Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          Orwq0n1gUOUw5enNdORee1KwQdMtnnRY6S6qQtZKjgs=
Subject key identifier:   07:EA:FD:92:9E:4E:3D:91:95:73:06:FF:83:8D:AC:52:FA:BA:F5:D8
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       0198D5BBF9E6237DB194214A58E457480BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          14FC
Signing time:             Sat 23 Aug 2025 07:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:02 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: r5yCq+3CFcWzkPyozbAI7noy0e8k6orFN2kfnWojNWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f9:e6:23:7d:b1:94:21:4a:58:e4:57:48:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Aug 23 07:02:02 2025 GMT
            Not After : Aug 24 07:02:02 2025 GMT
        Subject: CN=07eafd929e4e3d91957306ff838dac52fabaf5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:5c:70:bc:f2:0c:5c:eb:dd:3b:3d:9e:2c:
                    42:dc:d4:5d:a7:37:7c:5d:b3:88:e6:3f:b5:b6:fa:
                    c1:f4:1e:f1:22:19:4d:2a:7f:de:8e:0f:2a:6d:39:
                    b1:ae:92:bf:b7:5d:ac:b5:cd:14:e7:e0:16:d9:ec:
                    93:cc:50:44:77:22:07:78:c8:f1:d3:42:92:d3:c4:
                    bf:08:63:e2:4f:c4:fd:65:9b:27:b7:fa:bd:c9:9a:
                    87:d6:f5:07:66:c6:ee:dd:9d:b4:69:57:fd:16:38:
                    f9:1d:05:0b:71:88:92:41:0a:f0:90:c9:8d:f2:97:
                    89:4e:9f:95:c3:0a:1e:f7:d5:85:df:32:ca:be:cf:
                    49:a4:5c:5d:0b:76:08:9c:72:3e:47:63:d4:2d:dc:
                    7d:59:ae:cf:1c:a3:21:2e:a4:00:9d:b1:96:23:be:
                    ec:8c:3b:41:80:83:f3:7c:c5:4c:fa:23:88:2d:14:
                    46:95:25:b5:16:df:c7:e2:f5:4b:22:1d:6a:21:82:
                    db:17:d2:20:96:90:e1:44:6f:a7:aa:62:74:e7:d2:
                    11:ba:4a:30:cb:7a:bb:0c:41:06:61:b7:b4:a0:cd:
                    77:c4:2b:fa:a1:bd:fc:bf:18:2a:ab:93:fe:af:5a:
                    41:cd:eb:84:31:58:64:80:eb:97:1e:9c:d6:1e:b4:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:FD:92:9E:4E:3D:91:95:73:06:FF:83:8D:AC:52:FA:BA:F5:D8
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:79:9d:dc:83:41:00:ea:66:c3:2c:49:8b:b7:d6:c7:2d:b5:
         1d:14:0c:cc:c5:2d:df:c6:02:ab:9c:01:fb:13:34:e9:38:46:
         45:19:e5:d0:65:d3:96:1e:bc:96:97:d9:7b:ba:b3:4f:e3:3b:
         2e:b1:43:4b:71:78:b8:98:76:b0:31:95:da:37:63:1d:ac:79:
         6d:6d:23:4b:3f:5b:04:50:4f:d6:5e:a9:f4:9b:ec:51:1b:99:
         12:8e:4f:ac:39:90:17:90:d5:08:f6:02:e5:ca:16:3a:81:88:
         09:ef:09:7e:42:9b:a5:de:74:ce:14:24:15:e1:81:4d:5c:7d:
         ed:26:85:95:83:10:5e:d9:9e:2e:f5:ed:d4:c6:90:0d:32:d2:
         85:2f:43:86:ec:e5:a5:ac:00:9c:1d:65:68:d6:2d:71:18:22:
         fe:d1:a1:c3:5c:8a:fd:cc:84:3d:f4:8d:ec:44:c3:41:b5:ab:
         c4:61:50:f2:6a:46:64:45:83:a1:fa:85:e6:b4:5f:e8:99:64:
         cc:7f:24:c3:d0:41:19:a2:4f:ad:ae:b0:17:8c:af:01:69:fb:
         a9:26:d3:8b:72:06:c2:6e:71:9d:32:23:76:41:2b:28:aa:30:
         c2:96:98:f4:0b:0f:31:78:5e:69:7a:75:10:ca:98:41:90:bb:
         d0:3e:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:19 2025 by rpki-client