Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
File:                     sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json)
Hash identifier:          jXeJybRhOXQX2fMy38WKvrbnUrSLwG6DmVYj2UmMu18=
Subject key identifier:   F0:9B:22:9F:2C:A5:44:77:BE:86:32:9C:AE:7B:72:4B:2D:2E:F3:1C
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Certificate issuer:       /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial:       0198D705D8EAC0B446D630C194CB2CD0030B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
Manifest number:          1232
Signing time:             Sat 23 Aug 2025 13:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:21 +0000
Files and hashes:         1: 3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa (hash: Jx3hDEYSWvyg0teai/myn3+xGqI2AFge39hcH66bs6U=)
                          2: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: xui2naNT7gxkb9CvMvpdHbEUV3cobVoSgksybrAgGrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:d8:ea:c0:b4:46:d6:30:c1:94:cb:2c:d0:03:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
        Validity
            Not Before: Aug 23 13:02:21 2025 GMT
            Not After : Aug 24 13:02:21 2025 GMT
        Subject: CN=f09b229f2ca54477be86329cae7b724b2d2ef31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:62:2e:d6:ec:bc:c5:98:34:08:af:e4:1e:
                    0b:f6:fd:bd:77:a6:62:18:91:2d:5a:18:ac:1c:d0:
                    dc:ae:78:8e:70:03:26:8d:fa:d7:ad:ec:89:ff:d3:
                    75:07:91:b5:a5:bd:4a:e2:1d:19:fc:ac:8e:83:a9:
                    68:e2:78:44:5c:4e:54:86:15:4d:42:c8:08:32:e5:
                    9d:87:ab:1c:f8:e5:cb:b9:c1:4f:5d:7a:21:61:9d:
                    ed:13:f8:3c:e6:c8:fc:11:89:c7:95:c0:cd:97:79:
                    c9:be:6e:c8:de:1d:11:e1:58:6d:fe:9f:cd:8a:bd:
                    1c:4d:5b:65:cb:4f:48:be:87:60:9a:b7:29:cf:93:
                    c6:5f:52:e0:3b:fb:a5:9a:e0:46:a5:d7:d1:1d:ea:
                    2a:a9:b5:33:18:f2:f9:56:c2:3f:66:fa:34:72:9d:
                    b7:dd:fa:2f:1d:b9:fc:f4:0b:1e:cb:e4:cf:d0:84:
                    57:0d:cf:4e:31:f9:29:75:52:a7:36:af:93:e6:d3:
                    6a:8f:3d:5c:16:ef:44:c9:60:27:1c:95:f3:8b:1b:
                    e7:a5:ea:da:7c:18:ab:5d:48:cb:11:3e:ea:85:bf:
                    1e:e8:44:9d:74:85:cc:84:5f:7d:93:6f:1f:62:12:
                    03:d7:f6:5d:2e:11:32:c2:83:ba:e9:62:0e:88:c9:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:22:9F:2C:A5:44:77:BE:86:32:9C:AE:7B:72:4B:2D:2E:F3:1C
            X509v3 Authority Key Identifier:
                keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:75:f4:82:33:a0:9a:2d:09:99:c3:c9:d6:32:ca:e9:49:47:
         3e:b4:3c:58:92:dc:22:71:1d:e0:32:e4:4f:57:ad:13:11:2a:
         cc:f0:3e:03:19:91:26:a8:9f:11:fe:1f:84:e0:fe:23:df:30:
         2c:8c:6d:1f:ae:2f:39:c2:50:50:cf:77:0c:43:57:fb:3d:e1:
         4c:29:c0:43:1e:16:2d:c1:b2:2a:fc:cc:48:9c:18:b5:ce:2d:
         49:a6:92:e2:3c:3f:cd:72:59:4e:6f:77:9b:8c:42:90:f7:e6:
         1d:41:52:0a:c2:22:3d:f6:ba:16:22:47:76:e3:d5:6e:1a:77:
         81:b3:3a:01:83:94:d9:6e:2e:dd:5d:22:f2:db:93:14:03:f1:
         1f:a4:69:c3:7c:6a:ea:6e:c6:fb:52:02:0c:07:b8:31:34:72:
         f7:81:53:a9:04:9f:c9:e9:7f:2b:8f:86:e2:31:62:a3:43:ba:
         b1:c9:a6:23:ed:9d:5d:8d:00:0d:33:b3:9f:c7:23:90:d6:13:
         5a:3e:95:c8:20:12:46:be:0b:c2:17:ae:79:b2:55:ea:f1:8b:
         6e:3e:35:ea:b0:1d:4f:32:81:08:69:34:e8:b6:f3:bc:0c:7a:
         0e:a0:9a:f5:44:a6:30:6b:da:88:6c:75:1c:ba:c6:bf:37:26:
         33:fb:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:21 2025 by rpki-client