Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          2xr+AxC/gpU9wYvRBukMIOnNEPPKDwWTCbGbDGJoslQ=
Subject key identifier:   26:75:3A:F0:72:96:ED:C6:EA:98:E9:68:13:0F:5C:73:01:E8:21:FC
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       0198D4A7CFA5CE897FE155083BB787C9116F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          023B
Signing time:             Sat 23 Aug 2025 02:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:24 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: 8IJLy++XMmPuo9nI0YTAOrK7s17fChGuVSnLSrIG4XM=)
                          2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:cf:a5:ce:89:7f:e1:55:08:3b:b7:87:c9:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Aug 23 02:00:24 2025 GMT
            Not After : Aug 24 02:00:24 2025 GMT
        Subject: CN=26753af07296edc6ea98e968130f5c7301e821fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:2b:2e:c9:0c:f9:9c:b6:dc:bb:19:36:b1:
                    d1:0b:b0:39:49:bf:09:91:62:93:7f:f8:6f:ac:f4:
                    df:2f:be:34:c5:f8:35:be:a2:e4:c5:a3:a1:3d:c4:
                    b7:42:bf:70:ab:38:d2:5c:be:1c:f5:59:be:5d:d2:
                    43:6f:7b:97:cc:51:b0:b9:fc:b6:0e:58:2a:75:bf:
                    69:44:d4:a6:59:6e:1e:fa:ae:9f:e5:bd:44:1b:65:
                    08:91:37:8e:31:09:09:e2:93:e7:be:a2:4c:b6:35:
                    9e:f7:47:66:eb:6b:9b:8c:1f:5d:90:4c:21:df:5a:
                    be:76:75:c1:e6:45:6a:26:ce:66:e7:1f:ab:4e:7e:
                    5a:c0:f3:bd:46:81:55:e1:31:27:50:2e:fd:d8:aa:
                    4f:06:b8:4a:2c:f0:41:a3:b2:18:26:59:ba:da:7d:
                    dc:12:94:3e:57:31:ba:13:a1:84:ab:a8:10:b3:e8:
                    d2:54:eb:ef:d4:ea:d1:9a:94:b3:65:63:83:6b:5a:
                    05:cf:16:60:5b:00:8e:9c:b3:aa:50:7d:ee:45:ff:
                    d7:3f:49:96:4f:24:0a:45:59:62:d9:16:a9:d2:6e:
                    83:50:e2:f6:db:32:61:26:ac:33:fc:7a:9f:9f:e0:
                    4c:04:a2:3b:71:46:cf:ca:b9:07:06:b5:15:9b:9d:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:3A:F0:72:96:ED:C6:EA:98:E9:68:13:0F:5C:73:01:E8:21:FC
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:05:0f:d8:90:39:44:cd:a9:ec:8f:7d:f4:e6:e2:0b:ba:
         87:ed:be:c2:d2:f3:7d:49:64:ab:4a:56:6d:e4:de:d1:76:76:
         97:0b:74:38:fc:d4:88:a6:38:a3:7e:49:2d:67:2b:ae:d5:16:
         25:18:5f:0d:db:e7:05:84:c8:3c:f0:80:71:dc:2f:fc:8f:ef:
         3e:a2:b4:89:de:30:5f:b3:0c:18:99:58:c1:98:93:00:4d:79:
         55:e2:8e:ef:62:27:5b:4f:3c:06:ed:b6:2e:c2:94:4b:91:a1:
         7d:aa:21:fd:1a:f4:eb:8c:60:b6:3a:7e:41:de:3b:b1:aa:c0:
         c3:3f:26:e2:c6:1d:1a:b6:a1:d9:1c:a7:e3:dc:fe:42:14:d7:
         3d:76:4c:c1:58:89:db:20:6e:1c:bc:0e:91:50:36:2f:24:9a:
         83:12:fe:a5:48:33:cd:38:0c:60:3b:f7:af:c5:f7:07:80:76:
         de:09:a5:0f:92:14:3e:ba:69:e4:cb:2a:6a:5e:78:42:46:35:
         6d:55:e2:6f:35:c4:c3:ed:10:20:7e:2c:bc:3f:4d:08:ca:80:
         9e:aa:9e:ab:4c:9b:73:19:c9:d3:63:69:36:00:4a:13:9a:ca:
         d7:06:4b:32:8a:2e:66:a6:8c:24:8a:67:b6:4a:9d:97:77:ee:
         d7:93:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:41 2025 by rpki-client