Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File:                     dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier:          BSV1FukoyDT11rM28CnEXuV5PoGC8sZC/I2Jybd5Svo=
Subject key identifier:   F3:15:F2:42:18:FB:EE:95:38:8E:99:21:A2:D9:22:E8:F4:9E:4D:6A
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer:       /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial:       0198D7736A8C1E2DF38E28BFB7599895907B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number:          0A2E
Signing time:             Sat 23 Aug 2025 15:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:01 +0000
Files and hashes:         1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
                          2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
                          3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: L982ONPsPpuPQRpJOEGnMh+mNSYrzauxbkTH62TQhqA=)
                          4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:6a:8c:1e:2d:f3:8e:28:bf:b7:59:98:95:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
        Validity
            Not Before: Aug 23 15:02:01 2025 GMT
            Not After : Aug 24 15:02:01 2025 GMT
        Subject: CN=f315f24218fbee95388e9921a2d922e8f49e4d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:a6:c9:0a:cb:e3:73:0b:95:d3:d3:27:05:
                    14:c1:83:e0:cb:21:b9:fe:06:6a:7b:23:96:0e:33:
                    bf:1e:a1:80:7b:cf:87:f3:e7:47:2e:4d:d2:6d:96:
                    8e:13:61:b2:b8:4e:2b:df:23:9a:b6:67:99:74:20:
                    87:e6:52:f9:77:60:c6:93:15:c2:e5:66:8f:82:f3:
                    5b:3a:0a:7e:ce:50:ab:37:d5:a7:91:37:6c:45:2a:
                    a6:c0:91:94:85:4d:42:84:e9:83:4e:85:e3:14:0c:
                    e4:62:42:98:2e:5b:b6:cf:06:43:4c:c7:18:f8:e3:
                    94:47:b6:b2:2b:83:df:02:67:8b:f7:5b:9a:e7:5a:
                    2f:61:d3:21:d0:14:82:66:7e:91:3f:01:ef:66:8c:
                    d7:73:67:88:06:fd:8c:61:53:aa:b8:f1:98:43:67:
                    3b:f7:09:ed:4e:ce:f6:cf:b0:af:01:b3:a8:e5:68:
                    36:99:20:06:51:2e:0d:5a:72:14:da:4f:48:80:53:
                    bb:c4:7f:0c:5d:92:f9:0e:0a:07:04:07:a9:59:99:
                    c0:28:47:a8:6e:8b:af:ae:bf:13:73:b6:99:3a:7c:
                    05:79:8f:27:03:f9:c1:be:4d:50:e6:4c:75:2c:19:
                    6f:8a:8b:ae:75:a3:9f:22:35:9d:2d:ee:d4:3a:ab:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:F2:42:18:FB:EE:95:38:8E:99:21:A2:D9:22:E8:F4:9E:4D:6A
            X509v3 Authority Key Identifier:
                keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:38:1d:f1:4d:9d:3d:7c:ae:86:6e:3d:07:54:cc:07:1f:
         23:f9:ee:86:5f:5c:a4:0a:e2:46:20:0c:35:9a:06:6a:65:a3:
         c2:0b:3e:04:c9:7e:a5:f4:c9:56:ee:d3:47:5a:e2:bd:87:e3:
         46:31:bc:a9:1d:23:09:c6:94:3b:ad:a0:2f:5f:de:30:69:42:
         da:e0:fa:21:b5:17:2e:09:5f:13:12:26:8d:63:0a:5d:74:8b:
         db:21:2c:69:bb:0a:c7:9f:b3:10:e4:6f:5c:75:c9:51:70:43:
         86:1e:e4:44:68:b8:f7:ab:8d:e8:ea:ce:6d:0e:95:9f:0f:99:
         52:bb:e0:6e:32:75:2e:28:7a:b6:99:1f:44:a9:6b:78:d2:ce:
         d1:db:12:39:98:fc:f4:b5:47:e7:04:f6:78:56:01:b5:4c:ff:
         a1:1f:1b:40:b0:15:a7:eb:5a:f6:23:7b:cd:f6:2a:a6:a7:24:
         78:ca:98:d8:2a:d2:40:d0:80:e8:59:e8:48:cf:6a:8d:04:48:
         92:d3:f8:34:39:f0:bf:cd:13:c0:b1:d1:d9:7e:b5:b4:7c:9e:
         b8:59:9d:6d:b0:0a:b0:7c:36:09:f1:ed:95:8d:cc:8b:44:3e:
         0b:9b:b8:6d:9a:44:ec:09:9b:06:8c:fb:37:1b:30:4c:fe:c6:
         6e:d8:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:18 2025 by rpki-client