Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          1TrAL/vnHWhT5b473SsV6QcS3pSzQHBgzgYDiign4Uk=
Subject key identifier:   E4:45:55:48:4C:E8:4F:CC:BD:FF:3B:62:5D:85:79:1F:D4:7A:C6:12
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       0198D7A92E82F50C08844204B4A22A0B26FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          09A5
Signing time:             Sat 23 Aug 2025 16:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:45 +0000
Files and hashes:         1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: xtbUAdQX5MEIjaA9km/eV0eJOEieen1n5FyN+mzNCBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:2e:82:f5:0c:08:84:42:04:b4:a2:2a:0b:26:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Aug 23 16:00:45 2025 GMT
            Not After : Aug 24 16:00:45 2025 GMT
        Subject: CN=e44555484ce84fccbdff3b625d85791fd47ac612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:40:5d:b7:d4:04:de:18:22:9d:49:ce:5d:
                    cf:14:15:ce:50:d0:c1:55:2b:2d:4c:d5:a9:84:79:
                    c5:33:d5:d6:f1:11:c8:10:86:5c:d3:c4:f1:dc:ed:
                    12:20:16:ef:17:50:ae:b3:17:3e:f6:e4:f8:34:b5:
                    4a:b8:8e:a7:75:2b:d5:2e:f1:29:cd:0f:04:1f:1b:
                    f3:a9:32:1f:11:d5:e0:a6:ee:10:4a:5f:c9:5f:22:
                    ee:24:5f:11:17:db:cb:83:d0:c6:00:aa:fc:8b:45:
                    36:76:cf:2f:7c:9d:fa:f6:44:fa:6f:16:2b:4b:75:
                    b2:25:fb:79:b7:a6:7d:59:78:68:fe:49:b2:54:25:
                    ea:88:1d:3c:63:1a:69:39:72:96:ff:35:08:02:cf:
                    1e:48:8d:53:a9:68:56:19:41:23:a6:c5:51:9b:58:
                    4f:c3:b3:93:1a:6b:ad:6f:b9:b4:03:49:3d:9f:37:
                    15:7f:64:33:53:51:a8:60:f5:e6:36:d7:4c:79:d4:
                    f6:32:16:b0:06:e9:0b:16:7f:05:55:05:cb:5a:95:
                    22:a8:ba:d2:12:71:78:30:d1:39:a9:f0:5a:46:60:
                    34:31:7c:e5:67:9a:78:68:18:66:3e:00:f9:4c:8b:
                    a6:8b:1c:78:c9:6b:a1:a7:60:f7:df:63:f6:4f:78:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:55:48:4C:E8:4F:CC:BD:FF:3B:62:5D:85:79:1F:D4:7A:C6:12
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:38:ac:d0:66:bd:08:73:13:76:e5:1d:0c:71:60:c4:78:
         94:b4:dd:a3:cb:d2:7f:9f:0e:dc:b0:65:b9:99:ad:e9:1a:87:
         fe:07:8c:88:ec:2a:0e:5a:d0:1b:f9:5f:a5:e0:19:a1:c5:09:
         cb:9d:07:83:fe:6f:a2:9e:bf:b0:53:50:83:60:3d:f4:14:7a:
         a8:e3:0d:27:f9:67:e7:87:9a:ce:c4:0a:d0:07:72:d9:c1:3a:
         e3:dc:dd:7b:84:06:83:1a:7c:93:6a:fd:b3:ee:2a:57:98:04:
         fd:a6:a8:e1:dd:17:9c:3c:aa:7c:17:aa:c4:99:b5:99:5e:71:
         21:62:06:b2:3a:04:9b:bf:8c:69:ea:ed:53:0b:f4:34:31:32:
         be:97:9d:67:e9:9b:40:35:2e:45:1c:ae:bf:06:7f:6c:e6:e2:
         e6:0d:bf:1e:59:5f:20:46:bc:a8:92:7a:e6:d7:97:4d:bf:ff:
         85:7e:0e:f2:97:cc:2c:e1:56:bf:7f:b8:a8:04:76:69:c2:ea:
         be:3c:6e:4a:2b:c5:8b:0a:34:d1:29:49:a7:03:36:4c:4c:59:
         3e:cd:d7:01:4c:df:22:75:a8:33:30:98:9d:fd:4a:17:72:4e:
         a3:42:1d:82:21:ff:98:7a:1e:ab:de:d3:34:72:d9:c6:39:bf:
         2a:2d:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:40 2025 by rpki-client