Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File:                     EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier:          e3+Cdg1kcQ7KMyXvzK+vAW8obfdUE9J4dkl//xs+cBw=
Subject key identifier:   A2:DF:BB:84:17:C1:8B:2E:50:8D:30:E1:0D:3D:C9:2A:61:6B:C4:D5
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer:       /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial:       0198D660FF84D95556A72C9D1937327D49E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number:          0319
Signing time:             Sat 23 Aug 2025 10:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:17 +0000
Files and hashes:         1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
                          2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: W3OnpawgTAU+RsUzH755Aip3U47rb5R5KhlMhW0SJFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:ff:84:d9:55:56:a7:2c:9d:19:37:32:7d:49:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
        Validity
            Not Before: Aug 23 10:02:17 2025 GMT
            Not After : Aug 24 10:02:17 2025 GMT
        Subject: CN=a2dfbb8417c18b2e508d30e10d3dc92a616bc4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:71:aa:1a:5c:33:6b:11:bb:f9:d0:9c:bc:
                    d2:62:58:23:48:e4:17:20:24:7d:2f:5b:2e:d5:ad:
                    ad:52:08:d8:e5:87:23:2f:1e:04:6b:f8:a3:81:b9:
                    46:b3:14:f1:7b:22:f3:32:6a:10:f6:77:d3:a4:a9:
                    f5:8c:47:43:dd:2b:aa:57:1a:a6:48:84:6d:0d:ea:
                    01:6a:d3:15:37:0c:eb:f3:f7:0f:d7:2a:07:25:30:
                    4f:f9:15:b7:33:35:65:76:09:1f:4c:27:95:88:4a:
                    ee:3c:4d:da:43:33:2f:c7:98:24:1c:f7:be:79:81:
                    e1:1b:ec:5a:f4:2f:03:ad:14:76:23:8c:e2:a8:60:
                    3a:b7:83:da:ae:37:c3:dc:d1:d8:4b:61:d0:fc:d6:
                    17:13:48:eb:a3:e0:e8:c7:d8:f4:77:5e:12:ab:f4:
                    fc:9d:56:fc:86:eb:40:c0:39:98:ea:9c:e9:2f:65:
                    58:65:b9:0b:0d:29:f8:a9:3e:12:8c:02:ba:c3:a5:
                    31:43:c0:2a:75:fd:96:7e:4d:a7:f2:a0:6b:eb:bc:
                    5f:41:d4:a7:78:60:69:13:21:f0:46:d7:c4:7f:dc:
                    c6:da:52:03:bc:de:13:8c:0e:e4:f0:42:16:cd:40:
                    0a:32:dd:61:67:6a:e1:7c:45:da:d4:e6:28:57:4a:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:BB:84:17:C1:8B:2E:50:8D:30:E1:0D:3D:C9:2A:61:6B:C4:D5
            X509v3 Authority Key Identifier:
                keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:40:4e:1b:16:33:32:16:b8:e7:e6:79:38:24:d9:73:ad:98:
         95:9c:1d:d4:31:b9:08:92:73:99:d5:45:a8:6f:99:66:a1:a2:
         27:4c:b5:24:06:7d:72:be:c1:5a:d0:c3:f5:e1:bf:5c:33:5a:
         20:9e:e6:7e:17:c5:3a:dd:2d:91:23:60:83:45:50:81:7c:59:
         7a:98:4c:9c:7c:d1:d9:c9:3a:2d:f9:88:93:e3:8f:68:e3:d2:
         83:aa:d5:b4:c5:b9:47:c5:01:f8:09:7d:db:0e:7f:a7:32:69:
         03:72:13:a2:26:36:1b:37:11:3b:11:10:2b:cf:89:88:44:9f:
         ca:d1:24:ee:29:69:d1:73:f5:93:0d:6d:66:67:20:72:15:a2:
         0c:8a:71:77:57:be:67:35:ce:0c:77:0c:28:90:58:a8:0e:3a:
         3d:e5:4c:d5:6b:d1:a3:59:1f:19:3d:b0:c1:e4:ef:7c:9b:08:
         39:ce:7f:c8:c8:4c:e5:df:f9:2f:c8:fd:c6:b3:2d:1a:5d:d2:
         d2:ee:b6:bf:44:1a:74:d9:8f:e9:74:fb:87:13:2c:12:34:da:
         9c:fd:01:5e:a3:a5:2f:d1:14:3b:ac:2b:a3:eb:3b:cd:10:81:
         d7:0c:ef:8e:d1:f0:98:ee:dd:a9:ab:e4:5c:a0:36:5b:4b:00:
         b2:19:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:27 2025 by rpki-client