Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          p0nlZIQ8ncamYWN07Fs+qccsAlKHa25WTncCTD7dg/s=
Subject key identifier:   87:B9:C8:EA:2F:2D:30:54:DD:FD:65:92:5F:1F:1A:98:5E:0D:51:E4
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       0197B7B30EB36B44DA071B5983623CEE25E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          0E9B
Signing time:             Sat 28 Jun 2025 18:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:54 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: UOGs7ZbOj8Ba7G56/Z0Ws8CaAWcWSeJPC1ZeFtmqYFI=)
                          2: t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa (hash: /vgplaRmHDxSp3VJb5NRArFdYkLIBE7CLS2J04R2rkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:0e:b3:6b:44:da:07:1b:59:83:62:3c:ee:25:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: Jun 28 18:00:54 2025 GMT
            Not After : Jun 29 18:00:54 2025 GMT
        Subject: CN=87b9c8ea2f2d3054ddfd65925f1f1a985e0d51e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:98:98:63:ee:d6:bb:be:69:0d:9c:b4:a9:
                    d3:6b:ca:98:c3:e2:d6:94:ef:1b:87:15:e6:a9:9e:
                    30:a4:0d:56:fb:95:f3:23:e1:4c:93:b2:4e:4c:14:
                    69:38:a3:ae:1f:56:18:4d:a3:c9:13:b5:e3:96:ba:
                    35:54:86:d1:bb:e6:f9:cd:53:94:97:5d:02:27:d5:
                    6b:ed:c1:bf:f4:9a:48:48:0d:19:11:71:84:ea:77:
                    b4:12:81:cc:79:7c:06:0e:fe:f5:e1:8a:92:d2:29:
                    ef:01:16:cd:b0:28:8f:34:8d:a3:4e:c7:a5:04:50:
                    02:c9:cc:a0:ea:99:19:31:54:cb:2c:47:3f:70:4d:
                    9d:57:88:a6:c1:c6:65:6f:de:61:ac:c8:e3:be:c5:
                    d7:6a:2c:ee:8d:eb:59:37:9c:7a:d6:fd:43:7a:9f:
                    7e:6c:20:70:93:74:e8:f5:f1:40:07:e2:06:4f:64:
                    41:84:2c:70:90:ec:11:69:2a:33:08:cf:31:32:46:
                    6b:d6:01:89:81:fb:be:76:ae:dd:86:85:7b:8e:cd:
                    8e:07:58:87:25:b0:65:c4:99:a9:fa:82:5f:65:e6:
                    ae:e7:1b:ff:a9:50:4f:aa:36:30:67:38:dc:31:5a:
                    8b:d5:26:89:9d:27:5f:b2:00:27:56:81:fb:e3:7e:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:C8:EA:2F:2D:30:54:DD:FD:65:92:5F:1F:1A:98:5E:0D:51:E4
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:39:1d:4f:ad:a1:48:1a:bc:bf:c9:0b:19:4c:56:9c:29:
         ee:07:94:9f:66:29:55:96:77:c1:81:81:0e:f0:0c:d9:b8:ae:
         ea:10:cc:d0:bf:e3:d8:41:87:b4:63:9c:22:c1:e1:dc:d7:bb:
         c5:14:39:03:02:2d:95:b5:a0:df:24:47:ee:25:74:a8:d5:e2:
         e5:86:2e:09:4e:f6:19:7d:5b:c9:b3:ad:89:e1:8c:99:b7:4c:
         1e:12:c4:18:6f:fb:a3:02:49:87:ba:1c:b2:c5:63:a2:4e:4d:
         75:83:57:1f:c1:46:4d:18:21:cd:1d:0a:dc:7f:f1:a3:32:78:
         87:2e:ca:d5:83:41:1b:3b:ed:32:75:f0:09:ce:b1:2a:51:c9:
         da:bb:53:e7:88:4f:ac:d4:c9:47:b4:0c:46:48:c8:3c:8d:f9:
         b3:09:7c:07:ef:23:e1:bf:10:a1:ab:5d:80:ef:ed:47:31:a9:
         fb:b8:45:40:11:ab:b3:10:85:11:03:3a:41:85:c9:23:8b:bf:
         f3:43:b0:45:6d:a4:96:c1:e4:29:bd:aa:5a:e5:93:bf:b1:a4:
         ed:9f:d5:e4:9f:c2:bd:59:b0:ee:e5:b7:69:a9:00:cf:b2:fe:
         33:f4:65:1b:81:9c:96:73:4c:af:35:83:de:6e:30:f1:25:10:
         72:15:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:26 2025 by rpki-client