Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          47R4WFWDezlx0Xznc9L6VPmB/TQZB9/s1UO9IQNqtyw=
Subject key identifier:   6A:AF:6B:82:F0:E8:55:C9:C1:E1:37:5D:9F:5B:C9:C5:30:47:F8:1B
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       0198D66075527876051AC1677D5BC59F61EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          1297
Signing time:             Sat 23 Aug 2025 10:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:42 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: bYiiCV7gjQiyjqRvfm8j8/dGuajHZyGewwzzcHhzZYw=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:75:52:78:76:05:1a:c1:67:7d:5b:c5:9f:61:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Aug 23 10:01:42 2025 GMT
            Not After : Aug 24 10:01:42 2025 GMT
        Subject: CN=6aaf6b82f0e855c9c1e1375d9f5bc9c53047f81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:c0:e8:20:0e:05:d2:61:44:ac:64:78:a0:
                    c0:0e:b5:b9:f0:32:aa:25:1b:3f:c6:0a:14:18:b8:
                    d5:e2:79:b4:6e:7c:5c:bd:fa:2d:c1:5c:c2:86:94:
                    08:fd:e0:31:81:a2:40:87:d2:6f:2c:f5:c3:4e:26:
                    c6:0d:a4:5c:d3:e0:ea:95:29:01:f3:b4:76:24:c9:
                    04:82:41:87:2b:70:6f:fe:d3:ed:1a:6a:4d:b8:7d:
                    18:80:6d:21:69:35:cb:1d:09:e9:6b:c8:16:46:ef:
                    5c:05:a5:86:8d:83:f7:b9:24:39:9c:02:9c:c2:7c:
                    0c:b1:92:e1:f7:f2:e8:be:69:26:ca:61:c0:1d:bb:
                    63:0f:a5:32:18:78:9e:90:00:1d:94:97:59:d1:04:
                    80:ab:5a:5b:e0:93:1d:15:a1:16:66:a4:56:a0:0f:
                    e8:22:f9:89:72:d9:65:25:ba:13:e4:54:72:04:3b:
                    c1:09:0f:66:22:91:fc:ff:da:f9:2f:20:bc:77:27:
                    c6:77:23:09:e7:80:2d:82:90:16:22:f4:66:38:be:
                    66:df:95:c9:05:6a:09:17:22:08:97:4c:77:d4:4e:
                    fd:b3:3c:00:c3:7f:de:11:2d:e0:23:e1:8b:4e:72:
                    90:e5:fb:0e:d1:1f:39:ad:f9:72:e3:8b:e6:a9:c5:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AF:6B:82:F0:E8:55:C9:C1:E1:37:5D:9F:5B:C9:C5:30:47:F8:1B
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:c4:be:d5:2f:34:c5:8f:ba:ca:5d:1e:a3:60:24:7e:2a:
         bc:09:98:7d:a3:a5:70:6f:a8:cd:6d:b0:7b:e8:5a:23:04:99:
         f5:73:b8:52:50:90:4e:cb:00:3a:1a:77:e2:76:ce:1c:34:f0:
         35:08:42:42:2a:57:1d:fa:7e:f4:d5:90:8e:21:a3:52:3b:17:
         7b:ee:b2:20:a2:02:85:b4:c2:dc:5d:6c:3c:aa:7f:dc:ab:46:
         d3:5e:cf:46:c8:b2:2e:7e:1f:b5:b1:77:72:28:83:e6:97:63:
         fe:e1:aa:91:a5:a3:5c:2e:81:12:de:e3:25:2c:9e:5a:3e:97:
         1f:7b:55:8f:3a:c4:51:af:d0:6e:28:3a:a4:70:e4:2d:70:4a:
         73:30:46:34:d5:03:33:b5:d4:11:24:6e:0a:ab:79:5e:c7:1e:
         84:19:55:7b:0c:e5:a4:73:27:10:eb:60:04:06:0f:5c:5b:a4:
         f4:c3:44:8e:a5:ab:0f:d8:92:9a:a1:d3:08:3b:d2:b1:b3:ec:
         28:0e:f7:51:f3:aa:43:24:ba:8e:7b:e8:66:54:e4:8b:d9:db:
         b1:be:54:10:96:c9:b4:f3:32:0c:b2:6f:08:c4:7f:e5:0e:f1:
         3d:1d:71:8d:2d:21:df:af:87:01:b8:52:c8:58:11:15:da:63:
         ac:50:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:57 2025 by rpki-client