Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File:                     9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier:          8+i+I601rB4sIBTBh3ZZd5IqmikxGGF9qA5ZqFIL/2k=
Subject key identifier:   D8:0D:9E:F6:98:0D:AE:76:2D:AE:0C:C1:92:F0:EE:1A:C3:CB:24:8A
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer:       /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial:       0198D5F134F957C8A550D1586409EA2E5A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number:          014F
Signing time:             Sat 23 Aug 2025 08:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:11 +0000
Files and hashes:         1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: JnaNBVKOVy0Dujzbz6W2g7igZpH5dxZSJ/ERd9pQdGU=)
                          2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:34:f9:57:c8:a5:50:d1:58:64:09:ea:2e:5a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
        Validity
            Not Before: Aug 23 08:00:11 2025 GMT
            Not After : Aug 24 08:00:11 2025 GMT
        Subject: CN=d80d9ef6980dae762dae0cc192f0ee1ac3cb248a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:ff:c4:e7:ef:1a:d5:0f:f1:98:1d:f1:84:
                    df:8d:13:52:6a:ed:79:43:a7:3c:90:af:15:a3:ca:
                    e5:43:14:f4:fb:5a:29:9b:31:eb:b4:73:3c:7b:29:
                    c1:75:7d:22:c5:56:6e:50:e0:c5:c5:c9:60:ef:11:
                    f9:34:96:fe:e2:9b:c9:ea:b9:67:f8:ab:fc:ed:67:
                    c6:f6:72:76:9a:51:07:b5:85:31:fa:21:40:bc:2b:
                    63:cd:25:82:2c:b2:18:9e:56:24:2a:c6:5b:f2:73:
                    03:f8:a5:8b:dc:c4:8c:1b:6c:c8:8c:50:56:eb:92:
                    2d:64:4c:fe:d5:06:06:2e:22:3e:68:df:96:3b:10:
                    22:a3:58:76:3d:3e:fd:32:29:ba:4c:c1:c8:d7:85:
                    03:93:60:ec:b4:fe:29:27:a6:f7:57:3b:ce:83:3d:
                    41:54:1e:af:d3:4f:db:f4:e5:26:53:10:72:e2:27:
                    3e:d1:9b:1c:e3:74:fc:2b:13:28:8a:19:f3:62:13:
                    44:74:62:89:69:8a:64:14:80:31:3d:1d:ca:91:d8:
                    a1:a2:3b:2d:08:e3:fe:f9:49:ae:c3:03:df:e8:83:
                    83:65:9f:0b:08:23:54:3c:c6:17:b5:32:16:92:6a:
                    ec:73:33:26:7c:a8:25:73:0f:75:93:24:64:c0:d3:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0D:9E:F6:98:0D:AE:76:2D:AE:0C:C1:92:F0:EE:1A:C3:CB:24:8A
            X509v3 Authority Key Identifier:
                keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0b:6b:a4:50:cd:5b:43:96:46:07:fe:4a:0c:f1:46:ff:e4:
         c2:f4:03:b1:04:13:3a:4c:17:b6:c6:af:61:5a:9c:eb:25:7d:
         26:b7:12:92:b8:9b:13:e0:76:e8:c5:cc:7b:2f:02:39:50:96:
         59:ff:ec:ed:40:fb:3e:e8:ed:ec:ef:58:0e:8b:24:29:f1:53:
         a8:1d:1a:e4:99:13:92:b3:64:53:21:9d:30:45:56:d6:34:2d:
         11:48:62:eb:31:d5:64:cb:df:e4:26:f1:ca:3a:26:38:5f:3f:
         19:41:03:3b:9d:08:14:a7:2f:86:2b:7f:11:fd:0d:da:a1:94:
         9a:b8:7a:b7:f6:74:bc:47:26:f0:6d:40:f1:a7:91:91:81:04:
         bd:14:01:22:46:8c:48:8f:a6:41:f3:a5:8a:a1:db:fd:af:3d:
         6f:12:1f:63:6f:c2:e1:e5:aa:5f:47:d4:a4:9d:a1:f1:c8:f1:
         ab:e3:11:34:56:6a:52:d2:dc:48:8b:f8:19:c8:f3:28:cb:b0:
         9e:ab:a0:7f:46:26:ab:5c:05:74:6e:4a:04:f4:aa:7a:f1:63:
         c1:4e:9b:c1:0a:71:77:37:ca:9b:2d:79:ad:ad:e6:ee:be:52:
         7d:dc:06:b5:7c:3b:25:62:3e:70:65:56:8f:93:f4:cb:ad:c3:
         98:a6:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:20 2025 by rpki-client