Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          53opaY6/ZShqAY60wmXp3dfCPAnvSwcLEB7OU1H4ao0=
Subject key identifier:   0C:60:20:98:3E:3B:9B:5A:9F:D0:02:2E:E1:31:73:D0:BB:14:6A:EB
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       0198D54E37A4721F52FD8826C7D60AAA010A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          15D6
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: PX9YjHDqj2LCNjghJ7shwhg/vKVJSsdK00xP8w+aJB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:37:a4:72:1f:52:fd:88:26:c7:d6:0a:aa:01:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=0c6020983e3b9b5a9fd0022ee13173d0bb146aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:af:57:d5:cf:0b:c2:85:d5:ab:ca:01:15:
                    2d:07:6e:88:91:1a:cc:e8:c6:e4:b7:dd:0a:d7:89:
                    6e:c9:ba:55:3d:55:51:51:e1:dc:b1:71:83:09:ac:
                    d8:0e:72:4d:aa:4d:a3:7b:24:e1:6f:3f:4d:bd:50:
                    ae:bb:9e:5b:d7:1d:51:77:57:6e:b3:d2:0f:9f:6e:
                    49:9d:df:22:88:cf:42:3b:9d:88:bc:52:c3:e3:ae:
                    59:1b:a2:42:d3:a0:54:cf:ed:7c:aa:ea:73:58:b0:
                    51:30:b9:64:38:19:e7:53:a4:60:5c:68:fe:86:d2:
                    d6:9c:1c:b1:3b:a1:1e:cd:ca:a9:36:43:4b:95:51:
                    df:e9:8f:81:33:16:cd:04:ea:13:e8:84:6d:0d:ee:
                    2d:d2:be:ae:a1:37:98:ed:f2:cb:7d:e5:c2:44:68:
                    28:bc:64:34:be:78:37:30:fd:f9:de:aa:66:12:c9:
                    e8:69:72:04:01:17:46:83:96:30:c2:cb:1b:73:ab:
                    a9:6d:60:11:29:9e:55:3e:de:0c:a5:d7:39:40:45:
                    77:0f:db:53:a4:44:77:e3:80:ca:09:df:92:d9:78:
                    5d:13:c7:c5:96:ea:b2:c8:7e:8a:ce:6e:22:c1:04:
                    e9:08:6e:62:75:2e:76:a3:5e:78:12:ba:fe:82:c6:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:20:98:3E:3B:9B:5A:9F:D0:02:2E:E1:31:73:D0:BB:14:6A:EB
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:5f:71:b9:1f:07:de:a1:61:0f:9e:16:62:08:ff:e0:3c:
         30:ed:4c:e7:98:a1:0b:87:63:60:34:32:85:dc:f9:32:58:8c:
         e3:b2:0f:68:41:c4:f8:3f:ca:8c:21:85:26:7e:e0:b0:ff:8f:
         f3:08:8a:78:3c:3c:8a:63:05:09:7a:0c:6b:8e:0b:ed:e4:9c:
         68:e4:2c:60:d6:10:80:19:f5:8d:b7:40:d6:c3:b0:cd:de:e4:
         fe:76:3c:80:fd:11:d3:7a:d6:4b:8b:7c:35:fc:14:4a:04:02:
         b7:4d:e3:59:09:19:2f:a9:cf:5c:91:28:49:f3:7f:c7:2e:4c:
         2c:5b:4f:da:a5:7a:ea:e6:3b:6d:fd:c9:0d:85:ff:80:69:ee:
         2a:be:49:03:bc:e5:e6:7e:d3:5e:66:c3:dc:1e:34:ed:87:68:
         46:24:f1:c8:27:88:d0:fe:c4:94:11:e3:57:c1:52:99:b2:a5:
         a4:64:2a:40:b8:dc:b2:4f:97:1d:99:d3:10:d1:f0:9f:c7:3e:
         e3:0e:99:93:54:7c:29:89:0f:5c:07:24:29:5f:14:27:f0:ae:
         61:05:1b:4e:af:9f:7b:2b:a3:fe:60:30:8b:d8:6f:9a:ea:41:
         89:54:55:85:c7:5b:0e:b5:40:54:2d:5d:27:89:3c:f5:ff:af:
         a9:44:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:06 2025 by rpki-client