Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          MsWtNC4Tvlx//Zzj6cz7bNryRROr/sL8UdFA/56eJrs=
Subject key identifier:   6B:2E:23:AD:0D:64:CB:70:64:80:4A:98:AE:74:B4:C1:47:32:21:D4
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       0198D7A926855EDB01478FC445807DF3FF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          12F7
Signing time:             Sat 23 Aug 2025 16:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:43 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: IQrgsegSomkxHJRwNnBDh2yfQHbkdJoCqOyeb+xFTWk=)
                          2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:26:85:5e:db:01:47:8f:c4:45:80:7d:f3:ff:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Aug 23 16:00:43 2025 GMT
            Not After : Aug 24 16:00:43 2025 GMT
        Subject: CN=6b2e23ad0d64cb7064804a98ae74b4c1473221d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:f5:c9:20:19:9d:48:2e:a4:08:82:79:6a:
                    f9:a4:f9:7d:00:c2:02:46:88:04:a2:7b:9b:fe:df:
                    f2:2c:85:c1:38:05:32:0c:50:f7:59:53:6e:be:c3:
                    79:63:5e:e7:6b:da:80:6b:54:34:db:1f:e6:47:b5:
                    78:34:09:f7:b5:e0:12:04:41:2b:b6:8a:32:ea:60:
                    da:32:23:0c:83:f6:b8:13:96:3d:0d:d1:ef:30:80:
                    65:e9:69:78:54:30:a2:61:2d:bc:75:ae:f4:3c:36:
                    1b:89:84:e4:68:aa:a1:9d:c3:f0:70:7a:e8:7b:d5:
                    bb:29:0c:79:75:3b:7a:c0:1b:a0:77:87:7f:12:14:
                    71:9d:ed:38:36:24:4c:78:8f:da:77:3f:b4:36:f9:
                    46:61:d9:37:55:31:78:87:70:97:48:11:a0:82:ee:
                    ee:ce:03:bf:e8:88:49:73:8e:57:19:0d:a9:f2:89:
                    b4:b6:96:b6:b9:fb:61:ca:81:85:ec:91:57:8b:40:
                    3a:7d:d8:ad:17:46:c1:d8:3a:0e:e0:21:2e:e0:d4:
                    c0:bb:d8:dd:10:97:74:b5:8a:47:79:0c:13:82:fd:
                    8f:60:5f:53:f6:cc:b5:fc:fa:52:41:e0:2b:32:0c:
                    12:57:4c:73:a3:72:7d:90:01:23:66:6d:65:2e:b9:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:23:AD:0D:64:CB:70:64:80:4A:98:AE:74:B4:C1:47:32:21:D4
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4d:29:44:ee:8a:76:b4:bb:4a:76:11:f1:13:a5:f7:d9:33:
         05:e7:a6:ea:42:8e:82:68:97:e4:00:32:ae:75:33:67:93:35:
         28:f2:e2:d8:77:05:f3:a5:2f:d7:56:fc:f7:d3:79:40:1e:f8:
         4f:f8:4f:ed:7c:14:16:7b:6e:ec:87:98:e5:e6:50:bc:d8:ac:
         39:91:32:11:66:f0:0d:ba:74:a7:c4:5b:a3:75:9f:15:0c:f8:
         e0:fa:0a:2f:62:88:99:a6:63:8e:33:5f:eb:73:f7:f6:34:29:
         34:e5:ea:df:5d:5d:7e:94:19:fc:c0:9b:12:c0:eb:1d:c3:c8:
         d8:a0:df:de:e0:43:f7:ac:28:20:4c:be:cd:e4:7d:09:65:04:
         71:61:7f:89:0c:22:73:86:aa:1a:1b:7d:a3:cb:cd:d7:45:a4:
         5d:e3:b8:bf:c0:39:ea:66:58:e2:48:7b:0d:fe:69:ad:10:e5:
         41:2f:8a:c1:74:ad:70:78:50:c1:20:0f:57:d7:5d:f7:4f:d2:
         06:dc:5d:74:36:19:62:20:d1:0f:b2:47:7e:33:23:a8:29:1f:
         b3:4b:9c:41:46:ee:ae:e4:17:81:33:6f:1f:ff:cc:1e:1b:3e:
         72:66:08:23:d6:c3:c5:86:b4:77:79:05:8e:98:6c:c5:80:20:
         07:ce:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:33 2025 by rpki-client