Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          nLDPALfVhkT+sAoAVyRmcB3dsnDpKAkNLMDhD3UCE5U=
Subject key identifier:   6D:79:FB:05:04:0A:64:C9:84:D6:A3:05:75:33:10:26:0C:10:53:40
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       0198D4E0BD82F614B81367C8F540EF91109B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          12E4
Signing time:             Sat 23 Aug 2025 03:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:35 +0000
Files and hashes:         1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
                          2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: 9iFqGkUovLWQeYdpc0bPtUhP29Iadb+B2VIMq/rALzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:bd:82:f6:14:b8:13:67:c8:f5:40:ef:91:10:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Aug 23 03:02:35 2025 GMT
            Not After : Aug 24 03:02:35 2025 GMT
        Subject: CN=6d79fb05040a64c984d6a305753310260c105340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b2:1f:37:87:87:5e:d0:37:3d:19:6a:41:32:
                    58:7c:b7:41:05:31:67:5f:9f:1d:16:82:c9:d8:d8:
                    4c:51:7f:a4:21:3d:a3:1f:4c:84:e9:5f:26:51:a8:
                    e2:51:7e:dc:53:16:21:96:49:b3:0c:1d:fb:d0:2c:
                    a6:a4:cf:82:af:4e:0e:30:ed:81:f4:2b:0c:dd:92:
                    7d:52:77:07:22:fa:69:c7:0a:69:5d:eb:e5:b7:ad:
                    92:e9:d1:f7:2b:52:6d:42:81:cf:9b:f8:5f:a6:31:
                    f1:7e:f7:f9:1d:d1:09:1d:38:55:74:52:16:28:68:
                    11:43:9e:f8:8b:0e:46:2b:ea:bc:d4:3e:f8:a2:f7:
                    37:eb:ed:4e:66:a3:c6:e2:5e:fe:99:d4:2e:c5:58:
                    7a:62:1b:df:64:17:1e:a9:f2:d0:0a:7f:44:e4:4c:
                    34:f6:97:b8:89:17:ac:1e:b7:60:26:a0:4b:dc:4c:
                    69:7c:67:45:c9:09:af:da:cf:cd:28:c7:e5:a5:f7:
                    03:87:74:1b:1f:0d:00:8e:cf:15:7a:37:48:5f:1b:
                    76:e2:a2:f2:b6:30:75:32:7a:2b:7f:b1:b0:3d:46:
                    c6:78:7b:66:87:cc:39:b2:b9:3c:05:8e:45:24:c0:
                    60:16:b7:00:cd:8a:79:62:f9:c9:5a:d0:dc:44:31:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:FB:05:04:0A:64:C9:84:D6:A3:05:75:33:10:26:0C:10:53:40
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:85:a1:59:88:a0:81:31:18:89:57:32:52:fa:ac:d7:7b:7f:
         bc:14:49:32:f1:de:5d:6c:70:29:b6:9e:56:aa:01:55:28:c9:
         2a:aa:8b:c1:d7:f4:b9:9d:86:d3:f6:81:1f:7e:27:bf:b9:a9:
         75:ea:4b:cd:ae:c1:a1:71:df:7b:9b:2c:4c:f2:cb:c3:9c:1d:
         f0:fe:7e:98:02:b2:6f:f4:bc:62:bc:35:ac:95:49:bf:da:2a:
         99:55:7a:c3:07:78:5a:83:d7:52:29:64:60:4f:94:ef:f6:ed:
         fb:9b:1d:c4:a7:37:f7:9e:1f:2f:18:43:d8:a7:9b:e0:22:a6:
         f8:42:df:35:3b:16:82:1e:a9:ec:b0:39:e1:79:bb:65:3a:4f:
         52:10:0e:be:f0:f9:1d:d4:55:4d:60:4e:74:17:c6:bc:b4:cc:
         62:fe:2d:4d:63:b2:73:f3:27:f4:80:3c:27:b4:c8:0e:ad:ab:
         de:40:f1:cd:ab:50:5f:fe:4d:0a:66:43:86:32:38:cb:8b:a4:
         d0:0d:f4:3e:d9:54:4c:0f:bd:bc:c4:f7:76:b9:12:bf:56:3e:
         d0:8d:62:d3:e9:9d:1c:38:92:35:9a:a9:3c:f8:19:73:88:52:
         fb:47:3e:a0:5f:77:88:7f:24:28:10:83:5b:be:7d:5b:2e:59:
         45:70:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:47 2025 by rpki-client