Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          Ypn5DUFtCO5xYmt+SiC2pgCWcuzmD7Ebe6U5OsJt4p4=
Subject key identifier:   5A:58:09:EA:B3:0B:54:20:F8:B9:31:4D:C5:07:93:F6:F0:6E:B5:06
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       0198D4E0666251099CB9B74BA3DA54FE109C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          106D
Signing time:             Sat 23 Aug 2025 03:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:12 +0000
Files and hashes:         1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=)
                          2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: /iJ4jYHCD0c4b2nCTSWGovd0nnbCiDdMSV2CNDgNdls=)
                          3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=)
                          4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=)
                          5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=)
                          6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=)
                          7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=)
                          8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=)
                          9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=)
                          10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=)
                          11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=)
                          12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=)
                          13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:66:62:51:09:9c:b9:b7:4b:a3:da:54:fe:10:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Aug 23 03:02:12 2025 GMT
            Not After : Aug 24 03:02:12 2025 GMT
        Subject: CN=5a5809eab30b5420f8b9314dc50793f6f06eb506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:de:29:b4:3b:df:28:3f:e6:c4:81:12:ba:
                    d3:17:cd:81:17:ab:17:56:0e:ee:73:64:d3:0e:29:
                    48:72:09:a5:ec:df:fd:09:cf:89:f6:04:ae:83:e5:
                    96:d1:64:74:10:c2:db:ae:49:83:33:96:68:c8:8d:
                    a0:15:35:d4:90:75:f7:b9:c2:90:eb:33:a7:9b:01:
                    6f:72:5c:13:ac:d1:27:e2:e5:9c:ec:c1:11:90:90:
                    58:68:68:32:2d:a4:ff:eb:f7:a1:ba:a9:b2:31:86:
                    76:41:00:30:4c:12:d8:8a:74:02:7f:df:3f:bf:5e:
                    f1:e1:26:cb:32:97:d1:41:da:15:1c:65:b3:8a:2a:
                    c0:84:70:a8:b8:83:7d:a7:cd:cc:d9:5b:1e:f2:75:
                    d4:96:32:47:60:11:d3:8b:17:b0:74:f8:2f:3f:e7:
                    a3:47:40:f1:18:0c:fc:6e:d9:9d:55:72:b8:2a:4a:
                    05:77:95:c9:46:34:0f:a1:ce:d5:d8:6d:86:5f:a3:
                    ef:ea:05:0b:a3:58:36:6d:e3:fe:62:da:cc:5c:26:
                    a4:81:97:78:d1:98:d8:06:10:51:ee:b7:59:1f:8a:
                    b2:01:fd:8c:f9:d1:a3:78:57:27:91:00:d0:c9:d5:
                    1a:ef:af:0f:54:8c:7c:25:5f:4b:50:62:ff:39:7d:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:58:09:EA:B3:0B:54:20:F8:B9:31:4D:C5:07:93:F6:F0:6E:B5:06
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:38:75:d4:16:d7:f2:7c:e1:9f:0e:e1:79:74:be:6c:9f:
         b2:fa:28:2c:a0:a4:a6:d1:87:b2:86:6c:dd:9b:22:9a:1a:3f:
         b8:a2:1c:5b:98:8d:c0:81:dd:43:1c:03:29:90:c7:db:31:11:
         d7:69:58:39:6b:7b:4b:97:22:e8:28:89:13:c0:06:21:c6:3b:
         f0:30:55:d2:29:ac:eb:3f:97:19:2a:8f:fd:08:3a:45:01:d0:
         a3:84:e6:48:7c:11:4c:e6:b2:62:75:a9:32:bf:26:f2:ed:3d:
         e8:3e:b9:7b:d3:db:ad:21:7c:e3:e0:9a:cb:71:23:fd:eb:3e:
         51:a0:80:22:e7:4d:c2:ea:84:87:b9:29:ef:49:46:c1:8a:5a:
         66:e1:ce:9d:1c:0f:e7:48:c8:c6:17:8d:3c:84:24:26:02:0e:
         b3:8d:0d:4b:a2:76:75:5d:6b:ca:5b:3d:0a:25:54:a2:1c:e4:
         d0:bd:c5:d8:12:c6:40:78:2b:dc:6b:bb:cb:2f:19:6e:a8:8a:
         17:06:77:c0:82:3b:04:12:9b:15:8c:ba:a3:59:59:e7:72:93:
         2e:f6:4e:ce:ba:98:26:38:38:23:da:2b:f8:66:37:68:b8:32:
         3f:83:90:41:9b:82:bd:c5:3d:87:e8:04:4f:b2:5a:7d:2f:06:
         bd:c4:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:56 2025 by rpki-client