Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          iNuC9Cder5185nHI4HAeMGz2i/xB4QJbZw0562qUlSQ=
Subject key identifier:   8F:5F:C3:61:8B:B9:C0:7D:62:27:B6:08:AA:7E:66:F6:45:A0:A9:EF
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       0198D5BBE988E23959FC0813A7C65F63E362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1691
Signing time:             Sat 23 Aug 2025 07:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:58 +0000
Files and hashes:         1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=)
                          2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=)
                          3: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=)
                          4: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=)
                          5: 7mljAx2MPE8ckRZfqaa9qIHwI78.roa (hash: QoswDUBIDzIT7x/nZLY3TWZiOCoIUk8QVtrt2GI34Tc=)
                          6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: PQhrdW7If5oKsckSG1i+7gcFtzpbsWcnD9RQB+B7N1U=)
                          7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=)
                          8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=)
                          9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=)
                          10: X6QCTOwOC8y3vNqfakDVWl14x2E.roa (hash: ntyGFIij13k4RvM2mOeeSG9K/6TRfBr3RSElp30qqF4=)
                          11: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=)
                          12: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=)
                          13: nxONRr35yfVjJyyHJ14q4Tj1wU4.roa (hash: +bkryBLmQu7w4ldoQCmP9JbDgt+kLUslVyNWfoUmV6M=)
                          14: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=)
                          15: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e9:88:e2:39:59:fc:08:13:a7:c6:5f:63:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Aug 23 07:01:58 2025 GMT
            Not After : Aug 24 07:01:58 2025 GMT
        Subject: CN=8f5fc3618bb9c07d6227b608aa7e66f645a0a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:1e:81:b0:06:e8:9f:88:3f:9b:00:c1:ec:
                    3f:8c:38:0b:d7:ee:c6:6b:7d:e5:5a:23:8f:58:3d:
                    86:16:aa:f2:94:0c:76:68:ea:3a:1d:b4:42:ac:60:
                    52:6d:ad:c6:3f:b7:ab:cf:0b:75:c7:ec:de:ed:4a:
                    0a:29:04:b7:c3:79:fc:ea:02:d5:60:13:92:fe:78:
                    a2:fc:94:1d:10:27:6b:19:b4:8c:34:6e:cd:66:4a:
                    b4:63:ed:83:22:7f:3e:74:d8:11:3c:dd:76:f5:ef:
                    26:04:ba:da:93:ae:6b:85:0c:c8:c9:d5:9c:9a:e2:
                    2c:e8:8d:46:b2:8a:77:23:37:a8:9a:d5:f6:c1:7e:
                    bf:db:23:dc:74:54:3d:53:3d:d5:e1:75:52:9b:aa:
                    79:f2:21:cb:13:b4:6c:a1:bb:7a:33:6a:a4:7e:18:
                    28:19:31:f0:f9:1a:c5:01:e3:35:65:bb:00:e7:b1:
                    9a:20:b8:23:c9:b7:49:4e:28:a3:4f:08:8d:47:19:
                    d2:d3:72:6c:63:40:2b:92:7e:fc:a8:57:68:15:de:
                    e0:df:d0:28:86:44:a9:91:15:4a:bb:44:83:66:dd:
                    92:a9:37:e6:69:1f:fc:f8:df:c3:59:c4:bf:b7:b3:
                    25:ab:ba:cb:91:12:a9:83:8f:46:80:ca:05:85:8d:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:C3:61:8B:B9:C0:7D:62:27:B6:08:AA:7E:66:F6:45:A0:A9:EF
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:34:8b:d7:18:19:39:a0:44:c3:cd:f7:73:ea:6d:11:3c:
         79:8f:64:89:96:92:de:b4:65:1e:a1:b7:aa:ed:91:03:89:24:
         46:9e:41:92:7c:94:fd:b7:f6:8f:78:7a:00:cb:da:9f:95:c0:
         1f:86:b7:41:da:cc:5a:cb:dc:d9:c8:16:bb:b4:df:07:25:03:
         cd:9c:ba:9c:29:5a:89:8e:97:85:1a:46:b2:a5:72:9e:e1:80:
         4d:f1:6b:95:a6:25:0d:2c:25:f0:af:a1:15:c7:af:cb:ca:01:
         61:f2:c0:02:ba:9e:25:ec:a4:92:79:1b:71:58:84:39:49:d8:
         0d:03:8f:18:fb:78:a3:55:78:6b:ce:9c:62:39:4e:63:84:0d:
         51:33:35:db:1e:67:ff:9f:87:68:5a:a2:50:74:0e:17:ad:71:
         a2:1c:3b:22:11:02:c0:f1:09:21:d7:31:49:5c:13:eb:73:23:
         3d:51:9a:6b:b4:ae:7e:3c:29:0c:f7:c9:8b:f7:a7:9f:da:62:
         1d:32:e1:85:5a:9c:37:05:0a:cf:2e:3a:0f:75:82:7b:50:dd:
         48:94:4d:92:64:fa:fd:5a:94:80:fe:95:a5:b4:a5:48:9f:e3:
         1e:f9:cd:bc:f1:8e:e2:87:cb:f0:81:92:cf:ce:7b:ae:d9:31:
         33:00:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:58 2025 by rpki-client