Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          n0XUDDMVrX+J0q7OZNC8uBOmtdQWyW5erJhTrxXlKos=
Subject key identifier:   00:02:34:BE:6A:34:0D:06:B2:6A:C7:BB:A2:9E:F4:0D:90:29:F2:DC
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       0198D54E537F81C2BB7CBC61D638E722ABD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          0645
Signing time:             Sat 23 Aug 2025 05:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:16 +0000
Files and hashes:         1: JhwNwII4YOfneNhA5yI11PtA4Rk.roa (hash: xDvSQcwSJJU3/GnqEWqCRE4KK2ZXksvwiDHhnfKzQ7A=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: acGLaMNN9yVw7BXR9fAvdM7RtSSEy4vRCXZwIHav5ak=)
                          3: NJKcRgijhXh37gGjWUXBc4kdFrM.roa (hash: VgH49H33jw2zh7xceu9DxV5517h/9Lf09S+uqXMzIIo=)
                          4: fhtC19QCvGdf0Oc_EeWcXSC0cgs.roa (hash: W3l2bfxo/nDFx3boBX/Qrxp8uh2idkRpvnrRaDUWAME=)
                          5: l-1-sJYhOvDnP0vt97ZEE8EG64Y.roa (hash: a9IJZav4U9lQV/r8RFyllgV9eyE4dU00VcjenG9YGbw=)
                          6: tZdJ3gpSp_BcnEX4ePWmdTwhvi4.roa (hash: CB6ct155CWiuuBsC4XGPM5LCeaov94YzQ+Lj1xQ4FUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:53:7f:81:c2:bb:7c:bc:61:d6:38:e7:22:ab:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: Aug 23 05:02:16 2025 GMT
            Not After : Aug 24 05:02:16 2025 GMT
        Subject: CN=000234be6a340d06b26ac7bba29ef40d9029f2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:cd:2d:11:1f:2f:3d:73:62:b4:23:97:c9:
                    07:3b:18:2a:74:d0:32:d9:76:95:0c:c9:70:53:e0:
                    21:87:2a:61:bd:ee:7c:ab:c3:a5:ee:4b:0f:ef:05:
                    6e:62:a6:0c:e0:8b:ad:29:3c:9f:a7:d6:78:42:c8:
                    0d:e9:a0:84:43:44:c6:39:07:5e:9a:ac:41:3d:f0:
                    bb:10:4c:f6:56:28:c0:03:25:a8:d2:45:87:a0:4c:
                    78:51:8f:b7:5a:c4:08:5e:54:04:71:02:14:42:5f:
                    0b:63:a0:54:21:bc:bd:03:cc:c9:9d:61:1c:42:68:
                    bd:9b:fe:60:63:ac:55:64:42:84:39:42:c8:aa:54:
                    a9:dd:db:bb:ce:1a:f1:fb:fd:79:c0:05:bb:ed:c0:
                    1f:9f:4c:af:38:eb:b6:c8:74:1c:02:b7:c7:79:07:
                    1c:f8:45:2c:59:e9:4f:c2:43:c9:dd:18:45:c1:39:
                    81:cd:40:34:60:37:97:93:2a:bf:30:4a:d7:c2:43:
                    52:a9:e9:d6:23:bf:e0:a9:dc:3f:75:63:32:a4:19:
                    62:19:49:0b:3d:91:b3:12:3a:85:e9:8d:54:43:a9:
                    32:a8:1a:f8:15:16:13:64:f7:ec:25:75:f9:99:f5:
                    84:ed:64:64:2e:06:96:a3:96:28:92:47:18:b7:54:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:02:34:BE:6A:34:0D:06:B2:6A:C7:BB:A2:9E:F4:0D:90:29:F2:DC
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:23:9b:87:66:06:39:eb:e4:9e:5d:a3:d2:3f:ea:e1:f6:
         1a:2c:e8:50:3d:45:3b:d2:76:e6:5d:7b:2b:c2:53:7e:39:40:
         8f:a4:c0:1b:f6:f8:dd:e0:31:52:b7:ec:1a:e9:2a:5e:8e:77:
         e8:d1:98:b4:47:b7:7a:97:57:ad:a6:40:32:53:7d:38:1a:9d:
         6d:08:a1:e3:9f:c2:7f:41:28:d4:3c:61:c6:2a:af:3c:43:20:
         58:16:85:d8:7e:3f:f7:31:30:73:53:9c:55:10:d2:d8:8c:7c:
         3c:7e:5e:ba:a7:c9:66:be:ea:4e:56:3b:4d:85:bc:e7:4d:f7:
         28:b0:e9:b6:39:c0:e6:f1:c5:ba:b2:e3:92:e8:a4:8f:43:81:
         ad:13:dd:4b:f6:c4:b8:d6:4c:58:3b:e3:25:b6:06:a9:f1:00:
         d8:a9:ba:e4:7a:9c:c8:f8:06:c1:1c:33:1c:9e:79:19:fc:58:
         a2:8e:1f:98:50:0f:be:67:c2:5c:3b:32:4e:aa:d9:17:b5:bb:
         1a:89:1a:f1:52:da:fd:e9:94:3f:ae:e2:44:3e:8e:a3:07:a0:
         30:a3:02:d0:bb:73:ec:30:7b:d0:2b:48:1e:83:57:3d:ad:20:
         c1:1d:47:a0:e3:00:5f:06:91:57:7f:5c:74:7f:ef:6f:c6:b1:
         00:1f:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:49 2025 by rpki-client