Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          QV9MtneIxLzYzSVvknMXHuC1NkRPZoaCVWiQ8zN2EaQ=
Subject key identifier:   B4:E0:E8:A3:03:35:71:7C:40:94:5B:51:36:6A:0B:30:A3:EA:20:4F
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       0198D583C0EBD66D302F18A41703D4447FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: n/ci8jP7yVMb1WyWkYAeevqq80cn9XMYkfOavVz/uU8=)
                          2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=)
                          3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=)
                          4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c0:eb:d6:6d:30:2f:18:a4:17:03:d4:44:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=b4e0e8a30335717c40945b51366a0b30a3ea204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:4e:d3:4f:84:4f:fc:1a:d9:61:10:18:38:e7:
                    2a:e7:1f:8c:f7:ee:0b:a5:21:fc:3d:3b:d4:2d:27:
                    84:5c:dd:f9:98:8c:8c:9e:33:32:47:a5:80:85:16:
                    90:17:49:78:d8:7a:f9:65:4a:9a:54:94:74:ba:35:
                    5f:8c:4b:da:5d:bf:46:4a:15:e7:56:33:02:a7:5b:
                    25:04:14:e3:73:14:d6:01:9a:92:91:bd:29:32:f9:
                    1a:bf:ff:a5:9e:83:06:ae:a3:4a:9a:f8:e1:33:f5:
                    1d:01:38:05:dd:fd:5d:26:3b:a9:e6:2b:49:c2:43:
                    22:2c:16:8b:63:4d:1a:0a:17:f8:c2:19:91:32:80:
                    80:9c:2b:67:c0:d8:ad:c0:62:fb:98:27:9a:0c:cd:
                    8e:02:31:d9:f6:d7:af:5e:92:d6:3b:cb:43:ee:ca:
                    80:d9:4c:c1:f8:ac:cd:08:3e:53:f0:34:1c:7c:9d:
                    d6:99:83:ea:70:5f:2c:0c:52:57:83:dd:a1:95:ba:
                    3f:70:07:33:30:ac:cb:ad:7d:2d:f1:4f:05:c9:9f:
                    34:29:6b:6e:4c:01:a8:70:ce:31:39:64:a9:16:76:
                    e4:cb:36:c0:e7:03:2c:a7:11:e7:f7:31:da:c8:98:
                    32:cd:45:41:4b:68:ce:79:47:96:73:92:f3:ff:37:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E0:E8:A3:03:35:71:7C:40:94:5B:51:36:6A:0B:30:A3:EA:20:4F
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:1f:d4:bc:04:63:3c:41:46:4f:c8:b3:24:13:64:32:28:
         d1:75:14:46:7f:ad:1f:82:6c:67:31:6d:5a:78:77:1a:14:9b:
         4f:22:59:11:08:a3:ba:b8:a6:3f:1d:10:f5:54:87:2d:29:38:
         7f:d0:34:63:eb:3b:7d:76:6c:15:e3:d1:d5:2d:e2:85:2c:ad:
         55:8e:bf:2a:41:98:4c:f8:a5:15:56:87:83:b9:44:d9:ed:fb:
         ce:bc:6c:0f:f2:69:5d:12:79:c0:62:0c:c6:73:be:d0:a9:3b:
         94:c2:e3:e5:50:73:b6:0a:8c:e6:4b:57:6d:e8:73:75:da:a0:
         32:c7:af:94:57:63:7f:bf:26:d2:59:1f:a4:bd:8a:4f:db:32:
         77:86:64:00:a0:73:5e:3c:9b:68:c8:e1:4c:56:15:ae:79:c0:
         42:aa:5a:55:20:3b:26:d5:d0:11:02:a9:bf:d4:1e:83:0c:01:
         08:a7:2e:ad:8c:40:eb:20:7f:f6:72:aa:44:27:7e:f6:3f:e2:
         35:87:fe:d7:fa:fa:9d:fe:41:52:60:fd:ee:4a:50:44:06:8d:
         0d:4b:1b:cb:c2:1f:21:3e:0f:96:84:1b:c7:91:b4:e0:b1:87:
         a9:fb:14:33:55:2a:f8:a6:c9:d8:3e:6c:3f:4d:e5:ec:6d:46:
         1b:f0:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:17 2025 by rpki-client