Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          1OVE/QyFqDiQuxVcWhCEMZcUgvXPv17rNLdZsxRWlBU=
Subject key identifier:   30:E2:F8:05:EA:20:C3:9B:40:25:CD:16:A6:69:37:47:2D:68:23:6E
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       0198D583F0765AA42091C0EE9124F11038E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          034F
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: p1t4TtS782ZV/30P+aC6RrxnDG/R8e00cWY7g6LXNGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f0:76:5a:a4:20:91:c0:ee:91:24:f1:10:38:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=30e2f805ea20c39b4025cd16a66937472d68236e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:71:a9:0e:f4:d8:50:03:a2:75:c3:a9:55:
                    56:0f:0f:68:49:82:bd:30:89:00:40:4b:13:f7:5d:
                    55:b2:2a:0e:b7:d0:ea:d3:64:57:4b:e3:ae:05:98:
                    e0:ec:16:35:01:b1:4c:46:ba:c8:08:53:5f:66:10:
                    99:6a:2a:66:3a:53:82:26:50:6d:d0:d5:3f:71:86:
                    37:d7:49:31:2e:9c:99:b0:a6:dd:65:28:2f:e1:42:
                    f8:79:42:52:6c:ab:ca:ee:12:2a:55:5f:d4:3e:46:
                    f3:11:55:37:45:55:2d:91:3d:83:5d:f1:31:bd:14:
                    92:53:92:8c:ea:ec:a5:35:4e:f2:17:48:b4:6c:ed:
                    1d:6c:27:ac:c1:1d:6b:e4:c2:12:84:f3:15:83:0b:
                    e0:51:68:c1:e0:31:4d:aa:ab:87:0b:b2:b3:2c:d6:
                    93:5a:e7:d5:76:cc:7c:48:03:8b:46:29:ca:4f:af:
                    ce:73:d6:37:a8:1e:cd:48:bd:c0:f4:2a:90:17:a7:
                    06:01:2e:e7:e7:d9:7d:45:85:92:ae:32:e7:ff:66:
                    ba:8b:ff:7a:78:e6:a0:98:6b:c3:00:11:c9:77:7e:
                    53:87:84:e8:83:62:ac:3b:85:cb:8d:18:3a:2b:06:
                    ea:7b:52:73:c0:80:1f:0a:2f:f5:52:2b:17:6d:ae:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:F8:05:EA:20:C3:9B:40:25:CD:16:A6:69:37:47:2D:68:23:6E
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:bf:ad:91:ac:8f:21:67:2e:e8:c0:e5:45:11:c1:34:50:
         f5:f6:53:e8:f6:22:68:03:a8:5a:b3:81:ee:09:44:af:38:f7:
         0a:99:b3:e7:3e:cd:44:1b:9f:6a:34:3f:92:d0:09:c3:ca:b6:
         a4:79:51:43:f1:e7:18:65:4f:9d:20:b8:e6:c0:a1:04:c2:ac:
         87:cc:04:d0:30:df:4f:9d:27:2c:bf:4c:26:b2:1d:f5:1f:8d:
         9e:86:7f:f5:db:87:e2:42:aa:24:b4:21:e8:70:85:1d:12:48:
         a3:34:bf:57:31:54:78:c5:d8:50:a2:ae:b6:56:63:72:fc:a5:
         19:a5:1c:5d:8c:38:a5:28:e4:ac:fb:9c:d7:8b:81:dc:8c:82:
         3a:6d:f4:ab:f8:15:92:fb:ea:3d:81:d2:77:ba:ed:0d:ba:98:
         e4:ae:fe:b6:c9:c1:41:4a:75:79:4b:0e:c6:eb:8b:bb:ad:d0:
         5b:7c:af:bb:a4:50:cb:4e:c8:61:2e:63:2b:b0:01:5f:11:c0:
         8d:1d:66:05:a8:f5:60:b6:d1:df:74:e7:fd:84:4c:8d:36:ad:
         44:0d:9f:14:ef:e0:10:f2:e2:db:45:d6:80:81:5a:eb:51:8e:
         2d:ed:fc:66:66:8d:3d:1f:dd:96:6c:24:44:17:1b:22:e4:db:
         c9:2b:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:34 2025 by rpki-client