Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          1UTPjnSfeUcc+SbRq5EsRouPMDXTxxKgDUbP5auhInI=
Subject key identifier:   78:C3:A4:2D:15:72:CE:FC:BF:3F:A8:19:C0:73:AC:02:5A:17:BD:08
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       0198D47335B0C3A1C2243FF6A66D7D637A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0AE9
Signing time:             Sat 23 Aug 2025 01:02:56 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:56 +0000
Files and hashes:         1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: nOwJAroSjYcmFGhd7KnUX3zHAlQW9CQ2C2TrnQMLwnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:35:b0:c3:a1:c2:24:3f:f6:a6:6d:7d:63:7a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Aug 23 01:02:56 2025 GMT
            Not After : Aug 24 01:02:56 2025 GMT
        Subject: CN=78c3a42d1572cefcbf3fa819c073ac025a17bd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:e5:3e:e2:4a:6c:42:16:de:d2:d7:82:a2:
                    22:f9:2f:ea:12:6e:f5:75:b5:48:bb:78:19:a9:80:
                    56:8c:7b:8a:bd:be:94:22:15:79:d4:46:a9:9d:78:
                    d5:59:67:3d:71:49:29:56:a3:36:ed:bd:06:55:9e:
                    49:1e:1a:65:cf:90:78:d8:e2:db:b6:fa:b7:dc:d7:
                    4a:e8:e1:00:44:7c:05:c3:72:77:4f:da:a6:f2:ed:
                    b2:2f:ee:87:dd:4b:22:74:3d:fc:a7:92:3b:17:08:
                    a2:8a:a4:1e:54:dd:fc:57:d9:59:1f:89:74:e5:5c:
                    45:6b:4b:10:f1:63:6d:3c:3a:9b:a3:e2:f3:cd:ea:
                    09:2d:29:f7:f6:d6:f3:49:3b:96:b8:ca:68:69:3a:
                    2d:89:4e:f5:28:99:af:f4:1e:7d:17:57:50:64:0f:
                    c0:ba:0d:74:cd:fa:56:c5:a8:73:0f:d5:03:93:3a:
                    65:8a:0c:8d:16:c7:30:90:d1:52:13:65:7c:f3:e4:
                    c6:78:f9:69:55:96:3c:ea:d6:16:7e:12:fb:0a:9d:
                    9f:78:d0:e4:ff:1f:27:42:46:10:0e:04:51:40:7a:
                    13:8c:36:7b:79:fe:cf:5b:36:40:f8:1d:a3:7d:6a:
                    02:64:97:26:2f:e9:05:67:59:db:81:6d:e4:d9:9e:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:A4:2D:15:72:CE:FC:BF:3F:A8:19:C0:73:AC:02:5A:17:BD:08
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:21:23:9c:9f:ac:9a:1a:dc:73:41:15:fd:b3:8f:9c:c7:95:
         d3:36:34:a4:87:e5:9f:3e:cf:14:d5:46:e6:81:3c:db:a4:c1:
         4a:4b:38:4d:32:19:40:1a:4d:d7:c2:95:4f:9c:c7:85:09:6a:
         05:85:c8:51:dc:b5:2c:b9:31:26:a8:eb:9a:db:ef:b5:84:7a:
         b2:04:8b:f4:e5:9f:ff:25:03:b9:47:ed:3f:d2:80:aa:e7:39:
         6e:7b:42:e4:2a:33:27:04:75:59:84:07:92:7e:a0:76:d8:0a:
         73:2c:c0:41:51:62:0c:98:e6:0c:ac:2c:bb:f1:2b:e6:13:28:
         ef:6f:8c:56:f4:d5:17:fd:7c:19:8c:ff:f8:99:f1:96:b8:24:
         1e:09:4a:7f:37:05:80:4f:21:fb:0f:7e:ac:52:34:b1:af:34:
         2b:f2:a4:d4:25:b6:ef:5d:4d:6b:67:bc:a2:91:1b:08:8c:bf:
         75:ad:fd:97:59:0d:52:99:90:a6:33:85:36:1d:e9:2d:5b:65:
         f9:fb:a4:07:50:a6:2b:bc:41:fe:f9:9b:40:92:b6:79:d5:95:
         ff:fb:ac:94:dd:11:f0:90:3e:b7:e5:f1:a7:21:6f:c0:16:2b:
         0f:a4:3c:20:af:e5:56:6f:23:e0:a9:ed:01:9f:7b:5d:ed:61:
         03:4b:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:18 2025 by rpki-client