Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File:                     dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier:          cJCVvgRZGXOmuJOrgzZyMjuwLisR1SQo5MvR8BZItS8=
Subject key identifier:   70:CA:D6:6B:ED:7A:41:7D:56:24:B1:D3:52:AA:28:E2:5E:A1:21:3B
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer:       /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial:       0198D54E4B7BCDB7789967647A303FBB5398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number:          0F1C
Signing time:             Sat 23 Aug 2025 05:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:14 +0000
Files and hashes:         1: cXNS-jhbDVvMG8hSqbBOLCvMoSQ.roa (hash: ttyMv3492QrBBmeGVtvaGpTbwOtDA0bKvFjMI/PqMtk=)
                          2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: QXAklXVZBBAHWBKKHXdIvSiBWhVyIApZWRTI+2aK+5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:4b:7b:cd:b7:78:99:67:64:7a:30:3f:bb:53:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
        Validity
            Not Before: Aug 23 05:02:14 2025 GMT
            Not After : Aug 24 05:02:14 2025 GMT
        Subject: CN=70cad66bed7a417d5624b1d352aa28e25ea1213b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:8f:a0:75:ab:b3:9c:61:95:e0:f2:a5:4e:
                    af:62:77:ac:8d:b0:00:21:d2:08:0d:a7:9a:7f:c5:
                    35:c8:e6:60:b3:00:c8:6c:c7:83:2b:ef:31:93:87:
                    30:d6:2a:47:87:35:5c:f7:11:60:29:19:de:51:0d:
                    15:45:29:db:47:d7:9b:67:ea:83:21:0b:60:e0:f8:
                    e5:73:49:07:e0:d3:3f:75:26:6c:39:c8:6f:c1:e4:
                    7b:74:91:e3:59:ab:7e:5b:b7:b4:9f:88:1c:b9:c6:
                    8d:23:ad:1b:32:b8:c9:7c:66:4a:a0:32:86:1f:dc:
                    1a:37:5c:2b:ad:64:e9:95:f0:cd:39:29:6a:49:c9:
                    cb:96:45:25:2f:c1:e7:d2:71:09:ed:3a:f8:7a:e1:
                    80:12:0b:04:f5:42:6b:14:a7:d9:37:6b:7a:0f:05:
                    08:7d:f9:69:7c:27:4c:89:ba:c0:4e:1e:be:9a:61:
                    de:02:3f:5e:cd:a9:ae:b2:c3:40:c1:79:96:10:de:
                    27:ea:de:b1:8c:cc:8a:00:ae:0a:69:d9:ce:4d:52:
                    59:34:f4:9f:99:5b:ec:ce:6f:1d:d6:bd:20:d8:09:
                    30:83:17:13:4d:5b:2c:7d:d2:72:a7:8c:83:9c:ca:
                    6e:ad:e9:72:37:a7:3a:2f:1d:62:ef:c2:a4:2f:37:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:D6:6B:ED:7A:41:7D:56:24:B1:D3:52:AA:28:E2:5E:A1:21:3B
            X509v3 Authority Key Identifier:
                keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:b4:48:ec:b2:39:56:ea:64:c6:c2:9b:f6:d8:08:dd:a4:
         06:49:91:e3:9e:a0:d3:c7:d2:6a:ea:36:3e:e8:fe:9e:a7:89:
         34:ab:94:78:69:9c:bb:8c:dd:8b:20:0b:06:ca:26:fe:08:c9:
         8d:13:77:d2:2f:94:70:fa:c1:50:e9:35:84:a6:f8:e6:5d:bd:
         c1:2d:95:cb:b4:bb:6b:ad:ac:a5:12:46:1f:93:dd:1a:a6:80:
         7a:68:57:c7:a7:3e:de:0e:5a:a6:89:da:ef:e4:74:8c:ca:5c:
         1e:e7:45:c6:7f:68:91:5d:84:47:76:9e:d8:0c:45:68:8a:a2:
         7b:ff:fe:bf:3a:37:c7:bf:3f:dd:4e:d1:93:6d:43:f9:79:d9:
         eb:e6:9c:fd:57:81:3b:d7:d9:31:19:86:5f:6d:f8:2b:ea:84:
         7e:35:4e:26:5c:29:47:06:ee:65:b6:a3:8d:e0:a7:d8:ed:00:
         ed:46:27:35:0e:e2:0c:3e:10:8b:d2:78:af:6d:b1:69:fa:08:
         3b:cf:b7:bd:ff:2a:72:b3:cf:09:08:97:5c:9b:d2:8e:6c:fe:
         f4:5e:cf:66:e9:f1:ca:a2:c4:96:84:77:15:27:26:bc:35:c3:
         0a:14:2c:df:53:d8:6d:3f:ef:c5:c7:94:98:d6:88:98:00:31:
         60:57:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:15 2025 by rpki-client