Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File:                     k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier:          Gg92RDt6PfOTTMU1I0PecVMeHUcR4t08gyoFJjhG/DE=
Subject key identifier:   4B:7B:88:DC:6C:BE:EE:30:C0:30:26:2D:AC:42:30:83:ED:35:F8:E6
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer:       /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial:       0197C9F137513BB066997F702303263EB835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number:          071E
Signing time:             Wed 02 Jul 2025 07:01:58 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:58 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:58 +0000
Files and hashes:         1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
                          2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: OGAFmquZa0xuvDhSdLWd4QVuOpAkHhoQdMkyLFi6bT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:37:51:3b:b0:66:99:7f:70:23:03:26:3e:b8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
        Validity
            Not Before: Jul  2 07:01:58 2025 GMT
            Not After : Jul  3 07:01:58 2025 GMT
        Subject: CN=4b7b88dc6cbeee30c030262dac423083ed35f8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:85:6b:67:6a:39:db:3d:47:76:65:41:e2:
                    34:e5:19:78:df:14:38:56:a2:e7:01:6f:03:c2:3a:
                    de:ad:04:bd:94:48:18:a2:0e:f1:1f:f5:6b:74:1e:
                    ae:7c:a8:85:96:76:63:e2:3a:d6:d2:a4:fb:bc:10:
                    33:b3:ad:b5:40:76:51:d5:3b:9c:19:63:46:d7:63:
                    bb:e1:e3:02:a5:ad:21:d6:cd:ed:46:26:23:cf:e9:
                    27:f4:91:7e:dd:55:1a:1d:b4:29:5c:6d:6a:e6:8b:
                    4f:40:db:44:21:25:99:81:39:dc:a2:67:3b:e3:cf:
                    03:97:6b:9f:7d:05:05:6c:07:73:97:fd:70:29:43:
                    19:18:b3:0e:4b:71:87:07:61:67:71:1a:5b:3e:47:
                    bd:38:aa:94:14:0d:74:46:85:cb:e7:d0:b2:ea:90:
                    18:02:93:4d:ef:8e:90:e3:d0:56:f8:08:1c:d3:28:
                    db:d4:b4:07:35:41:86:2c:7f:cc:09:f6:89:0f:89:
                    62:71:34:fe:95:19:85:59:0c:a6:d3:41:f7:c7:68:
                    05:35:2f:3c:e7:c6:3b:a4:98:62:c8:53:d1:0c:40:
                    4a:7c:dc:4d:16:b2:77:8d:3f:3b:a8:d7:44:68:68:
                    92:74:8b:1f:7d:0a:16:e9:4f:28:01:f6:14:d0:7d:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:88:DC:6C:BE:EE:30:C0:30:26:2D:AC:42:30:83:ED:35:F8:E6
            X509v3 Authority Key Identifier:
                keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:35:0d:f7:00:3c:40:ff:96:fa:8f:9a:f6:d8:06:ad:0b:
         92:19:1c:aa:35:6f:cc:4d:93:c0:b7:2d:c3:bd:30:a5:90:03:
         1f:57:36:a6:7c:dc:be:3b:5f:f2:bc:ad:be:7f:d2:a8:b7:99:
         1c:f7:7e:1b:ce:4f:ab:69:94:1a:4a:17:04:c8:30:ed:24:bf:
         4c:e7:26:d2:c5:e7:9c:e3:75:bd:48:b8:cf:27:9e:b5:55:27:
         64:33:cd:ad:48:24:3a:06:77:70:7b:69:96:05:8a:12:42:ca:
         82:95:a9:8e:f9:bd:71:af:ab:67:65:c9:7f:24:9a:51:a4:8f:
         43:7d:e0:a9:3e:95:7b:35:a4:51:95:92:2e:7e:c8:e9:6e:cf:
         e3:82:b5:8e:56:d8:44:03:0e:a7:00:f7:53:70:b8:88:1a:c7:
         78:51:93:78:81:7d:71:c9:05:01:ac:38:24:76:34:ed:25:6f:
         95:ea:79:34:dc:f1:d4:68:6b:1f:bc:b1:ce:3b:a3:50:e7:1c:
         0e:95:ee:54:1b:1e:a6:2b:f8:c9:7f:f7:76:d3:31:8b:ff:3b:
         85:10:cc:0a:b2:ae:db:c9:66:e3:cf:c1:a5:b7:c7:34:08:91:
         17:7a:2d:48:47:4c:c3:2e:e0:f7:0d:47:4e:3e:69:dc:fa:ec:
         1e:fc:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:40 2025 by rpki-client