Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File:                     _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier:          io7vFnfjkzganw/ginKfwDuo75HEUnNJ9DAwM1vEp2g=
Subject key identifier:   E7:B0:05:6B:86:B9:6D:D0:53:AA:D2:C8:4C:29:BE:85:46:1D:88:AF
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer:       /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial:       0198D5F1D57942CE8666FD04FD7972C6B1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number:          0627
Signing time:             Sat 23 Aug 2025 08:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:52 +0000
Files and hashes:         1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: /uJgCrNcYEEbWY/HQSqNTy5X1y/I0YU9RidNTlHIGzE=)
                          2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d5:79:42:ce:86:66:fd:04:fd:79:72:c6:b1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
        Validity
            Not Before: Aug 23 08:00:52 2025 GMT
            Not After : Aug 24 08:00:52 2025 GMT
        Subject: CN=e7b0056b86b96dd053aad2c84c29be85461d88af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:59:93:da:06:73:d6:9c:f4:ac:84:3c:8e:
                    f6:e2:2c:1d:9c:ee:26:c0:56:2d:0c:4a:ab:01:8d:
                    c7:c9:db:e6:f2:2e:f2:fd:4d:f1:06:46:03:63:58:
                    35:10:77:74:58:9b:be:4f:f6:23:f5:b3:c5:05:60:
                    c2:df:c7:06:ff:ea:b1:e9:25:16:ff:56:39:6f:f1:
                    03:d6:ca:19:76:fd:d9:ed:c1:70:34:38:25:2f:30:
                    20:e0:0f:72:5c:7f:84:d9:ce:cd:c4:18:3e:86:16:
                    09:ec:ea:69:c1:99:37:97:b7:74:20:b7:dd:ba:19:
                    28:9d:f6:01:be:25:8c:71:8e:f8:7c:dd:cd:43:7c:
                    9a:a7:de:df:0c:d8:79:4a:aa:d8:ec:0e:cc:47:4f:
                    f9:3d:b1:2a:60:ea:3e:03:b4:91:ff:30:a5:36:b9:
                    14:ed:f4:7c:4f:9d:5d:f4:0b:2f:49:49:5d:d9:c8:
                    b8:9b:f6:f4:5e:cf:61:97:40:4d:47:5c:32:98:ca:
                    6d:6f:24:2e:8b:d1:61:40:43:17:4a:ba:47:53:39:
                    7e:66:70:a6:81:d4:81:b1:87:dc:cd:65:6d:94:3e:
                    34:a8:28:de:52:e5:3f:7e:5c:d8:49:61:d9:96:df:
                    a1:79:9f:b9:99:24:43:30:9a:06:3f:97:51:60:b4:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:05:6B:86:B9:6D:D0:53:AA:D2:C8:4C:29:BE:85:46:1D:88:AF
            X509v3 Authority Key Identifier:
                keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:62:aa:51:ca:79:46:fa:f3:76:26:61:ea:49:60:49:fa:e4:
         75:0b:4e:77:55:42:d7:fd:9b:3f:85:5c:93:47:80:fd:fe:85:
         bf:96:e3:81:73:5d:01:1b:d0:1c:07:f9:bf:d2:97:ad:51:82:
         08:46:07:e6:b2:f7:75:3a:c6:a9:c3:4a:9d:e8:65:73:52:ed:
         09:ab:06:e9:df:6b:6b:e8:50:9f:e6:c7:3e:13:31:3f:7c:33:
         a4:e2:bd:21:f4:27:21:ee:c3:88:98:60:dd:4b:7e:e2:de:dd:
         0e:ab:9f:60:46:5c:9e:62:cd:45:6f:af:5c:11:32:d4:40:87:
         4c:20:2c:81:4f:9b:33:54:83:fb:9f:72:7a:11:f7:f3:01:f4:
         ff:5b:2e:51:34:2c:80:8c:fd:4e:6d:d9:2d:77:82:28:d5:b6:
         64:01:94:5c:ee:50:2f:ef:2c:be:2c:d6:d5:7f:16:18:bf:cf:
         92:f6:33:59:4f:8c:52:83:4b:ce:e6:b2:20:52:53:53:95:e9:
         fe:8f:56:91:fc:f6:f0:97:68:14:33:ae:92:2a:b0:b7:8c:78:
         bc:3c:83:c6:ff:69:be:c8:a8:04:f5:2c:43:16:82:8d:38:bb:
         ee:ff:7a:16:ac:68:e1:df:94:ea:94:30:d0:8a:b8:0e:c6:fe:
         a2:eb:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:59 2025 by rpki-client