Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File:                     v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier:          RwS6HW6EJtNlUankS1ZocvfPQp1hi5KW7qRuVNKjWB4=
Subject key identifier:   CF:AC:93:C0:4F:1E:05:D0:45:39:15:34:9F:07:46:BF:A3:FF:17:94
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer:       /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial:       0198D69827D254E02D925DD6A50B41FC5304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number:          03AA
Signing time:             Sat 23 Aug 2025 11:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:32 +0000
Files and hashes:         1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
                          2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: v6bX2p3Q47AqNwVczVgqfnrL5rrxSXVPjci6qR6P1ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:27:d2:54:e0:2d:92:5d:d6:a5:0b:41:fc:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
        Validity
            Not Before: Aug 23 11:02:32 2025 GMT
            Not After : Aug 24 11:02:32 2025 GMT
        Subject: CN=cfac93c04f1e05d0453915349f0746bfa3ff1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:47:51:ad:37:cb:ba:59:05:b7:8b:72:79:
                    cf:8e:ae:d1:c7:cc:8f:af:69:10:f6:e0:a3:f7:bf:
                    c9:fe:7b:15:18:71:97:90:d9:e5:80:ef:83:48:98:
                    b0:0e:be:80:87:c3:8c:1a:36:29:1e:6f:1f:96:1b:
                    b4:5f:12:2c:a4:08:2f:ce:6e:36:79:6a:09:ed:bb:
                    a1:af:22:54:eb:2e:7e:33:5e:3d:ab:1b:b4:71:f3:
                    7c:4b:d5:27:36:c2:ae:59:ee:40:1d:47:e7:17:2b:
                    28:47:d3:c1:da:cf:b0:01:6d:09:02:f8:8f:03:9e:
                    9f:42:2c:9b:e0:e7:69:17:2e:ab:ca:f1:79:71:3d:
                    f2:cf:96:e9:91:60:b5:16:10:a5:ec:d0:ea:27:fa:
                    9a:be:84:0e:26:f7:f9:c0:29:ae:05:d4:c9:09:3f:
                    88:e3:d1:35:f0:eb:63:08:94:56:23:8c:de:ba:ff:
                    ba:c5:63:60:8e:db:d4:cd:71:9f:18:49:28:eb:ff:
                    51:8c:88:11:cc:14:1c:f5:04:44:e1:bd:df:cd:f0:
                    aa:41:70:f5:04:3f:2b:eb:31:86:b5:0c:a3:90:11:
                    94:87:6b:4c:e9:9b:09:a0:8a:6b:dd:01:b2:c6:78:
                    82:95:33:cb:39:78:56:f3:ff:c8:ff:44:8b:ee:01:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:93:C0:4F:1E:05:D0:45:39:15:34:9F:07:46:BF:A3:FF:17:94
            X509v3 Authority Key Identifier:
                keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:2b:ac:1a:db:2a:44:02:b6:33:43:b9:ab:c8:7d:ed:89:
         60:6e:16:1b:75:56:6d:97:fc:82:8a:91:fe:3a:d6:83:8f:08:
         4f:97:02:a6:06:b9:76:07:20:b4:91:bc:33:26:3d:b7:2b:d1:
         3a:ec:ca:ee:ed:a8:94:63:28:da:2f:fd:82:46:28:64:fc:08:
         0f:1f:d3:8a:70:ed:b6:96:80:e2:4a:4b:69:1a:56:a2:24:fb:
         f5:6e:27:4a:b2:ca:01:43:dd:ef:37:38:97:0c:b6:5b:ed:9c:
         77:aa:6c:a5:60:9d:cd:85:d3:50:a8:42:37:f7:18:1d:d5:04:
         b6:a2:46:d5:86:c4:03:03:11:f1:98:4c:43:ce:32:69:d2:f3:
         96:13:46:bd:98:ac:9b:2a:d6:2b:a9:1e:64:b2:10:2b:ef:50:
         7a:ef:55:79:2c:5f:d6:73:d1:db:8d:78:ed:2c:7f:ef:75:f3:
         fa:35:66:aa:af:b8:03:5d:db:20:49:32:d7:3f:d1:39:e7:a6:
         2d:2e:f2:c4:95:a4:39:58:d2:e9:a6:29:d4:14:df:73:a1:32:
         85:6b:96:50:d4:b6:1c:f8:93:20:23:fe:6b:26:0b:1f:9d:ee:
         b7:94:57:80:94:3a:50:9c:d6:64:92:dc:17:5b:d8:e5:c7:a3:
         67:32:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:02 2025 by rpki-client