Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File:                     Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier:          uwSeraDr7csvAp21MyaGTXEgT9SXWTLUu7LEaTjsqRM=
Subject key identifier:   3E:13:C1:0C:3C:16:E2:69:F4:28:07:2B:53:D9:48:FB:0B:15:0C:F1
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer:       /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial:       0198D65F7FE2170FB9AB211FCA5B89E09D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number:          1285
Signing time:             Sat 23 Aug 2025 10:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:39 +0000
Files and hashes:         1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
                          2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
                          3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
                          4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: PvPWfKgQEFq+TxLsz9pM+YoGJolw/ZTdvKZCtWgq0Hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:7f:e2:17:0f:b9:ab:21:1f:ca:5b:89:e0:9d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
        Validity
            Not Before: Aug 23 10:00:39 2025 GMT
            Not After : Aug 24 10:00:39 2025 GMT
        Subject: CN=3e13c10c3c16e269f428072b53d948fb0b150cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:4b:ec:98:d5:4c:b1:dc:05:00:c9:b9:1a:
                    40:e0:8d:dd:d6:42:a2:ab:d1:f2:46:ed:10:60:f9:
                    03:96:70:16:ac:ee:d9:9d:5a:51:5b:62:ba:e1:9f:
                    2e:1a:de:c7:7c:57:e8:df:5f:32:35:ef:27:49:89:
                    d4:b1:81:16:7e:9f:f8:57:10:98:0d:6d:08:24:f0:
                    9e:78:66:82:88:b2:0a:39:3f:f2:22:8c:22:71:41:
                    eb:87:c7:32:2a:53:cd:37:51:ca:9f:3c:4d:36:e6:
                    a2:eb:91:c8:c5:d4:3c:cd:56:75:51:35:90:88:d1:
                    08:aa:8a:9b:22:0a:f9:0c:b3:21:51:95:b1:ab:c4:
                    ad:ad:c8:08:66:d7:2a:5b:81:32:7f:f5:49:48:0d:
                    04:5b:35:1e:1b:3a:64:43:ab:d1:33:71:61:cc:51:
                    b9:f0:fb:70:e8:ca:e7:73:23:13:5e:d8:f6:da:dd:
                    b6:ee:4b:3c:7d:98:b5:90:e0:4d:c8:7b:49:77:79:
                    a6:26:74:91:17:4b:cd:5c:7b:aa:32:ec:1f:bb:21:
                    ed:b5:f0:c5:a7:d3:c7:b3:5a:30:5f:24:7b:24:a5:
                    b5:9d:f2:5b:92:3d:3a:f8:9c:05:d4:6d:6f:78:2a:
                    3c:96:95:c5:f9:e3:29:51:bd:86:50:1b:6b:32:da:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:C1:0C:3C:16:E2:69:F4:28:07:2B:53:D9:48:FB:0B:15:0C:F1
            X509v3 Authority Key Identifier:
                keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:59:77:f7:ba:fa:87:03:ba:e8:97:32:9e:14:6b:2e:7f:ae:
         8b:ba:2a:e9:91:43:94:77:67:a6:c8:35:8c:24:81:fe:28:95:
         69:58:48:9b:d7:40:11:ae:f5:3f:ca:ed:f7:30:5b:3d:46:80:
         ea:a4:79:d3:f2:f9:8e:47:a8:6f:02:25:15:21:12:c3:c5:f8:
         2f:b9:0f:f4:a8:b5:8f:45:53:f7:71:7a:e9:67:2b:cc:eb:7a:
         4b:86:2e:f4:df:12:ca:73:0d:03:be:d3:da:72:b9:a4:21:97:
         cb:c4:e0:a3:4e:8e:5b:91:02:53:4d:ce:d0:73:fa:24:a4:1c:
         61:5d:b8:6e:6e:df:38:52:09:d2:2a:22:df:86:1d:ef:4e:4e:
         96:6d:40:c3:09:4a:1a:7b:57:a1:30:98:e4:77:07:4a:80:b2:
         84:89:9b:f6:85:1a:ef:2a:a0:5e:5e:96:37:71:c3:4e:5f:84:
         8d:ab:88:72:8a:5d:74:91:45:61:9f:57:11:20:e8:42:90:3b:
         4e:91:e1:19:aa:88:e9:d5:06:37:52:cb:1b:64:72:9c:22:1a:
         a0:97:27:42:23:68:77:70:14:19:9a:ae:bd:39:0b:81:60:ce:
         cd:57:dd:d4:4c:6b:c8:7f:c3:75:56:1a:e9:d6:a8:3e:98:14:
         2f:14:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:27 2025 by rpki-client