Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          h34RAMuwJKN2h9d9dbEHuilBxtHm7SL8ZtuR83NMqWQ=
Subject key identifier:   A3:42:5E:1A:01:D9:AD:5D:BA:D0:AB:D2:EA:3E:F0:1B:13:CE:5A:61
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       0198D660A3DA5384EF020F2C46D774C427DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          07A6
Signing time:             Sat 23 Aug 2025 10:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:54 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: kZuwmKF7zM5oFuQ1ztbPH8W0L7QvX1jiWS1ceR7i+WU=)
                          2: IQXTtVHze1IXoXyJqdh9nwPWeHs.roa (hash: siOcI04XjEZl0t1nX+KyiRbWYR5EN6LmCvslwid92wA=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:a3:da:53:84:ef:02:0f:2c:46:d7:74:c4:27:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Aug 23 10:01:54 2025 GMT
            Not After : Aug 24 10:01:54 2025 GMT
        Subject: CN=a3425e1a01d9ad5dbad0abd2ea3ef01b13ce5a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:2c:31:d7:96:68:dd:d4:91:b3:fb:62:dc:
                    50:e8:ef:1c:51:93:e7:b0:de:98:56:87:d8:56:4f:
                    4a:3e:55:cb:bd:ee:9c:49:0c:e5:00:d0:7c:e7:88:
                    93:88:39:6a:8f:3c:9d:ba:cd:7f:ba:0a:a7:40:ca:
                    df:74:cc:48:63:68:61:8c:22:89:cf:38:9a:70:dd:
                    4a:4d:ac:ba:7c:33:08:77:e0:fa:00:45:70:50:f7:
                    3d:3e:d6:57:9a:05:45:97:f5:d9:81:80:9b:16:65:
                    60:17:24:ed:a7:3b:e6:68:77:bc:07:f9:68:e0:6c:
                    24:e2:62:eb:77:52:1b:3d:5b:2b:71:72:fb:32:a4:
                    f2:98:d9:00:3d:6a:59:87:57:a7:1a:e2:f2:bc:ee:
                    82:5d:4a:66:5e:10:f4:61:e3:51:9e:de:12:94:f1:
                    18:b4:a8:c7:08:bb:aa:35:79:84:f8:70:de:66:e2:
                    ae:77:a8:1b:fa:79:62:99:44:83:4c:08:ab:9a:c9:
                    92:53:6e:94:0f:26:db:b5:22:e0:73:1b:9f:88:5e:
                    51:a2:bd:35:40:b1:06:d4:84:ee:42:4a:75:91:47:
                    47:39:e9:d2:2e:59:12:43:6a:24:f0:5d:8d:5d:32:
                    29:14:64:0d:a8:f9:b6:70:2b:d2:1d:25:ae:69:7e:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:5E:1A:01:D9:AD:5D:BA:D0:AB:D2:EA:3E:F0:1B:13:CE:5A:61
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a7:b0:55:f7:4e:9b:3b:40:85:c2:f9:01:02:2c:ad:9d:62:
         df:00:30:c9:a0:8d:d0:6a:cc:1c:3b:1e:72:03:1b:58:74:ba:
         78:69:e2:1c:e4:34:6b:57:6a:92:3e:7e:30:3b:42:ff:33:82:
         e0:ff:49:95:10:c3:94:c4:8c:1c:61:cf:fb:7a:31:f1:b9:1e:
         45:1c:6c:62:6a:8d:f7:77:b2:89:5c:6d:d0:fa:48:68:80:b5:
         12:56:c3:9a:00:b9:0b:0d:3d:3e:be:00:d0:89:ea:eb:a9:b1:
         1f:7a:c5:85:1f:fc:e7:c9:2a:c7:a0:65:5c:26:83:9f:60:19:
         22:79:67:9b:75:11:b3:48:bc:43:7c:22:ed:fc:d4:a2:12:48:
         4c:28:fc:bf:ba:83:95:4d:01:77:b0:c5:87:24:52:4c:91:7a:
         7e:15:77:b7:86:22:49:30:0e:23:f6:70:d9:95:6c:98:54:27:
         9c:56:54:ca:a3:00:5c:e7:50:ae:19:20:34:93:17:05:2f:d0:
         a5:52:b2:1b:21:0d:d7:e4:21:75:a0:bc:13:a3:28:10:45:c8:
         bb:07:62:cd:e0:f8:3a:7c:31:67:73:3e:d5:37:d2:4f:b3:94:
         4f:b4:03:fe:24:14:b7:2e:be:1b:10:3a:3b:0b:ed:fb:ac:54:
         f4:ce:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:26 2025 by rpki-client