Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          EK0RqdqOBpjMUwXNOP++fBU8wIxjAtIoN1i+8irXeGc=
Subject key identifier:   96:D2:18:15:28:7A:95:DE:2D:BF:49:D7:4A:29:5D:DA:5B:3F:4A:03
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       0198D4E0249124F074272DD732E09A090EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          0E09
Signing time:             Sat 23 Aug 2025 03:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:55 +0000
Files and hashes:         1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=)
                          2: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=)
                          3: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=)
                          4: TRBQVmMokpp5WIUu-pQ0K07JW_Q.roa (hash: xwruf72RJWsw/csbKOoYp0tCE7jhLOGyB7VhjHcP5lE=)
                          5: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=)
                          6: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: 2GulWzDBvko48EcuZ+1yQvuzgOo+RegdrHxnUzqEymc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:24:91:24:f0:74:27:2d:d7:32:e0:9a:09:0e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Aug 23 03:01:55 2025 GMT
            Not After : Aug 24 03:01:55 2025 GMT
        Subject: CN=96d21815287a95de2dbf49d74a295dda5b3f4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:c9:a8:34:b9:aa:d9:dd:a3:c5:be:8c:db:
                    a0:5c:73:92:14:59:f7:b2:8e:64:54:c2:47:cd:86:
                    22:d6:a0:3c:c4:6d:cd:c3:30:8f:6b:5f:38:ab:a1:
                    ee:e7:70:25:c8:fc:d7:b2:15:dd:ba:1a:e7:9b:6e:
                    d1:66:d3:0a:61:6b:fd:77:38:b2:19:a9:26:05:d8:
                    93:8c:fc:25:b5:2e:51:75:21:6e:cf:f9:da:cb:f0:
                    53:8a:9a:15:2f:d3:1f:24:cf:9d:7a:ee:ec:70:ec:
                    db:2d:54:c5:23:0f:15:c5:41:e0:45:90:99:b9:c4:
                    f3:63:50:c5:fa:ae:c8:1e:53:f2:84:d4:de:e2:df:
                    b4:ef:3a:ac:61:2b:0f:88:59:fe:86:fd:ef:34:78:
                    2d:d5:e8:49:b4:6b:8b:10:01:43:00:12:24:e1:ee:
                    c6:5f:b1:e1:d7:66:d8:6d:20:d6:6a:c6:fa:97:51:
                    07:f6:58:d1:97:8c:46:a2:38:bb:60:4e:25:7c:6f:
                    48:f2:ec:cc:85:52:92:54:5d:4d:1f:63:c2:cf:e5:
                    66:e6:d7:4b:3f:4a:da:ee:9b:8a:dc:47:fd:66:d7:
                    dd:72:34:c1:2c:d0:bf:29:71:af:b2:6b:4d:4f:5f:
                    72:70:28:38:49:b0:63:72:2a:9f:ba:03:31:db:2b:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D2:18:15:28:7A:95:DE:2D:BF:49:D7:4A:29:5D:DA:5B:3F:4A:03
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:5a:59:e5:3c:f1:bf:ac:0c:55:48:11:bd:d7:38:ac:e8:
         fd:93:2f:65:d3:c0:cc:f8:08:bf:58:d4:34:d9:70:a3:b9:80:
         f2:a0:4b:0b:fc:64:d9:7a:73:97:1c:fc:81:aa:3b:c7:b2:15:
         85:39:88:b1:b6:4c:c6:23:ac:1b:52:34:c1:87:e4:90:4f:69:
         09:ba:cc:43:de:8c:4b:00:41:53:b5:0d:7e:f8:41:65:9c:c2:
         91:a3:7e:de:4b:2a:c9:c0:41:12:59:08:d2:94:67:83:dd:ee:
         34:8d:ab:3e:ad:d2:6a:3c:b5:29:7f:a1:52:80:fa:08:9c:cf:
         44:55:05:de:e8:e4:37:7c:7d:99:17:fd:18:0f:bd:66:71:d0:
         db:f7:4e:ea:26:8c:70:8a:d1:08:2f:15:ef:9c:4c:f2:fd:20:
         e8:b4:95:7b:f5:d0:f3:2d:79:3f:08:00:86:1f:13:81:44:29:
         09:0b:a1:08:44:a1:9e:71:32:40:02:34:81:3f:4b:de:87:f6:
         24:16:ae:e2:db:8a:23:46:4f:8e:6c:21:25:bf:f2:c0:7d:b4:
         82:41:d6:e5:ea:87:d3:42:94:cf:cb:7f:61:f2:ff:fd:cd:4d:
         3b:d2:e1:4e:de:69:7f:a5:f9:3b:0e:75:45:ee:2d:fc:25:6f:
         fc:54:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:02 2025 by rpki-client