Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File:                     grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier:          1kcktGyheOX5jTxA6z3+EPvrSd7KLzVfPOkb5ec6dJE=
Subject key identifier:   80:88:22:47:AC:48:40:AC:7F:60:09:72:99:1A:83:13:AA:10:D2:5A
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer:       /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial:       0198D73B0E2F49A15D4418B66CDA92223879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number:          0DE3
Signing time:             Sat 23 Aug 2025 14:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:28 +0000
Files and hashes:         1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
                          2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: vQao+cAlI5yiB2o7wfMnmGzS+XndiVziFpzNp2H6dWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:0e:2f:49:a1:5d:44:18:b6:6c:da:92:22:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
        Validity
            Not Before: Aug 23 14:00:28 2025 GMT
            Not After : Aug 24 14:00:28 2025 GMT
        Subject: CN=80882247ac4840ac7f600972991a8313aa10d25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:e4:20:b8:84:d5:fb:7f:34:8f:52:ec:d3:
                    2d:1e:88:09:4c:79:7a:87:57:7a:e9:40:a1:d6:da:
                    e1:ed:bb:01:6b:6d:a0:60:7b:1c:89:a8:a6:1b:71:
                    d8:3a:17:8a:47:b1:b9:52:65:55:c9:77:be:ff:10:
                    78:c8:93:73:66:08:ab:ed:8b:96:d9:b2:00:fc:d5:
                    30:b8:30:5b:53:d5:ce:5f:74:82:36:1d:87:04:6b:
                    3d:69:1e:9a:1a:b9:80:45:c3:66:be:d1:6d:d4:6b:
                    d3:05:d6:13:7d:8b:19:31:59:75:6c:13:0a:8f:59:
                    c5:f0:f9:5f:77:17:55:e2:6a:f4:ab:d3:e6:12:96:
                    4a:f2:2e:3e:04:ac:8f:ff:11:47:1d:8f:f7:1b:59:
                    f0:f9:88:2c:5c:d4:92:9e:c2:86:8e:57:bf:88:bc:
                    a9:89:e3:69:af:55:83:dc:f7:6b:ac:0f:b6:81:56:
                    73:ae:64:4d:92:f6:fd:90:1b:56:83:5a:d7:ea:8b:
                    31:51:c3:90:ba:57:f1:9f:56:a7:ca:8d:92:3d:74:
                    81:91:c9:f4:ce:b2:65:f4:e1:f8:39:8d:35:0d:08:
                    d4:5d:ec:f8:8f:85:bb:5a:85:37:83:df:37:4e:e9:
                    ae:39:4a:01:44:b6:db:bd:1c:98:a4:1c:69:89:15:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:22:47:AC:48:40:AC:7F:60:09:72:99:1A:83:13:AA:10:D2:5A
            X509v3 Authority Key Identifier:
                keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:16:de:04:55:f1:1a:5b:c0:97:c7:e7:e5:2b:9d:9e:10:
         47:c8:35:10:63:df:a0:9e:ac:8d:e5:53:2a:99:2d:d0:3d:65:
         de:a6:7d:69:43:40:8d:36:0a:83:e5:45:b7:91:cd:ac:6d:75:
         da:d5:f3:40:cf:0b:ef:58:1a:34:7a:68:3c:04:47:5a:f5:2d:
         34:48:f2:03:73:ec:c8:1a:71:59:8e:21:02:53:7b:b5:15:fe:
         5c:d5:f8:20:d4:0b:1a:42:0d:19:bc:0d:62:dd:de:5b:15:4d:
         08:f4:9e:0b:7c:56:6a:2b:20:c1:7d:80:56:9f:04:03:30:4d:
         ec:33:66:99:b1:67:ea:85:70:04:e9:29:23:89:a9:7c:f2:72:
         b9:2a:ac:ed:dc:a8:82:e5:a9:4a:53:1b:b4:4e:cc:1d:a2:ab:
         e7:65:f8:a1:82:19:b1:40:41:de:8c:2a:39:df:de:08:61:c1:
         b2:a2:14:9a:1e:e6:7a:66:de:6a:be:ef:cd:dc:c4:1e:a1:bb:
         f9:0b:97:80:5b:d4:28:70:31:61:c3:33:17:9b:3a:8b:35:ac:
         de:10:50:a2:dd:b6:7e:4c:5e:80:f9:77:7e:be:66:ca:fa:27:
         13:76:c2:0f:40:61:4a:2e:9b:1c:85:6d:2d:08:02:88:3d:45:
         ed:98:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:18 2025 by rpki-client