Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          lISSnaRTXSAxBiwi+9RK0/4ejGNLapOlkmsqGcECx84=
Subject key identifier:   63:89:47:AB:D6:6E:1D:2A:9F:D9:42:ED:BC:5F:4D:06:F1:B3:83:35
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       0198D5BBAEE1DCD76D5422226B7498BD16EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          0E22
Signing time:             Sat 23 Aug 2025 07:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:43 +0000
Files and hashes:         1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
                          2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
                          3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
                          4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
                          5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: aEuoMPdbTmfrUqIsUYS4F1dm04XDxcrgNCkukKBl62U=)
                          7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
                          8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
                          9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ae:e1:dc:d7:6d:54:22:22:6b:74:98:bd:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Aug 23 07:01:43 2025 GMT
            Not After : Aug 24 07:01:43 2025 GMT
        Subject: CN=638947abd66e1d2a9fd942edbc5f4d06f1b38335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:c0:cd:9f:e2:bc:4a:60:4e:a1:db:2f:3f:
                    cc:f4:9e:08:87:66:d9:13:a4:65:4b:fa:68:49:13:
                    96:f3:ac:0a:ad:87:23:05:73:84:08:6b:21:b7:3d:
                    fc:d0:44:b4:bd:05:8f:3e:df:fd:13:30:bd:9b:3e:
                    fd:b3:1f:a9:92:a5:12:94:cf:08:f1:f7:4a:07:bb:
                    61:38:47:af:df:fa:49:9b:d7:16:98:ca:a3:74:9f:
                    e7:63:82:4b:53:24:4b:cc:29:7c:71:f5:13:86:ae:
                    2b:84:1a:14:ad:54:42:ab:ce:6c:af:3a:7c:08:66:
                    6b:2c:af:b4:9c:7f:7a:5e:1d:2c:e1:27:a1:a7:f7:
                    98:66:9f:dc:a6:d4:b3:49:77:58:06:cc:e6:6b:a4:
                    63:d5:47:82:20:ae:4c:d0:2a:88:02:a1:ed:8b:b3:
                    98:45:08:1e:ba:60:60:30:3c:55:5d:58:7a:31:97:
                    4f:4d:1d:95:78:a5:ac:4c:6e:4b:28:5d:2d:59:24:
                    a6:ca:d4:8e:08:b5:db:09:77:47:08:5c:65:f0:bb:
                    1a:b8:2a:7c:d4:16:3f:78:5f:b8:4d:0b:0e:56:73:
                    82:6f:86:d4:39:92:52:c6:25:ab:69:93:fe:fe:77:
                    1b:4d:b0:49:5d:b2:a1:ad:b9:47:e6:e9:71:a3:cc:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:89:47:AB:D6:6E:1D:2A:9F:D9:42:ED:BC:5F:4D:06:F1:B3:83:35
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:47:57:a5:2d:2c:79:7b:96:4c:4c:17:76:7d:39:a6:76:
         10:e5:6e:21:09:96:98:b5:5c:e0:17:25:1f:f7:64:36:21:73:
         8c:e2:a6:b3:d7:8a:57:2f:b6:ad:05:d9:e9:04:ea:1a:3a:72:
         22:6b:94:f2:ea:58:72:63:93:2a:e2:7b:07:1f:d2:54:69:6b:
         a3:6c:25:05:ed:4d:a1:b8:90:51:5f:70:c5:fe:a9:cd:f3:a7:
         cc:22:64:42:b4:c0:6b:ba:45:67:15:8e:1c:5d:5c:05:0b:81:
         3c:96:60:c9:43:c3:24:83:ee:e5:7c:25:f5:cf:4c:6b:25:fb:
         ae:45:59:ad:bf:af:21:73:cd:5c:35:e4:c9:ae:14:1b:08:33:
         92:05:df:44:ca:a8:07:f2:fe:15:33:7b:ad:d3:7d:ff:0e:86:
         7e:64:1d:0b:d3:6b:4d:02:a5:d7:43:9c:33:54:1a:ae:1b:5d:
         0b:52:ac:1f:45:57:b7:2f:84:ea:ef:9e:32:87:5c:67:41:e6:
         eb:87:c1:9e:4d:97:90:7c:87:f7:6f:f0:42:8d:30:7f:28:1c:
         67:4f:d9:6d:86:d6:7c:cd:74:0f:b5:cc:43:a7:57:72:b4:05:
         09:92:97:c7:64:ca:17:d8:e8:4b:aa:7c:9a:c9:68:bd:1e:7d:
         e8:b9:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:05 2025 by rpki-client