Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File:                     4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier:          uJIdXpoeYYKVPwYTFKOpnJhHCDCx0qqYkdxfC1V8z7A=
Subject key identifier:   C2:79:00:13:FC:23:54:C9:A9:CC:46:DD:E5:A2:EA:B5:B8:03:F8:4E
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       019A00351AE9AFFA764597C3EFDF392DA928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number:          1714
Signing time:             Mon 20 Oct 2025 06:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:11 +0000
Files and hashes:         1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
                          2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
                          3: 34IsY0jO75pV7BAMdtZC6Y7R63Q.roa (hash: iHXM2CyDHwFZsOpk2M0YYfJaVLusv8i1hjOCk9r9pn0=)
                          4: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: AwxYBjb6bDPaSoIYc61ZCG8aybq9FVO+oB10Xdneth4=)
                          5: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
                          6: Y4y_3m4POfZlVUhwqm0uVd4P9vQ.roa (hash: dZrOM2p3noTvf6KyFY1PrTf2FDGKF1aorRCqRis2DzA=)
                          7: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
                          8: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
                          9: erLKl2-7SPNGcOtJ86A0RSv3cdw.roa (hash: 1hNGg1BiH4BJWJitgxTwu0nBQpz2c5fg0q3Qy8a1iuo=)
                          10: paVOpGcb1H0GxwnvFjCm56xxVdc.roa (hash: 9QOqOZ/+HYoyFH3uyR9vue8YKnF7n4M307q1TSOtzck=)
                          11: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:1a:e9:af:fa:76:45:97:c3:ef:df:39:2d:a9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Oct 20 06:01:11 2025 GMT
            Not After : Oct 21 06:01:11 2025 GMT
        Subject: CN=c2790013fc2354c9a9cc46dde5a2eab5b803f84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:6a:bb:7b:c0:a9:0e:7f:5b:3b:9a:de:6b:
                    74:26:4e:58:2d:4f:63:9b:67:67:bc:a7:c2:bf:f0:
                    35:16:f3:43:93:17:01:4a:d9:00:e8:6b:38:58:55:
                    a2:66:33:dc:6c:ce:1c:7e:f0:04:2e:d8:1a:62:3f:
                    3b:0c:a1:e0:68:ef:a7:c1:55:63:0b:f2:06:e5:b7:
                    b3:bf:08:ca:7c:07:b7:03:c5:33:bf:e3:dc:5f:cf:
                    75:a4:8c:29:55:44:1d:14:69:1b:2e:ad:ab:e8:4d:
                    06:1e:ff:f5:46:bb:83:de:71:7a:ae:85:f6:7d:c0:
                    05:ec:12:0e:da:96:a9:53:40:ee:26:1a:40:3e:e3:
                    ab:94:6c:22:a8:05:95:03:79:4f:59:2c:4d:ed:f9:
                    bd:74:cd:7e:9f:87:17:07:68:5f:b5:74:d6:2b:06:
                    a5:06:6c:41:9e:90:7d:ae:a1:fe:02:90:75:37:92:
                    df:67:f5:c5:b9:8f:80:5b:7b:5c:4c:af:ee:76:5b:
                    80:c1:4b:83:a0:fc:c0:ab:6e:41:ef:eb:c2:e6:7b:
                    81:03:a7:83:26:41:22:07:ce:40:c1:33:cb:6d:41:
                    ba:68:26:c3:e6:20:73:43:6c:85:d2:c0:c2:d9:99:
                    cb:d0:81:a8:ee:4a:14:0b:43:31:bf:a7:49:75:4e:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:00:13:FC:23:54:C9:A9:CC:46:DD:E5:A2:EA:B5:B8:03:F8:4E
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:32:b0:e3:53:d2:49:8b:2f:a4:b9:68:c0:91:71:a0:7e:
         4f:3c:a3:d4:67:e5:88:90:99:70:a0:bb:78:62:a9:c3:37:c5:
         8a:6d:05:a3:4c:f4:24:6c:be:6b:8e:c9:48:a2:eb:fe:15:1c:
         3d:59:6f:a4:33:2e:24:7f:fd:4b:2f:ce:0e:99:09:d7:d9:2a:
         f7:35:75:57:e9:f2:85:c5:31:aa:17:c0:6b:c4:29:89:7b:7b:
         28:f4:31:d2:cf:fb:6c:a8:2b:74:32:54:23:34:25:2d:9c:3f:
         8d:bb:18:55:8d:47:0b:e3:b3:45:78:67:7a:ad:93:e5:30:7b:
         db:31:94:1b:83:3f:b9:66:6c:c4:f5:68:13:d3:d2:96:b9:49:
         1e:18:44:d5:af:42:81:bf:f3:dc:b4:0b:9b:52:b8:f7:99:74:
         ac:a0:47:16:6b:07:fb:05:a8:f3:be:db:f3:97:35:fb:2d:96:
         2e:a7:13:67:be:46:2d:15:3c:78:ae:44:7a:9a:58:87:63:f3:
         4d:57:08:9b:39:82:a4:45:5f:a9:68:6e:15:00:a0:23:2b:d0:
         97:35:b3:60:26:06:8b:5c:41:a2:fe:a6:31:4d:44:ba:c4:8d:
         0e:7a:51:46:01:b8:ad:0e:1e:f5:7c:18:86:4c:c7:9c:72:1e:
         f4:68:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:08:46 2025 by rpki-client