Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          QVpfePsstLifqY6gTWXrcLbGTg6/O2eueo1FBcs89pQ=
Subject key identifier:   71:25:25:B9:8C:95:5D:F8:60:28:8F:DE:9F:D8:C0:CB:5D:A1:80:80
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       0198D7A8DA1E0BEF1F470C19EE247585C22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          0FBF
Signing time:             Sat 23 Aug 2025 16:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:23 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: +jZWG9Fwb/U70pRKLB/m1zpeGFB9Ukvn4jNC6WUQCZQ=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:da:1e:0b:ef:1f:47:0c:19:ee:24:75:85:c2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Aug 23 16:00:23 2025 GMT
            Not After : Aug 24 16:00:23 2025 GMT
        Subject: CN=712525b98c955df860288fde9fd8c0cb5da18080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:6e:f6:6d:81:4f:86:a2:e6:28:8f:1d:45:
                    4b:75:0b:a3:4e:7a:de:b3:9e:a3:8b:68:9d:f5:4d:
                    ba:2d:64:78:59:ca:1a:40:c2:99:07:17:0b:18:8b:
                    d5:84:1d:b4:b0:01:95:c9:fb:dd:f9:ca:1f:97:c6:
                    91:00:9a:ad:aa:43:60:57:97:68:ea:71:ae:e0:01:
                    66:29:34:db:89:27:08:66:fd:4d:c4:55:19:86:1e:
                    ef:6f:08:de:00:04:7a:cb:7f:6a:43:0c:01:b8:55:
                    cc:5b:7d:f6:77:a7:ed:21:ae:c3:3c:d4:e3:0d:12:
                    87:70:b7:90:25:5c:79:fb:40:f7:d1:81:33:b9:6f:
                    af:51:34:dc:5a:f4:40:1a:40:66:4b:86:4a:b3:1c:
                    43:11:9f:f1:44:ef:73:c2:3a:d9:d2:2a:b0:59:af:
                    e4:35:a7:81:d8:e6:6f:88:eb:1b:2d:48:01:00:65:
                    3d:52:1e:00:10:99:b8:ba:f4:8d:c4:7b:fc:7d:dd:
                    65:5a:f3:69:fd:9a:b2:a5:20:8e:c8:52:31:e0:50:
                    72:1f:e0:b7:d8:8b:7c:1e:41:27:54:a2:c2:ac:37:
                    4e:b4:ae:ee:c5:88:2b:17:13:02:7c:19:a6:34:64:
                    14:80:b7:fd:5b:40:71:48:7c:0f:30:d2:67:99:c5:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:25:B9:8C:95:5D:F8:60:28:8F:DE:9F:D8:C0:CB:5D:A1:80:80
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:eb:11:a4:bd:02:41:5a:16:7d:17:65:68:a3:5b:8d:86:
         69:80:f0:56:23:65:87:5e:a6:bb:d6:a9:b5:13:fe:e7:df:a4:
         8c:2c:a8:3c:10:f2:7e:eb:39:b7:a5:b7:22:6a:18:d4:8f:cf:
         2f:6f:c2:af:12:a3:7e:6d:d1:d7:c1:4b:68:db:62:02:47:1c:
         b5:92:d4:25:f8:8f:7e:48:e6:77:0e:0a:60:ef:e9:1d:98:ec:
         79:3b:9d:c3:10:2b:9c:21:ba:15:98:f8:c9:80:25:50:e4:a9:
         d2:3d:81:8d:9d:ce:13:ea:2a:28:9e:bf:27:e2:80:2d:85:f0:
         51:a4:29:f7:28:2f:e9:a5:f5:c0:35:42:74:8b:6b:2d:4f:dc:
         7c:9d:46:b8:7e:08:ad:31:2c:fc:18:e3:62:6a:88:ab:5e:7e:
         63:e1:13:09:b7:8b:57:80:c2:fb:28:06:35:eb:c2:c3:0c:e5:
         34:cb:d7:62:68:a4:5e:6e:50:f8:7d:ec:8b:f3:49:f9:e6:0d:
         f3:a1:a7:3a:4f:2b:98:41:fb:5f:f9:96:ee:4d:31:8b:37:3c:
         d8:3b:c2:33:a5:cd:bc:96:8c:76:81:f3:4e:cf:9e:f5:9d:93:
         78:42:80:28:a2:6f:b4:01:b2:c5:11:43:c0:af:89:b2:40:a3:
         4f:53:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:35 2025 by rpki-client