Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          ZBYFgRLd28AVXMsVtoWekUKSM0bVGhPkGNmal7iVKes=
Subject key identifier:   2A:DE:54:BC:50:43:BD:50:D8:CB:E8:96:A6:4B:09:BC:2E:CC:F3:FA
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       0198D6609787020C6E6D098A838CF2F47F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 10:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:51 +0000
Files and hashes:         1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: LptNWY9Y/PoH8E2EuHPMJz7UZ3hn4h2r1ln8fKprKPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:97:87:02:0c:6e:6d:09:8a:83:8c:f2:f4:7f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Aug 23 10:01:51 2025 GMT
            Not After : Aug 24 10:01:51 2025 GMT
        Subject: CN=2ade54bc5043bd50d8cbe896a64b09bc2eccf3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:1a:a8:e2:de:dd:6e:f1:57:2c:e5:70:f2:
                    5d:bb:00:37:7e:e4:e3:68:97:65:9a:90:1b:10:08:
                    7c:18:33:56:d1:8d:20:88:17:cd:17:40:90:03:91:
                    8e:a7:6b:d4:91:cf:fd:47:f6:e3:b1:70:07:ff:cc:
                    97:af:d2:20:f0:4e:58:79:87:19:f5:4a:98:16:5c:
                    38:86:18:cf:e0:cc:86:41:85:56:44:ac:1d:7e:7f:
                    d8:6c:ed:c2:e3:6b:0b:78:ba:f4:e2:8d:7e:79:0e:
                    c2:97:a5:2d:5c:0e:d9:f3:ba:bf:a6:03:15:fd:e1:
                    e4:39:04:4a:49:05:54:85:16:95:b3:88:3a:2b:90:
                    39:ac:85:f2:80:8b:03:26:4e:9f:7c:fe:95:cc:d9:
                    b9:e6:43:d8:60:ce:ae:7d:11:0d:19:6d:e7:94:26:
                    80:7f:aa:f1:fe:14:ab:c7:02:98:f9:d0:16:69:9e:
                    57:f9:06:f7:f4:16:b4:28:b9:a6:1a:23:fb:ab:58:
                    4b:4d:19:89:9a:36:5d:c3:e2:62:1f:11:57:a8:80:
                    74:03:60:2f:f1:09:ab:84:37:ab:c9:fc:1a:43:bf:
                    b2:20:f0:51:4b:2c:f0:f5:c1:40:ea:7f:92:e7:37:
                    14:24:f2:0d:12:99:80:72:7c:d8:cf:0e:c5:2d:59:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:54:BC:50:43:BD:50:D8:CB:E8:96:A6:4B:09:BC:2E:CC:F3:FA
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:af:44:38:32:ad:b4:50:9a:c8:f7:a1:c6:af:b6:81:dc:6e:
         de:d1:33:a7:f7:f9:d7:60:42:21:95:18:ee:41:62:df:48:e2:
         48:fb:d9:f3:33:da:bb:c4:4f:28:22:77:8e:c6:0a:af:9b:fd:
         ce:9e:6c:a7:af:49:66:69:0e:95:f2:c9:fc:31:dc:d1:97:cf:
         65:de:8d:bc:2f:1f:bb:ec:e3:9e:49:60:a6:45:b2:68:6b:37:
         ef:22:10:9f:8c:d5:20:bb:fe:e9:1f:24:0c:16:1b:7b:02:e3:
         4b:9d:b2:0b:90:27:67:11:45:85:18:c8:55:98:96:3e:ea:65:
         18:5d:df:47:26:02:d2:30:a4:dd:49:86:a9:8a:d2:87:2a:c8:
         2f:bc:36:56:cc:11:7f:4e:aa:e9:16:35:42:82:47:19:79:83:
         7b:01:6b:a4:20:5c:0f:cc:a7:21:64:20:38:43:6f:7b:5e:d1:
         5b:ba:0d:33:de:ea:cd:47:f3:4a:43:f4:40:e6:30:43:2e:25:
         25:02:e7:7f:e8:22:8d:eb:6a:de:92:61:cd:35:65:1a:31:14:
         0d:8b:b9:ba:41:3e:7a:4d:05:a2:87:94:de:b1:de:ee:c0:3a:
         47:78:2b:f2:1c:65:e0:51:2a:44:bc:8a:51:e2:51:58:4d:56:
         34:c7:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:32 2025 by rpki-client