Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
File:                     1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json)
Hash identifier:          jhcljMWyNKxfjTFD1RvbYlTlx+pkSsevMDYrw2uW3r0=
Subject key identifier:   E6:21:E8:54:C2:9D:D3:D1:20:FC:87:D5:99:18:07:88:FC:0E:23:6B
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       0198D515CAF57B84ABDAD91E7D305C875764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
Manifest number:          10EE
Signing time:             Sat 23 Aug 2025 04:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:31 +0000
Files and hashes:         1: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: skCg67myLL4kMziPKgy04cf7HcJ2SjkE+Eam10pdY9c=)
                          2: 1rvU47bf__v_KrHYYRPHuR8fgjc.roa (hash: HO9MgV76hbMMfAjtcpab0pQMUXJlCX3bhzQB4ONUQns=)
                          3: 22T8EVZzlO41oAMFJlvqzAG1qBo.roa (hash: bfWurW2nFor6WKDfmZqrumDW3WLiIUdWZMuqYcYHQ4U=)
                          4: 2Eku4G4QcFntTeBnPdjQt16QDE8.roa (hash: /h0JlWzojsWTrZMYWqaSRG6HTNQqdKotAsOYfDdHfIU=)
                          5: 4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa (hash: +SG76G9IyTI0k0seOJpd2UmxDLN7P9YRF6si6eLLNeA=)
                          6: 8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa (hash: /upIizdLvhAVo+dTJgi7w1RXZAYuejov/d8qUeJyxe0=)
                          7: 9qr8r8xTppJSHLya24yoc85Hk7U.roa (hash: lgokGB6Ll002voLL4TcV40sMF+WO24Rj8TUlgWDpzXo=)
                          8: IAaDUlLUfgx8yfwZmpcftz_J3zA.roa (hash: v1q3KD/AbTqO/Q8Ibts7qUHfFpUCjL1VF+LMfn/fbQI=)
                          9: Pj3zogl5ZYWOBY3ig7th641eV9A.roa (hash: 7ElQ3zJdzTdZczGF6CkoIorKYRoi8e4nnKid4Ex6yb0=)
                          10: QAKkeXuZL_ZFLh3yXryVAC9r4uc.roa (hash: UUlL1WVDgsXwZrqIFrcSXaDunz9z9QLg+VVmo+sK9RI=)
                          11: T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa (hash: t8vtLXPqqc+zrZrNOi4D5mdJAEBF1Ira9/CrglSSLyQ=)
                          12: TUz_WJSMNczh0a4oE0JPAiZeFwc.roa (hash: W6HJwXWWYxWpF1iC+V/7g0tdFSADqlwW02aC7Kto7U8=)
                          13: UD8PeoC507j-R5gM4iVeaToplJg.roa (hash: E+NOjqQP7fFW4dktZcx7zBoGyfZltq1IW944Fil+FoI=)
                          14: Uvc0mIYrtGDSDiJY8e0YxhvZfsc.roa (hash: t1AKkHKCvtUzgk+Av5NTg1kvHY45d4XWobXLQBwd5jg=)
                          15: WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa (hash: PyohQrEbBmUFGkizOCRWLarzuzBDIMXrn/I9XNTnDqs=)
                          16: XIJUooGzzFBzLgFVyUb-bnI6Oy8.roa (hash: TCYLQRnuzWsgOnaV3SPssBWZuYXYMvyZ2XlBCOrqK8s=)
                          17: XSjZ6P2-J8Hkfl3O5rZuaXFNxu4.roa (hash: mDVKUCcUGNt3ihgIQHKFLdzsYM8bgFSt2hrni9Xfg/0=)
                          18: ZVz0SKvkjOxlciVFBqTr0VUiknA.roa (hash: uFR00EkEnl9o+CnA+h+cBK23mrxF+agDbELB+ERqUFU=)
                          19: q8aI8en4lXWEAOIqjltL2dKCNEM.roa (hash: mIK7Q6QxymI6Gyc9Mumf03eU529f/5ddct/D368l5+0=)
                          20: yRetO5hGF2Sg7Urg7tPPa5ziUiI.roa (hash: 0y+iCbPQCXEytpzJVMYbIqcFI7KG0+fLz2JnONERKbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ca:f5:7b:84:ab:da:d9:1e:7d:30:5c:87:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Aug 23 04:00:31 2025 GMT
            Not After : Aug 24 04:00:31 2025 GMT
        Subject: CN=e621e854c29dd3d120fc87d599180788fc0e236b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:e1:74:97:c6:fe:28:f9:74:be:7c:3e:30:
                    eb:92:4f:af:7d:47:73:1c:c6:9d:11:b1:45:b8:6b:
                    ba:70:a0:d5:0c:b3:0c:4d:6e:06:08:34:c6:22:48:
                    5b:e8:83:6d:c5:af:74:78:17:b5:4d:a4:4c:f9:b0:
                    5d:9f:b4:2d:c5:79:3e:72:65:72:9b:e3:c9:bd:34:
                    0a:0e:74:5d:4f:b0:09:8a:ed:be:77:ac:e3:b9:f2:
                    00:39:3e:4c:6c:ce:76:ea:a2:11:89:91:07:8f:e9:
                    85:40:f0:0e:c6:64:b9:db:04:c8:6f:97:1a:78:da:
                    3a:45:93:14:46:1c:09:23:bd:f0:98:af:1b:6f:93:
                    52:66:24:41:e2:f2:05:39:41:e1:e8:e7:06:3a:77:
                    2c:0a:79:ac:59:1f:81:55:63:e7:c7:55:23:8b:6c:
                    e7:86:5f:8e:18:f1:ee:92:86:54:5c:e5:8d:28:4b:
                    ce:28:5e:94:39:62:3c:da:7e:17:13:fe:40:9e:d6:
                    57:4e:ff:f2:fc:9c:c6:83:a2:b4:e8:d3:04:d1:3b:
                    12:d8:78:50:d9:3f:bf:58:dc:03:12:32:d5:ce:bf:
                    4c:a4:50:1d:da:31:0b:de:08:a8:f9:c9:27:43:57:
                    b6:b7:11:ac:7a:25:02:54:0c:cd:fc:ed:74:3d:ff:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:21:E8:54:C2:9D:D3:D1:20:FC:87:D5:99:18:07:88:FC:0E:23:6B
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:ec:59:f8:e0:53:2e:d0:71:c6:03:b4:3a:13:9c:66:52:
         e4:93:78:d3:30:f9:ec:1e:2d:61:8a:b4:cb:c8:02:5c:03:79:
         c4:57:ed:05:9f:7b:6a:b8:f2:22:f8:1b:26:27:f6:82:7d:99:
         0e:62:c3:51:51:bc:5c:f5:fb:b1:08:d0:98:e7:ae:7f:a8:92:
         55:c5:f6:f1:a6:37:6c:45:44:19:75:55:0f:ac:1b:70:df:39:
         39:bf:6f:ee:e1:80:c0:e7:82:b5:06:db:9d:0b:9d:cd:f9:1f:
         1d:a4:b2:76:c4:21:47:07:78:2b:db:88:95:41:b5:7f:e2:22:
         d4:9d:6a:89:9b:a5:02:fd:07:f3:d1:a9:e9:30:01:99:66:84:
         3b:6f:f1:34:35:c2:8d:e9:ff:cd:55:6e:06:d5:40:c1:a2:60:
         cb:e7:dd:58:cd:1a:7d:bd:e9:69:9a:98:6c:73:fe:eb:37:98:
         b9:40:f6:12:ae:1f:3c:36:8b:ac:cd:bc:3e:36:de:3b:94:74:
         1a:6f:da:81:68:bc:67:d9:eb:59:61:b7:36:4f:83:ba:c4:a4:
         d7:01:fe:6d:f8:da:68:95:2b:a5:ea:e8:c3:fe:82:0d:63:6d:
         d3:7c:11:f6:89:01:75:7d:c2:65:83:ad:76:75:b9:29:a8:f5:
         e3:ae:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:58 2025 by rpki-client