Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          M4dSGPETjVMgLCAHxXu4aj68YVeGfrx+3dV8f24OAYE=
Subject key identifier:   08:F1:82:AF:35:C5:ED:BA:8F:BF:D4:16:7B:9A:53:B0:6A:65:8D:92
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       0198D4A79F50667FE28C32DAE95798C615AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          06E3
Signing time:             Sat 23 Aug 2025 02:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:11 +0000
Files and hashes:         1: RdGYazcblxjw10A1GXBrScv2ZUw.roa (hash: cthxVd9Tm4tHhJQTv20dl7UKI0DsMHEY2NNEIm16wNQ=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: tWouxFkE0qAFtOn9wBC+8RUa6wBB/hz35mpxXRkZNBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:9f:50:66:7f:e2:8c:32:da:e9:57:98:c6:15:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Aug 23 02:00:11 2025 GMT
            Not After : Aug 24 02:00:11 2025 GMT
        Subject: CN=08f182af35c5edba8fbfd4167b9a53b06a658d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:7c:96:21:ad:7d:6e:a7:aa:a2:03:9c:03:
                    eb:5e:93:1c:7d:dc:62:c6:06:2b:5f:9e:68:fb:e9:
                    d2:87:d4:b2:ca:a7:d4:76:1e:96:bc:f5:59:2b:e0:
                    30:53:fa:da:ab:0b:71:aa:66:57:12:0f:3b:15:a2:
                    46:1b:eb:84:5b:93:36:ea:9b:c9:e1:ec:39:f0:b3:
                    5e:4d:f4:82:cc:b0:0d:13:49:5a:d9:67:81:32:89:
                    a6:ef:f1:7e:d1:ec:c7:8d:c7:f4:fe:01:6b:79:67:
                    69:a0:18:98:36:2c:eb:a1:dc:73:23:54:5c:21:c8:
                    34:41:25:b1:31:ff:78:42:e7:65:44:15:7f:a4:82:
                    ab:2d:dd:22:7a:0c:d3:dd:1c:b4:1b:e0:b9:b4:e9:
                    9f:f8:14:e0:ed:8c:b4:44:b3:fd:fb:1b:34:7e:4d:
                    6d:3e:62:34:19:e8:0f:e6:e3:b1:62:b1:4d:9f:6e:
                    0a:d3:80:3a:57:1e:cd:60:a1:49:33:72:59:3c:8d:
                    e7:94:49:6d:21:0d:3d:04:59:74:90:a5:c2:42:45:
                    4d:44:99:99:23:bd:6b:02:c5:45:72:2a:68:72:ea:
                    bb:bf:a2:ce:89:66:06:c8:31:c1:00:a5:2d:0c:0f:
                    d8:e5:7e:45:9f:bf:b9:5f:ae:f4:ea:23:c1:b5:a8:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:82:AF:35:C5:ED:BA:8F:BF:D4:16:7B:9A:53:B0:6A:65:8D:92
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:d1:58:4a:b8:a5:a4:4e:ee:dd:03:b9:70:5b:73:b6:a1:
         77:df:be:c2:4d:5c:0f:d0:6d:e9:c1:88:b5:bf:1e:fb:11:1e:
         d8:0f:73:d2:0e:30:f0:57:87:e1:61:92:59:eb:d3:87:f7:64:
         78:bf:71:39:0b:d1:a2:bd:65:8c:bc:ad:03:c7:60:67:ae:ca:
         f8:63:6c:ba:82:a1:63:43:94:fc:bc:1c:03:d5:77:37:44:f1:
         52:f7:89:06:94:3f:a5:66:70:88:1c:c6:da:50:8a:45:65:bb:
         b3:47:4b:84:2d:f8:0e:f9:b7:81:e5:33:cc:fb:54:20:ed:c8:
         ff:f7:a6:a4:40:b8:64:58:72:2e:9f:78:3e:32:1c:b0:c0:9c:
         2f:78:29:25:31:9f:7e:29:45:80:f2:bc:26:64:d0:26:73:4c:
         13:61:ec:65:49:2f:32:f0:22:d5:67:41:80:3c:85:00:80:b9:
         90:a2:63:6f:15:1b:d3:14:e7:17:11:84:17:47:d6:18:b0:f8:
         84:ea:4d:e5:cb:f0:cb:f4:e7:c4:63:31:3d:64:c7:15:23:58:
         9c:bc:96:43:ac:42:95:26:11:17:74:19:03:45:42:3e:a2:c0:
         f8:07:a5:02:76:fb:88:4c:f8:88:93:7d:0c:da:fd:1a:51:c0:
         3c:db:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:38 2025 by rpki-client