Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File:                     scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier:          Ed5RT3yV4deSe05G2qb1LWB3Lr86IAPvPWX7/oAEIcA=
Subject key identifier:   06:A7:A3:DA:46:E8:43:06:C2:2C:9A:64:AD:E6:8F:CF:E0:72:41:40
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer:       /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial:       0198D5BC25CD77C64C431778DE14DB36D389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number:          0905
Signing time:             Sat 23 Aug 2025 07:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:14 +0000
Files and hashes:         1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
                          2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
                          3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: Wmpo4UnvmDrGuzGllhmd0F7TyYCHucgnkim8KWw/jIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:25:cd:77:c6:4c:43:17:78:de:14:db:36:d3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
        Validity
            Not Before: Aug 23 07:02:14 2025 GMT
            Not After : Aug 24 07:02:14 2025 GMT
        Subject: CN=06a7a3da46e84306c22c9a64ade68fcfe0724140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:8b:68:0f:8f:06:eb:fa:30:a3:8a:ff:3c:
                    93:90:86:93:8b:2c:10:55:6e:8d:d0:0e:03:b4:21:
                    fe:fc:ed:c1:dd:74:75:24:e8:21:0e:ac:70:0b:3f:
                    90:9d:26:d2:0e:90:49:3d:f7:60:9e:7a:62:00:bd:
                    34:e2:59:ea:92:53:5a:df:2c:4b:95:63:99:43:8a:
                    6e:61:62:c6:28:ca:ce:cd:33:d8:cf:18:87:8c:bc:
                    8d:21:49:6c:cf:93:06:e4:77:30:16:89:57:0c:0e:
                    ca:97:f3:2a:c2:37:ba:d2:6e:1f:82:40:a2:95:ab:
                    3e:1d:db:2b:18:9e:37:31:08:30:e3:36:40:38:4f:
                    d4:a3:82:7a:e0:66:34:ec:e6:76:3e:cc:89:1e:26:
                    90:57:77:6c:bd:fb:a2:5c:73:01:ff:ea:8e:3c:2e:
                    57:fb:92:c6:3a:a0:9e:1b:d2:e4:2e:df:5b:52:be:
                    ec:92:6e:fd:fc:8c:ea:3f:9b:26:79:01:4a:82:e3:
                    ae:2f:19:8c:0b:7c:1d:4e:a1:44:9c:13:26:67:50:
                    60:74:e6:13:de:57:5e:cc:1a:7f:20:7f:28:43:97:
                    05:2e:3a:da:a6:c4:78:e9:1b:8d:d6:47:44:64:cd:
                    b0:30:84:5d:07:61:2f:69:9a:e7:eb:12:01:4d:6f:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:A3:DA:46:E8:43:06:C2:2C:9A:64:AD:E6:8F:CF:E0:72:41:40
            X509v3 Authority Key Identifier:
                keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:94:9b:23:3c:f8:f6:47:dd:5a:03:f3:d1:50:6a:1a:e9:
         6e:05:f3:b3:6f:66:28:a9:cd:98:d5:1d:65:7d:61:0c:7b:03:
         dd:1c:d3:f7:a5:c5:7a:e7:b1:6c:dc:d2:d7:b5:a1:d0:ea:ed:
         e8:c9:4f:2f:db:78:1c:e4:ba:a0:bd:71:f8:b9:a1:81:d0:39:
         de:3c:4c:7c:69:18:4c:2e:ba:0b:0f:4c:df:a0:bf:27:d2:d0:
         fc:d7:8e:d5:35:55:6b:8c:2e:8f:5d:fe:61:53:3f:48:8d:48:
         f8:bc:e7:40:4e:41:e5:4c:ed:8c:32:d7:d6:6c:f6:ba:c3:a9:
         6b:8b:a2:22:02:9f:5a:d5:04:b5:fe:92:79:fb:cb:0a:0a:2b:
         64:38:54:ee:f7:e7:7f:9a:11:53:9a:7e:a5:57:e0:d9:d6:b2:
         1a:36:f8:a4:71:6b:63:86:39:08:05:1b:58:c4:25:4c:23:bc:
         3b:20:d1:2c:af:45:8c:6a:b4:b3:f5:4a:b6:48:3f:91:04:c3:
         00:af:8f:d3:85:82:09:8d:86:ee:c6:07:5c:12:95:98:bc:5d:
         0f:d1:58:11:c0:76:86:ff:66:c5:74:53:60:bb:54:a2:c5:9d:
         f7:70:b6:d9:5c:66:f1:15:15:16:84:e3:b2:81:61:d6:e6:16:
         39:24:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:31 2025 by rpki-client