Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File:                     cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier:          7fDhvQfab1HCIeqZ1RFWzHF6J2z695O1VQ2Qx7Jdz7A=
Subject key identifier:   C7:DE:9E:E5:38:DF:90:42:2C:80:58:76:E9:E5:7B:13:9B:78:C2:21
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer:       /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial:       0198D54E8CC44532FF2F62BB81F886593117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number:          04B2
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: qY1k5EkMgoy6PfBhA1HEaY+Zgpo+F3tRqJxn2ipE2Ks=)
                          2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8c:c4:45:32:ff:2f:62:bb:81:f8:86:59:31:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=c7de9ee538df90422c805876e9e57b139b78c221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:59:e9:e8:85:e4:6d:6a:64:7f:c8:6e:c3:
                    2e:e3:9c:0a:ba:8e:ea:76:97:fe:a4:01:6e:3f:51:
                    02:4b:d6:8e:2a:cf:c9:87:c5:9e:c9:7f:74:ed:1b:
                    4f:62:88:3e:4f:44:fa:98:8c:1f:96:c9:78:b5:8a:
                    f9:2d:d2:cb:b6:72:5c:18:c3:0c:fe:dd:c4:96:24:
                    d9:78:40:ca:b5:68:7a:4c:00:54:ad:cf:89:20:bf:
                    ea:72:eb:99:39:54:0b:bc:d0:76:b2:96:24:41:63:
                    f6:31:32:a0:68:cb:2d:de:c0:13:ab:c9:f2:29:4c:
                    fb:9f:14:1f:28:a2:f1:cc:34:df:71:76:40:28:37:
                    74:2a:2f:e2:80:8c:6c:e5:6c:0f:42:03:44:3c:84:
                    9f:43:e6:85:0c:3e:d3:77:33:31:93:c3:4f:f2:d2:
                    19:21:b7:fc:c0:e1:3e:99:a2:12:5f:48:fb:b6:20:
                    25:fb:d5:38:bc:43:0e:46:e5:e0:9c:6a:e9:fe:98:
                    e6:16:45:02:92:e6:73:ea:4d:0a:1b:85:62:91:4a:
                    6f:86:79:7f:20:4e:b6:e9:59:89:da:23:d0:ff:3d:
                    e6:e7:0f:fd:3c:26:71:e1:10:91:e4:e3:53:da:13:
                    16:dc:7f:98:77:42:1b:4a:eb:ac:e4:12:71:ac:16:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DE:9E:E5:38:DF:90:42:2C:80:58:76:E9:E5:7B:13:9B:78:C2:21
            X509v3 Authority Key Identifier:
                keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:f9:13:37:6b:e7:5a:f1:dd:a9:a4:c6:93:ed:5e:e6:c2:
         54:d0:f7:2c:f2:d6:8d:bb:af:8c:71:57:e2:d3:96:1b:13:7a:
         67:13:88:cd:64:af:de:f2:78:d0:16:9c:7c:13:c4:bd:f6:28:
         e6:3c:7a:35:86:b2:f7:26:98:fa:75:6c:12:fe:91:34:da:42:
         70:92:a4:56:c5:8f:03:be:6d:e5:94:18:97:33:bc:d1:8c:5c:
         d0:db:50:57:bc:5c:43:0e:cf:9c:37:47:b1:15:01:45:69:a0:
         21:35:ee:f6:3a:96:94:51:67:be:81:ac:0e:6c:87:ed:c5:3b:
         27:e6:ec:43:f0:e2:f5:d3:bf:9a:83:63:90:05:a2:d8:32:85:
         19:4c:71:e6:5f:fb:83:45:a2:e4:9d:3c:1c:4b:13:d6:d2:df:
         e9:f3:64:c4:ed:b0:e4:f7:d6:5d:c9:31:8e:41:8a:82:6e:cd:
         b9:32:37:10:49:b7:ee:35:44:57:0e:32:37:73:f8:2f:6b:b8:
         62:b4:5d:b5:e9:05:f3:e4:5f:5c:0d:24:d4:82:2d:a6:5b:bf:
         2f:64:f8:37:3d:bc:84:0a:78:bc:68:8e:64:6e:85:86:fc:a4:
         37:58:7a:0f:32:24:6e:62:59:2e:68:13:a9:92:b5:fd:b3:8d:
         68:6b:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:11 2025 by rpki-client