Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File:                     mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier:          NrlT/lbkD9Zjjv+TQnogyH+J9iBpoIe33E5DaQUYK4w=
Subject key identifier:   4C:15:E8:48:E5:63:1E:36:87:50:7B:DD:78:7B:8B:3F:06:20:28:EB
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer:       /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial:       0198D473E953E73D6681A12FAF41B2F769E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 01:03:42 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:42 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:42 +0000
Files and hashes:         1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=)
                          2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=)
                          3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: 0CPaOVbQi9Yfmz5u1vgemN8mIBctGHZASlNHeZa2B78=)
                          4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e9:53:e7:3d:66:81:a1:2f:af:41:b2:f7:69:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
        Validity
            Not Before: Aug 23 01:03:42 2025 GMT
            Not After : Aug 24 01:03:42 2025 GMT
        Subject: CN=4c15e848e5631e3687507bdd787b8b3f062028eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:fa:04:ed:4f:39:95:4c:27:d3:ef:6e:d6:
                    3f:77:95:8b:59:07:3a:c7:6c:ba:c8:24:f9:f5:a5:
                    2d:d7:c4:ee:a9:0a:1a:1e:94:8b:86:b6:5c:ac:8b:
                    e1:16:51:09:bf:b8:ba:8a:8f:8b:cb:ed:15:b1:2b:
                    54:ee:c4:0b:57:02:85:1a:c7:5b:ae:22:c7:75:f9:
                    97:60:40:8c:ff:d9:12:fa:8a:54:1d:26:b0:53:07:
                    f7:f4:a7:2d:26:0f:d6:1f:92:07:42:55:53:a5:43:
                    7e:73:15:1e:b4:85:e2:0f:60:89:8e:62:ba:6f:29:
                    8f:c2:d7:f9:04:82:8a:b1:c8:b8:dc:c3:98:41:15:
                    8e:38:08:00:8e:48:91:ce:9b:cf:15:e5:60:e4:71:
                    fb:cf:70:28:0b:b5:3b:99:39:d5:a6:ee:4e:e1:07:
                    48:0f:ec:39:5a:ab:bb:28:e9:da:5d:17:98:2b:ab:
                    37:a5:1e:92:b1:e9:71:4d:c7:eb:21:29:ce:3d:25:
                    e7:f4:ec:e5:6a:8e:b0:6a:0d:0c:aa:b9:ef:8e:39:
                    70:9e:53:18:64:47:83:58:0e:b7:f9:a8:93:db:96:
                    3c:88:b9:d6:f8:c1:79:5b:b3:c1:1e:46:de:e9:32:
                    f3:19:41:a2:4a:ba:f9:d5:1d:c7:02:40:4c:d5:69:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:E8:48:E5:63:1E:36:87:50:7B:DD:78:7B:8B:3F:06:20:28:EB
            X509v3 Authority Key Identifier:
                keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:71:2e:5f:b2:9c:4e:4d:8c:8f:7e:e5:80:47:e6:00:9d:8d:
         53:94:8d:e3:08:f5:e0:20:d4:1f:46:5a:25:37:db:4a:89:2f:
         dc:5a:50:89:cf:6c:df:60:33:a2:76:40:2e:2a:a2:7f:1f:de:
         3e:23:dc:a3:4f:9f:61:e3:1a:ae:f3:fa:b1:2e:21:95:75:1d:
         65:80:86:5f:4d:63:b4:27:80:ad:20:c3:69:0e:64:0a:f7:77:
         27:36:84:29:c9:19:06:77:ae:5f:b2:03:fb:79:68:bf:11:a0:
         fa:ca:02:70:69:2c:91:e9:02:0e:45:1d:c2:cf:70:33:57:14:
         fb:16:4e:31:b1:e8:0d:33:06:73:8b:d4:c3:1d:33:26:04:33:
         48:0d:83:39:af:71:86:a1:86:f8:e2:2b:b1:7e:d8:89:a3:5a:
         ee:a1:3b:71:fb:ec:64:4e:58:85:5f:1f:1e:15:f6:5c:34:28:
         67:a8:78:9a:b1:fd:de:16:6a:79:2b:4f:60:79:71:48:d1:c7:
         a5:fb:e7:5c:a3:79:a5:cf:69:c6:99:0f:0c:5e:6e:aa:58:80:
         a1:dd:57:e9:90:a9:0b:5c:72:b9:31:49:21:7f:03:49:21:d6:
         31:7f:e8:f4:10:51:9c:78:0d:1a:60:ff:80:9d:8a:76:c9:6b:
         e9:74:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:00 2025 by rpki-client