Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          blhgrLuyBKFPyt8HGPEExuyba3hHZB0vP2R7/C6CxpI=
Subject key identifier:   66:EB:BE:09:D9:4F:31:23:AC:AA:EA:36:06:5A:5F:D2:EF:B9:0C:2E
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       0198D54EB514B0AF83BD8A2F8D7F7F498270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          02B0
Signing time:             Sat 23 Aug 2025 05:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:41 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: dEJ5Cz6NXhWPJbghcRI7rOl8EfZo9U2Vblc2K0Kbh6k=)
                          2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:b5:14:b0:af:83:bd:8a:2f:8d:7f:7f:49:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Aug 23 05:02:41 2025 GMT
            Not After : Aug 24 05:02:41 2025 GMT
        Subject: CN=66ebbe09d94f3123acaaea36065a5fd2efb90c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:57:0e:0b:a2:2a:b8:54:93:07:d6:e4:1d:
                    b7:f8:54:be:e0:53:28:52:bd:1d:fc:82:13:f5:6a:
                    9a:19:b9:12:0f:14:3a:c1:ac:7c:39:dc:e2:7d:cc:
                    ce:2f:84:c8:48:9e:f2:6d:b6:79:e3:3a:d0:ad:ef:
                    14:62:d5:58:13:f6:37:e8:16:9b:93:35:c2:dd:9c:
                    61:d6:46:a6:04:32:a6:99:44:fa:76:7c:d5:40:bd:
                    04:ee:71:2e:3e:c8:7b:10:3b:28:38:58:37:2d:2a:
                    83:07:20:e1:54:d2:7a:2b:6f:23:70:95:ee:e8:92:
                    a9:c5:53:1c:14:c0:01:64:c5:b5:3c:e8:a2:fc:83:
                    01:da:96:79:7b:4d:fc:80:dc:9d:2e:06:28:5e:30:
                    29:bf:a1:8f:a3:b2:a4:5f:d2:6f:f0:6c:f6:37:3e:
                    70:4a:12:39:b1:68:e6:d0:92:91:51:c3:15:fc:9f:
                    32:e3:7d:56:be:20:fc:32:10:d4:58:d8:bd:5e:be:
                    d1:45:40:94:81:ae:74:ea:91:15:f9:f7:a1:b2:31:
                    f8:23:23:8e:43:08:d8:12:ad:b8:2d:db:f7:ef:a9:
                    28:6b:83:55:1b:1f:e7:98:d2:8c:82:c8:aa:1e:c7:
                    0b:21:66:a7:1e:93:3d:37:ba:59:d9:f1:bc:78:5e:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:BE:09:D9:4F:31:23:AC:AA:EA:36:06:5A:5F:D2:EF:B9:0C:2E
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:81:0c:52:3d:fe:ee:83:b3:18:61:a9:70:03:8f:d6:31:
         2c:a3:be:49:0c:06:fc:cf:8e:e7:0d:55:e5:b7:15:a6:bc:0b:
         0e:1a:f2:91:4b:17:e9:80:3e:63:59:ca:f1:fb:b0:3b:95:f5:
         49:ae:2c:64:80:73:76:1c:d7:5c:8c:db:4c:0c:61:91:8c:2d:
         45:d4:22:5e:3c:87:30:a5:0b:fd:a0:bd:be:aa:53:7c:57:bd:
         d7:f7:ab:63:46:48:c7:66:f9:94:57:1a:e4:2b:9a:c3:02:b9:
         11:5b:8c:76:86:11:79:2a:13:44:6c:9b:0c:d2:37:25:3d:7f:
         ce:d7:c2:0b:0c:16:bb:96:3d:68:4c:7f:60:db:e3:db:d3:08:
         53:3e:08:db:c1:9f:4c:2c:cc:43:cd:eb:33:96:44:a3:45:93:
         ab:6f:5b:e5:48:73:60:c3:7c:3a:3d:89:9b:1d:38:9c:94:61:
         99:7d:dd:41:9c:f7:6a:e4:5a:00:43:8d:e8:26:95:71:17:17:
         4e:dc:64:c4:94:dd:1d:5a:f5:f0:c7:28:4c:60:a2:f1:4b:f1:
         c2:a8:9b:95:13:22:a0:fd:2d:98:87:ff:09:11:ed:ad:a9:9c:
         26:a0:1b:4e:a7:fd:95:1d:4d:39:12:8a:28:6f:13:16:cd:88:
         d7:50:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:00 2025 by rpki-client