Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          qDynEcTFwdjsfaffy+uHYLRwevhbL8Q6UBdpBlj5p38=
Subject key identifier:   EF:62:89:E6:6A:6C:F3:67:23:8F:B6:81:38:2D:AE:16:D5:EF:B5:30
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       0198D7061BDBA0AE6FB308967FB8980D65CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          05CD
Signing time:             Sat 23 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:38 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: Kb/mAA8jSIOyaA80GerwgRXX8rUGr1zB0atvfXIg6ao=)
                          2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:1b:db:a0:ae:6f:b3:08:96:7f:b8:98:0d:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Aug 23 13:02:38 2025 GMT
            Not After : Aug 24 13:02:38 2025 GMT
        Subject: CN=ef6289e66a6cf367238fb681382dae16d5efb530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:97:50:23:7c:bf:43:09:c5:6c:01:70:fd:
                    e7:dd:c4:1a:d3:50:06:7f:8d:5c:7f:95:02:b4:ac:
                    52:d8:58:56:48:20:18:15:24:b0:77:f5:21:1d:9c:
                    98:53:de:96:06:43:07:c6:c6:a7:c5:63:49:70:ff:
                    9d:d7:37:1b:88:f9:a3:73:b2:cf:32:93:51:79:74:
                    37:ba:2d:c0:4f:ac:98:ae:11:70:ad:34:e5:ca:6a:
                    08:76:e7:37:03:e1:a6:65:4f:96:de:1e:4a:94:c1:
                    77:fc:c5:af:b8:2c:dc:36:6e:57:6e:9f:fd:65:d4:
                    43:ef:d1:c9:02:1a:76:64:47:3c:03:c6:ff:a9:81:
                    a3:d6:5a:ef:08:42:b5:ac:1c:2b:31:99:d5:a1:c8:
                    cc:32:d1:22:d5:a5:4a:e0:93:04:c0:14:97:ca:b8:
                    bd:28:91:0a:23:ec:0f:f6:15:c1:76:95:40:ff:07:
                    ca:16:84:c6:2e:33:4b:21:20:e6:f8:79:06:9d:53:
                    88:ee:12:52:05:d6:6a:3a:ab:77:e9:fc:24:62:67:
                    e7:7d:42:96:59:46:b0:04:48:44:7b:2a:05:95:16:
                    cc:70:9e:10:14:58:0f:7d:08:2e:65:bc:80:34:71:
                    72:bc:d6:75:82:d0:cf:b2:ab:7a:e9:7b:5f:da:30:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:89:E6:6A:6C:F3:67:23:8F:B6:81:38:2D:AE:16:D5:EF:B5:30
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ec:ac:9a:0d:9a:43:dc:86:b0:5a:f3:72:44:a7:c2:43:81:
         97:1b:b5:d3:12:b5:97:81:d7:9d:16:da:17:fb:79:0a:e4:9f:
         f5:a3:b1:5d:87:93:49:14:5a:89:a0:cd:9e:12:35:e9:8d:95:
         5b:7f:c6:6d:16:9b:90:61:cd:e0:68:ac:fd:05:4f:e2:83:12:
         56:83:8a:f3:b7:75:35:44:eb:ac:cf:e0:96:e0:0e:22:b2:fa:
         ed:f9:cc:48:91:06:d3:2b:42:09:ad:2f:2f:3d:61:63:38:0c:
         bc:8e:00:db:84:48:78:96:13:77:40:75:27:3d:93:b6:f5:c0:
         1a:7d:97:15:d1:b5:72:16:21:d1:c7:03:04:d0:fb:d5:d6:2d:
         d2:ca:16:84:a7:38:89:b2:8c:0f:05:a3:55:9d:59:fa:0e:24:
         f9:4c:65:e5:ae:4c:e4:57:9b:58:64:d3:50:f9:51:74:48:40:
         88:c3:fb:cc:be:1a:ec:00:23:a8:c9:d3:40:42:63:6a:44:3f:
         bd:99:4a:79:13:1d:41:03:c3:a1:65:0d:a8:89:96:fd:04:9a:
         3d:36:db:b4:73:97:2b:94:b6:b1:b3:12:2b:b3:e5:53:89:6f:
         68:65:91:73:73:95:25:7e:63:23:97:30:cd:9e:e2:cd:73:58:
         1e:08:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:44 2025 by rpki-client