Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          lXElb0eHbK6PLPvW/K3SuzG1pJhV/tPepGf3SCQGRBA=
Subject key identifier:   2A:DB:C6:2B:07:DF:98:1D:76:F3:A5:DF:2F:94:DC:C0:CA:34:74:2A
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       0198D65FA5175124B6A7D4173B19C0ADAB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          1591
Signing time:             Sat 23 Aug 2025 10:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:48 +0000
Files and hashes:         1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
                          2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: KCS/PnvfEZ+GFtaLWtlTunOZF3I+dROn5ZoZI1JI0v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:a5:17:51:24:b6:a7:d4:17:3b:19:c0:ad:ab:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Aug 23 10:00:48 2025 GMT
            Not After : Aug 24 10:00:48 2025 GMT
        Subject: CN=2adbc62b07df981d76f3a5df2f94dcc0ca34742a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:a4:19:fc:06:1e:3b:c9:90:f3:99:cf:36:
                    80:12:2c:0d:81:0f:f6:9c:61:22:6a:a9:92:e5:15:
                    a8:c4:76:8a:4e:7c:2f:ff:a2:0c:26:1d:62:b8:38:
                    db:1f:2d:ac:bf:ee:22:c9:b2:8a:1c:4a:97:27:42:
                    97:7f:7c:63:04:bc:91:64:3e:b9:8a:48:16:3a:42:
                    95:f9:2c:fa:af:e5:ef:aa:63:0b:41:1f:c4:d6:5e:
                    7b:d3:82:52:3f:06:4c:a6:d2:5b:d3:06:fb:54:b9:
                    24:8a:1e:82:2a:f8:1b:27:45:1e:3d:68:2c:3a:69:
                    b0:d0:4a:ad:9d:5a:32:bb:34:dd:41:b6:e2:a0:e0:
                    55:3d:d6:07:6d:e7:84:40:94:a0:88:41:d2:5c:d2:
                    d1:b4:ee:e2:9e:d2:6f:bc:5d:b0:15:54:79:83:c8:
                    0b:5a:a7:1e:7f:6a:49:20:2c:fa:96:35:ce:da:8e:
                    7b:76:11:56:12:1b:bc:f6:ed:1a:bd:c7:c7:d9:3e:
                    01:a4:76:70:c8:ac:b2:8a:da:ad:86:b7:49:b4:1a:
                    9b:38:d0:d5:b1:87:0a:04:64:4f:47:6f:e1:50:76:
                    51:1e:db:75:8e:1a:80:66:8e:74:51:04:e7:5b:77:
                    3b:22:61:81:ce:fd:56:41:42:eb:1d:e1:e2:eb:a3:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DB:C6:2B:07:DF:98:1D:76:F3:A5:DF:2F:94:DC:C0:CA:34:74:2A
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:4d:a3:1e:a4:95:c6:cb:c3:a9:a9:a1:c0:ca:7f:79:d4:
         b1:3d:10:68:9b:85:bd:65:a0:0a:8a:b7:85:f8:34:03:11:7f:
         1b:6b:da:33:6b:48:c8:3f:c0:a2:45:dd:da:f9:8e:c1:93:64:
         f4:2a:34:65:60:ca:1c:fb:b5:d7:2b:3e:3a:8f:36:1d:a0:b0:
         4e:6c:57:6b:09:fa:61:db:0b:00:77:79:5b:b6:2f:cd:ff:ac:
         ef:7a:47:cc:28:94:62:53:ef:6d:82:31:cc:8a:31:75:ce:ea:
         cb:e4:6f:e2:ab:8b:6d:9c:52:c1:dd:84:ba:2d:d6:77:3b:37:
         e9:6f:d6:75:9e:11:76:e8:82:71:34:4d:41:66:dc:02:e4:b9:
         8e:3b:1d:26:ea:b0:21:e9:d3:bf:9b:72:5d:ed:13:22:46:4a:
         b2:77:d7:9e:0d:e5:92:17:46:bd:66:0e:5e:be:60:b1:58:9d:
         bc:dc:1a:7e:9b:c7:96:7d:85:48:fb:f1:c2:fc:8e:af:24:d9:
         d9:26:bd:12:67:bf:df:10:37:9a:7f:d4:b2:72:ca:9d:83:2a:
         7c:52:92:3b:0a:d6:76:6c:51:d0:1a:f8:14:60:ea:9b:4f:07:
         ed:3b:c9:6c:89:d2:f0:c6:f4:0e:ad:bb:6f:4d:6e:75:60:82:
         ba:4c:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:03 2025 by rpki-client