Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          7+GaOmkQMmLtILReBaWR3TxitGfo3+1qOXG3uBNk8Ro=
Subject key identifier:   FF:CD:07:61:4E:2F:0A:09:F5:0F:74:34:8F:44:F3:C5:57:08:6E:1D
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       0198D51606E8905878B009ACBEA4780A7AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          0F0C
Signing time:             Sat 23 Aug 2025 04:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:47 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: fw22p25uammt1IY6BWAFM82kma7oK/e0eZg8LsxfAQk=)
                          2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:06:e8:90:58:78:b0:09:ac:be:a4:78:0a:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: Aug 23 04:00:47 2025 GMT
            Not After : Aug 24 04:00:47 2025 GMT
        Subject: CN=ffcd07614e2f0a09f50f74348f44f3c557086e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:2d:ee:80:8e:ca:02:81:c2:90:b7:c8:a3:
                    d9:30:89:15:06:c7:cf:d1:a5:9e:2b:c0:a3:91:b1:
                    63:92:fd:8b:61:98:44:b8:9a:25:26:ef:34:67:f1:
                    d5:63:2e:0f:d2:93:e9:a9:a1:b7:fb:35:f3:58:8e:
                    6b:bb:9c:a4:15:af:63:a2:b3:7c:89:20:9a:60:a6:
                    0d:07:33:f9:65:7c:7f:cc:ce:03:a6:d1:04:c2:2d:
                    82:d1:e2:32:0b:c6:b0:35:50:8a:e0:11:8b:06:03:
                    e4:1c:22:23:69:18:c9:19:58:01:6e:c6:3c:76:ba:
                    d7:aa:59:7f:c8:bc:a2:e8:16:ee:69:88:31:c3:7a:
                    a8:f6:1c:9a:d4:6d:5b:49:02:6d:fb:5f:5e:4b:90:
                    d0:6f:0a:b9:40:f8:6d:02:a1:f7:fa:1b:7c:2c:ce:
                    e7:4e:2e:34:eb:a4:ef:a7:3c:47:dc:06:6f:a6:13:
                    de:e6:1a:2d:f6:89:40:03:f3:a4:20:82:4f:35:a6:
                    42:d9:d3:de:e1:c0:c9:54:c7:31:f7:78:3f:71:50:
                    43:cf:9a:a2:03:2f:4b:ac:62:f9:08:3f:cf:98:28:
                    4d:f1:47:38:0e:a8:94:98:dc:38:80:aa:95:e2:87:
                    5f:96:e5:14:8e:1e:63:21:a0:da:c3:45:fc:cc:8d:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:07:61:4E:2F:0A:09:F5:0F:74:34:8F:44:F3:C5:57:08:6E:1D
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:57:38:ee:f0:18:76:10:d1:35:1b:15:9b:d5:3a:2e:5d:
         00:1f:92:ab:83:c2:fe:b5:76:ac:46:68:8e:5e:f9:f8:6c:ea:
         c3:77:6a:97:3d:6e:4f:98:44:6d:92:06:a5:ca:64:e8:7f:cf:
         fb:4c:d4:dc:c6:14:47:8d:d7:b9:7a:db:88:8b:9d:51:4d:e9:
         60:e2:18:2f:53:a8:d7:fc:6b:30:6f:24:f2:0e:71:2a:c5:48:
         87:4d:11:6e:99:bc:52:54:13:e0:9c:c7:7f:7e:ec:46:7c:89:
         52:ae:67:1d:66:cd:74:59:8e:b7:c7:c8:a2:87:68:71:5a:f1:
         ed:56:0f:e3:c0:f2:0f:8b:cb:37:96:93:1f:42:b7:04:ba:26:
         07:73:74:8d:ac:a7:37:35:d3:c5:f1:b3:d8:3f:77:71:d3:e4:
         2a:da:a6:97:99:0c:2a:e4:61:dc:6d:f6:2a:75:51:5f:2a:75:
         9d:61:8b:57:38:d8:4a:9c:db:78:16:8c:c0:44:81:f2:b3:b1:
         06:ef:80:a5:fb:9d:69:f0:0e:73:62:8e:10:e7:d6:09:aa:22:
         22:27:06:4e:07:14:a6:01:00:1d:9c:61:23:cc:9a:cf:e7:89:
         2a:24:60:0a:31:49:42:ab:42:2e:b4:d9:7c:66:1b:7c:79:47:
         a0:a5:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:31 2025 by rpki-client