Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          1GCRm2xocpo9+2Y8gyAhfhzMuaq1C6F6A+RSI2usqt0=
Subject key identifier:   96:6C:70:6D:E0:3D:A2:67:09:DE:AA:7A:91:F5:26:13:2A:BF:37:91
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       0198D5BC246B8403AE16335B7127AC4A3196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          04FB
Signing time:             Sat 23 Aug 2025 07:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:13 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: 2ZoPQOi0EPdAMZ53kc1C1eJhSeXo3qNW6Y+68F5G6iA=)
                          3: 9KJRnqV0A1nt4ipJSZK-VubthM8.roa (hash: VhM4+M1JVaTvUKIcNP3pBnzsvI5WN8+zi9aZZZ7ijWQ=)
                          4: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          5: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:24:6b:84:03:ae:16:33:5b:71:27:ac:4a:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Aug 23 07:02:13 2025 GMT
            Not After : Aug 24 07:02:13 2025 GMT
        Subject: CN=966c706de03da26709deaa7a91f526132abf3791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:59:16:b3:83:50:0e:af:7b:3e:f9:97:60:
                    76:fa:7e:a1:02:7f:bf:88:8e:00:63:da:2c:14:b1:
                    a7:d6:8a:24:69:43:a3:c6:4b:9c:4a:3a:47:4a:79:
                    4f:84:b3:a9:f1:4e:ac:3d:75:e6:36:f1:35:e3:1f:
                    91:45:72:e4:a5:42:5e:de:79:cd:48:53:cb:c6:bf:
                    2c:7f:88:c3:47:e1:47:17:c7:98:93:6d:38:5f:7f:
                    1f:ec:18:40:2a:13:df:66:83:66:39:64:ff:4b:5e:
                    e1:72:8f:5b:a2:bc:a8:24:46:16:5c:b8:37:77:28:
                    9b:fe:0c:da:a5:9f:a5:2c:a8:7f:d7:e2:c4:37:bb:
                    66:8c:08:92:ff:97:ab:dd:6f:03:99:9d:fa:20:a3:
                    e3:b1:67:51:fd:82:79:b3:27:38:27:7d:01:f0:22:
                    ee:0b:60:6e:51:78:d1:01:50:17:ab:1a:01:e8:70:
                    91:78:ae:cb:be:e0:ba:65:69:72:a9:47:f5:46:bb:
                    a9:dd:9f:49:57:52:75:05:91:87:e0:3c:5d:71:9c:
                    27:27:3a:36:ee:73:a3:07:cb:fb:4a:a5:27:94:86:
                    b0:3e:e7:52:3d:92:97:a2:3a:29:fe:23:f0:7d:54:
                    de:81:89:b1:3e:6c:ea:69:c7:be:84:fa:4d:f6:06:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:70:6D:E0:3D:A2:67:09:DE:AA:7A:91:F5:26:13:2A:BF:37:91
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:5c:d9:6c:b9:3f:32:a5:da:30:48:5a:60:8d:2e:d6:f2:
         45:15:e3:82:8e:d9:a0:d1:46:cb:86:fd:24:43:f7:50:b4:86:
         7d:5a:6e:44:97:be:17:67:d1:17:5c:d0:46:f8:9d:c6:1f:22:
         b1:7a:c3:2c:80:0c:31:0f:ba:45:3d:bf:02:37:04:f0:49:0d:
         dc:06:50:e1:28:98:82:12:b8:d8:80:be:3f:0c:00:a7:89:91:
         52:c1:06:3e:49:53:3a:ab:87:dc:54:b8:eb:79:36:10:ec:e3:
         42:7e:37:03:f1:5d:f2:28:43:93:9a:31:bc:86:f1:dc:35:39:
         a7:42:d7:2c:80:13:dc:c4:e3:de:19:1e:61:5a:b7:ed:30:e3:
         10:bd:f1:ae:89:3b:66:6a:81:8f:aa:f6:dd:08:e5:b6:d0:a9:
         67:53:7f:96:1f:13:21:10:47:02:a3:01:b8:3b:1c:7b:e2:20:
         23:b9:95:59:9f:8c:ca:3f:22:3a:1b:d5:ce:a2:7c:11:aa:cb:
         12:d0:cf:29:29:a2:fa:af:98:b5:17:28:89:12:4f:69:5a:8b:
         36:73:2e:ed:63:44:92:9b:1a:10:60:3b:d4:ac:c0:ca:e2:0a:
         a1:31:e5:df:e4:be:cf:12:7c:40:45:9f:70:06:cb:0b:84:72:
         60:38:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:38 2025 by rpki-client