Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          Xr5lu5ctsbVeRoXpVqVacEShXCfrcCZzp68o2udZWVQ=
Subject key identifier:   3E:4A:FA:4C:48:7E:2D:E6:D9:8B:C7:9A:5F:DF:39:8F:2D:C0:D9:3D
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       0198D4A840AEFD279938A25C6B3125E10B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          0FDC
Signing time:             Sat 23 Aug 2025 02:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:53 +0000
Files and hashes:         1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: ttyE5Xvuzr9fjKFKxEp38e4aIYBAZZA2NZd8qwkdEG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:40:ae:fd:27:99:38:a2:5c:6b:31:25:e1:0b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Aug 23 02:00:53 2025 GMT
            Not After : Aug 24 02:00:53 2025 GMT
        Subject: CN=3e4afa4c487e2de6d98bc79a5fdf398f2dc0d93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:6a:a4:af:81:6f:90:69:af:67:66:b2:a6:
                    0d:fc:a7:29:3c:4c:9c:ff:2d:13:cf:cb:c8:d4:9f:
                    28:6e:54:9a:56:22:34:36:da:08:ba:9e:1a:45:c2:
                    1c:bc:fc:c5:55:45:ba:05:09:9d:64:2c:99:30:11:
                    69:c8:1e:32:9a:b3:d0:ec:f7:1c:0a:e4:ec:6f:0f:
                    1c:1a:f0:1a:99:6e:de:7d:52:53:54:a1:db:de:fa:
                    ee:48:0f:fa:52:e5:14:76:6e:55:8b:4f:79:b5:f1:
                    6c:ea:06:41:64:5c:28:75:c0:8b:fe:d7:2e:fa:c1:
                    55:ce:df:c4:5d:84:14:c5:a0:d4:a3:02:d8:57:a9:
                    47:c3:59:1d:03:c7:b0:62:7c:42:ed:a9:75:17:28:
                    05:3e:a5:00:29:5d:09:db:79:f8:4b:ce:06:05:f8:
                    e4:e7:2b:56:8d:fa:02:fc:11:db:cf:a5:05:e2:18:
                    80:2e:2f:c9:22:54:11:1b:c2:b3:33:b2:b2:3e:5b:
                    de:d8:cc:bd:ec:89:22:2b:10:a5:e1:2e:82:1b:00:
                    0f:93:9b:e3:a6:5d:48:23:46:7a:51:26:52:56:0e:
                    3b:95:15:4c:ee:23:bb:f1:03:43:7e:2e:0e:15:e4:
                    6a:f2:67:c5:96:c5:eb:32:5b:95:ff:7c:51:40:05:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4A:FA:4C:48:7E:2D:E6:D9:8B:C7:9A:5F:DF:39:8F:2D:C0:D9:3D
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:71:b6:07:a9:c0:e3:3c:dd:92:de:ef:1e:b1:5c:ee:df:
         11:18:19:b9:42:fa:dd:69:70:38:d1:61:2b:c2:3f:22:64:ca:
         61:6c:65:50:76:5a:08:2a:1e:54:ec:53:af:14:5f:d4:51:26:
         da:ea:e7:2c:2b:81:09:fd:24:cf:44:06:1c:4d:5c:cf:71:f9:
         99:69:ee:ec:c6:68:b8:87:b9:6a:26:77:85:fc:20:03:05:e9:
         3e:5d:4e:0e:6d:9f:3a:79:6a:8a:bc:67:78:9b:f0:a6:ca:07:
         62:88:dc:5c:3a:2e:e1:82:c8:2e:26:d4:51:1d:c5:2b:08:4f:
         d9:41:05:b3:be:db:fb:b1:d6:f5:5a:f8:b2:a9:87:d7:d5:48:
         13:2e:65:c9:1d:3a:21:d5:77:f4:2b:05:3e:79:6d:4f:f6:47:
         e0:9b:e1:2e:2d:45:3f:82:2b:95:ac:ae:b5:19:16:68:71:10:
         e4:ef:2f:3b:f6:62:bb:6c:d7:8b:00:cd:c0:b8:3d:18:1a:cb:
         f1:98:88:41:91:3f:33:62:85:f1:29:fa:38:7a:d4:b8:b0:04:
         24:05:d5:c1:13:55:58:0b:10:25:5f:cd:7d:cd:13:55:aa:c9:
         04:9e:c5:0d:c0:d7:35:b9:d5:49:47:56:1a:cf:01:1c:a5:30:
         18:21:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:19 2025 by rpki-client