Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          ogSppLknr392xq4mALr2fQZGvLGCl/+Ec32aj0Ri9zY=
Subject key identifier:   53:7A:5C:80:2D:44:6D:EC:10:7B:6C:EC:27:4B:16:B3:03:3D:BD:3A
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       0198D6609A4F30398488507CFA798A4B88FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          077A
Signing time:             Sat 23 Aug 2025 10:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:51 +0000
Files and hashes:         1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: V/Zru/ocaQ8gj1WDOtnT7GsdwSVeyw/uJDNhpvuWL2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:9a:4f:30:39:84:88:50:7c:fa:79:8a:4b:88:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: Aug 23 10:01:51 2025 GMT
            Not After : Aug 24 10:01:51 2025 GMT
        Subject: CN=537a5c802d446dec107b6cec274b16b3033dbd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:14:06:99:2d:fc:b9:3c:54:2d:d1:a0:b7:
                    a8:4a:95:88:ee:c8:9f:c5:d8:14:bd:30:26:59:47:
                    2b:38:f8:42:ec:c4:35:68:de:6c:62:6f:13:0f:d6:
                    f5:08:e8:f5:ed:0f:4d:71:26:8e:bf:92:de:d5:de:
                    d9:19:1f:f1:e6:61:85:fc:48:af:2e:7c:50:e5:cf:
                    24:45:5a:db:69:a7:55:65:a3:83:b5:ac:39:62:ab:
                    90:5c:a6:41:37:d2:45:ff:a8:e0:b6:7b:a9:3c:59:
                    e7:e6:c3:5a:6c:73:bb:ed:4a:37:3a:fc:95:2a:cc:
                    f2:fa:55:9f:2f:09:b7:08:15:d5:76:8d:e9:83:23:
                    90:92:81:15:89:1f:50:9e:e9:3e:3f:63:19:e8:aa:
                    a9:9c:b0:e0:89:ac:76:68:65:72:b4:ec:64:5b:19:
                    03:03:2e:28:32:77:a7:68:48:ec:72:3a:a7:53:2b:
                    02:a0:74:8f:75:23:f1:a9:59:5b:b3:01:7d:1b:ef:
                    8b:d0:1f:5d:70:87:55:f1:55:5e:be:b7:f0:4c:9f:
                    67:71:47:86:95:d9:a0:39:79:12:ea:99:30:bb:29:
                    37:b9:c2:b3:73:95:27:16:cd:ef:c8:74:8d:1d:1e:
                    4c:78:c1:75:1b:bb:0c:0a:97:30:69:45:97:56:f2:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:5C:80:2D:44:6D:EC:10:7B:6C:EC:27:4B:16:B3:03:3D:BD:3A
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:44:2c:75:6c:59:d9:ac:e6:32:d9:8a:50:01:4e:f1:fd:
         4e:45:0b:dc:bd:bf:d3:80:2d:54:3d:63:9a:97:1f:4c:92:64:
         b4:7f:75:ff:98:4f:a8:05:82:80:3e:a9:4c:87:9a:bf:e4:26:
         98:cf:96:bd:48:04:1d:26:0d:9d:ea:aa:38:15:0b:16:e9:7d:
         48:5b:c0:fd:8b:cc:be:cd:f7:21:7b:f4:d3:bb:9b:53:3d:1a:
         53:d4:b7:d6:0c:33:41:67:39:08:cc:33:e0:10:3e:fe:ab:65:
         94:a8:79:49:7e:d1:c5:9b:f6:29:41:e0:fc:c6:b9:74:09:4a:
         b8:56:19:7b:d1:2c:e2:29:c4:94:22:98:d1:d6:fa:2b:17:43:
         41:98:3c:a7:fc:c6:49:7c:84:5c:a8:c6:a6:0d:fc:e9:6d:f6:
         42:19:77:50:ee:d0:2f:30:6c:71:65:c7:91:3e:b3:9b:36:98:
         0f:79:b8:85:9c:db:7a:d5:87:92:b2:0b:d8:87:31:fc:e9:fc:
         99:f7:44:61:25:f2:03:45:9b:02:2d:e1:4a:59:a3:b9:e4:ae:
         5c:ef:1c:2e:d1:f3:9e:9e:df:9f:bc:0c:e1:99:67:0f:99:d5:
         29:0a:7d:5f:37:31:62:45:de:3d:db:d8:11:d9:25:82:59:2e:
         2a:cd:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:42 2025 by rpki-client