Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          yV7ZsKWCyPmOIKGvRO9x7VPfb9gb+r83wq/NHnzweIo=
Subject key identifier:   AB:A7:EC:BA:33:C5:68:3A:C4:98:45:FB:C5:23:C3:03:75:78:6F:4C
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       0198D4E007C13A203394DC7F7390FD945C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          139E
Signing time:             Sat 23 Aug 2025 03:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:48 +0000
Files and hashes:         1: 5BvjTpw1w_WemifG7e3l7Fwub6E.roa (hash: iBuzSIH4RrP+9cpAm2pS5KWwWOhz5EVY1qvsY3CgLTA=)
                          2: 8K49Xpj4k5dyq2yRfoHAGiOSEeY.roa (hash: hmDY+ZS4NIOUWsCQUGN6/UlYo0A7Iss4LnNH2Vn6ChM=)
                          3: EIwgJdgCtKjSF1OnSZWkIAG5K2g.roa (hash: bhYZ1AB7z9n2WlipWCV/D9RvakS2owMjdFRvLRjlEoc=)
                          4: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=)
                          5: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: ZzNKUMUD73+SQgpA4RsK8CmlruDmR6xguoXdq0oZn64=)
                          6: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
                          7: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (hash: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=)
                          8: tZ1_4m2w2psAaZQXIhS-9t_wi_8.roa (hash: rQXyCvnsYyi09/DywprJe+oCNTO4rAkfiQqg26rwwuY=)
                          9: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:07:c1:3a:20:33:94:dc:7f:73:90:fd:94:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Aug 23 03:01:48 2025 GMT
            Not After : Aug 24 03:01:48 2025 GMT
        Subject: CN=aba7ecba33c5683ac49845fbc523c30375786f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:a4:df:66:7e:c2:d8:fb:c1:51:ff:57:12:
                    af:aa:b5:9d:26:c8:5a:2d:e4:29:b0:d8:4e:ae:7b:
                    63:96:c5:48:4d:88:4e:b8:9a:57:09:74:05:5d:6f:
                    1d:35:e0:2a:b6:e9:ee:04:5f:a5:10:e0:d7:dd:14:
                    b0:f1:03:60:ee:81:03:75:9c:c9:e3:bb:ee:eb:e5:
                    fe:6e:57:95:b2:dd:55:b3:86:47:a0:b5:6a:b7:87:
                    d5:79:e5:77:56:47:3c:02:e6:d5:ec:8f:11:ac:5e:
                    24:0c:97:e3:21:2e:09:0a:38:69:15:d1:0c:69:1f:
                    98:56:d0:ab:d1:9e:36:28:78:11:25:47:d9:bd:68:
                    b8:1a:d2:b1:81:27:b8:90:1b:b3:84:a9:f3:73:6f:
                    56:55:2b:fd:ff:62:d5:7a:8a:7b:aa:ea:e1:50:aa:
                    b7:15:ab:0f:b5:50:39:df:2a:22:3c:e3:6f:a0:5a:
                    76:b0:3d:e8:39:0c:b3:e5:46:1b:30:32:b4:a7:75:
                    b5:fe:67:52:a7:8b:b0:96:52:ba:55:63:76:88:2b:
                    74:2c:81:71:85:c9:29:46:bc:73:16:ad:7b:04:94:
                    35:98:ec:3f:d2:23:04:ba:c3:1b:19:90:ad:ca:a8:
                    0b:ec:fa:b5:fd:04:c7:78:16:90:58:e8:9e:9a:95:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:EC:BA:33:C5:68:3A:C4:98:45:FB:C5:23:C3:03:75:78:6F:4C
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:4e:be:9e:b7:c3:14:be:59:15:6b:4b:09:b8:83:46:bc:
         15:ec:3c:c5:f8:19:7b:34:90:45:c0:1b:90:bb:fa:68:9e:bb:
         f7:ac:df:0d:41:04:1a:1b:23:b6:f8:f7:1e:5c:f1:e3:24:34:
         65:8b:6d:73:dc:32:f3:98:48:6d:c5:07:9c:90:b2:92:7e:6e:
         21:cc:fb:ea:c5:7a:fd:bf:5f:61:3c:20:6b:04:1a:40:95:dc:
         21:e9:5f:2d:70:6e:bd:6d:61:da:04:bc:82:0d:b2:d8:b9:40:
         f8:5a:e8:b9:96:04:b9:66:f4:bc:03:c9:12:ef:0b:1c:56:a8:
         36:ab:1d:c9:87:3a:81:0a:42:03:a8:77:b5:3d:5d:ec:2d:0f:
         bd:29:fa:ce:1f:2a:e5:21:f2:11:67:a8:99:e6:cb:c5:ee:45:
         da:3a:e5:91:1f:9a:c3:a1:4c:87:62:b1:63:01:b1:30:da:fb:
         db:4e:e4:50:6e:1a:81:32:07:22:b4:c5:07:54:5c:4b:6a:9a:
         f7:b6:b0:24:b6:7a:ad:e0:5e:dd:23:0d:de:3d:8d:e6:6f:09:
         cc:01:96:cd:be:3c:f8:27:9c:cc:d4:40:81:97:a2:41:35:6b:
         61:7d:00:03:1c:f3:ae:58:1b:f4:d6:6a:62:b5:8a:a0:cb:f6:
         62:d8:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:44 2025 by rpki-client