Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File:                     u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier:          w6lGNNNceKF57mSSoGM/lX9V5r3PAk6aRThpkwbHvNA=
Subject key identifier:   24:57:85:4D:B3:45:42:1A:FF:E0:EB:CC:FF:2D:93:F9:92:B6:47:47
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer:       /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial:       0198D54E80DF8127B382254E100DB86B32CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number:          026C
Signing time:             Sat 23 Aug 2025 05:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:28 +0000
Files and hashes:         1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
                          2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: pGD+70QrPwTCaG8Qg5IEOAP1waDN4y36Ds0GPpYn+AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:80:df:81:27:b3:82:25:4e:10:0d:b8:6b:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
        Validity
            Not Before: Aug 23 05:02:28 2025 GMT
            Not After : Aug 24 05:02:28 2025 GMT
        Subject: CN=2457854db345421affe0ebccff2d93f992b64747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:06:18:b4:9a:03:fa:2a:83:ea:a1:10:0c:
                    ad:10:05:d8:d5:64:55:1c:dc:bc:c5:1f:65:3e:06:
                    cf:5a:fb:de:bc:8a:04:c4:da:18:56:62:11:d6:59:
                    5c:f5:2c:6d:8e:58:9a:68:ae:14:01:a5:86:45:12:
                    24:dd:ad:dd:de:11:f2:6d:97:a1:b3:6b:96:ea:ed:
                    b8:61:2b:31:0a:52:5c:eb:88:93:56:96:79:b3:be:
                    97:78:33:89:ae:8e:0c:87:2a:37:fa:9f:66:a4:ab:
                    80:02:b3:5f:bd:0b:ab:9c:38:51:04:8f:c2:56:bb:
                    02:70:b5:35:a6:44:e9:16:fd:f2:7c:62:da:00:ff:
                    be:56:50:47:e4:19:c6:43:e8:a8:fd:b5:82:8e:52:
                    58:ba:e3:9c:bd:c9:42:cb:37:da:02:09:cb:b8:01:
                    37:45:fe:86:c8:26:34:87:5c:4f:b9:e2:56:4c:bd:
                    b7:ed:7f:cd:e1:f0:b5:b5:3b:29:70:46:5c:8b:5c:
                    09:72:fc:99:6b:94:f1:89:d7:75:1e:10:01:12:d4:
                    75:5f:0d:fa:fe:1e:26:ab:03:9a:4f:5e:d5:1d:ba:
                    c0:12:2b:ba:36:89:e0:8f:44:a2:d1:0c:21:69:11:
                    4b:6c:a8:0e:98:d1:05:9c:96:bf:ae:f0:aa:ef:f4:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:57:85:4D:B3:45:42:1A:FF:E0:EB:CC:FF:2D:93:F9:92:B6:47:47
            X509v3 Authority Key Identifier:
                keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:7e:77:0f:80:64:25:68:91:94:22:5a:85:46:1a:29:91:
         65:aa:7e:e7:19:34:12:b1:05:72:c2:d7:7e:36:e5:c9:7b:6d:
         03:38:81:1f:50:5f:91:f5:e7:cf:fa:0a:69:17:db:8a:e6:01:
         fc:5d:fe:b0:3d:82:db:a9:5b:14:40:bc:82:50:67:05:a3:2c:
         0e:ba:55:db:35:f2:dc:a5:19:10:71:98:46:8f:46:35:2c:1a:
         f3:ea:d4:95:3c:80:8f:00:5e:3f:56:45:83:42:db:3e:02:cd:
         b0:2d:52:59:31:73:01:db:06:ad:ab:85:e5:a3:d0:54:13:bd:
         ca:56:0b:31:b8:f0:f3:1e:94:72:b7:09:83:0c:1f:e4:88:df:
         14:02:70:d7:26:03:b3:dd:2d:93:f8:7c:37:ad:cd:d7:c6:de:
         2c:c6:43:99:3f:8b:ab:24:25:64:4a:3a:bf:e9:5f:89:85:ff:
         d9:5d:92:ec:1f:11:20:80:37:f6:e5:d9:48:0b:91:00:3e:fa:
         0e:a9:44:b5:da:9f:81:74:98:89:8e:df:df:fb:8b:e1:b9:14:
         60:c5:eb:98:ba:e4:08:9c:ca:5b:bc:d8:26:f7:f7:62:23:20:
         68:ab:1c:ed:71:ab:e6:98:9b:dc:fc:63:a3:80:ac:55:83:1f:
         09:57:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:14 2025 by rpki-client