:2c:29:1d:f7:12:a2:fb:63:01:dd:6a:55:56:
         6d:c1:76:a7:71:7a:e4:b0:4c:5b:57:32:55:d7:0b:9d:a6:1a:
         df:d7:22:9a:db:48:f0:8b:ca:1c:28:7b:3c:31:d8:60:00:f3:
         96:2d:ba:69:08:a2:29:27:52:75:38:80:92:f5:5a:5e:db:36:
         38:05:ee:1b:18:e1:0e:fe:eb:9b:b6:1c:b3:94:6e:bb:52:44:
         19:dd:29:26:a8:c8:7c:3e:4b:25:5a:a3:71:e9:97:24:b2:71:
         b4:a3:37:79:86:9f:58:eb:9f:0c:3e:1d:e7:e4:fb:45:cd:02:
         4e:4f:b8:a8:c2:72:bf:a0:d8:b3:3e:60:d2:d8:4e:3a:da:b6:
         8a:8a:54:7d:13:df:3d:66:b6:ee:eb:67:06:28:c0:75:7f:b2:
         e8:6b:94:45:af:2b:8e:6f:4d:4d:e9:09:db:20:de:ca:9a:56:
         f5:bd:aa:19:c5:9b:09:7f:81:ad:09:ff:f0:8d:d6:e8:87:69:
         a9:7e:ef:09:4e:19:47:d5:f8:50:fb:78:72:19:32:34:9d:05:
         bf:cb:5b:dc:00:22:eb:5c:91:20:96:b0:ef:a4:7b:a3:70:85:
         85:07:df:ee:f4:1d:dc:e3:4c:90:14:7c:26:5a:d3:1d:56:30:
         00:ab:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:05 2025 by rpki-client