Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File:                     raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier:          dbSSLoWj8hELxIOEOHphofdaCIpGtpI6t/o9N0vUUN0=
Subject key identifier:   33:00:12:C2:FD:F3:86:FD:94:34:F9:CF:80:C6:D5:4F:DB:0A:AD:98
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer:       /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial:       0198D4E02D443091F3AAFE95D7B5611F741E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number:          0F88
Signing time:             Sat 23 Aug 2025 03:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:57 +0000
Files and hashes:         1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
                          2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: tjdbON8zPaRUfQrBGFi+ZbsnCSSF34Tz39+GrngyRmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:2d:44:30:91:f3:aa:fe:95:d7:b5:61:1f:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
        Validity
            Not Before: Aug 23 03:01:57 2025 GMT
            Not After : Aug 24 03:01:57 2025 GMT
        Subject: CN=330012c2fdf386fd9434f9cf80c6d54fdb0aad98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:8a:d2:68:a2:df:bb:a8:b4:cb:05:cd:92:
                    2e:47:0e:5d:47:15:c2:aa:6a:23:0f:94:cb:ac:45:
                    06:d7:32:01:1a:1e:b4:06:b2:e0:94:59:50:96:87:
                    51:a5:e0:43:75:cd:d9:e6:c0:77:07:14:8b:b4:6a:
                    0d:c5:b3:79:13:6d:59:f8:08:10:00:ec:a5:f8:3d:
                    f4:f8:5f:20:7e:64:ce:e7:b4:f9:b7:86:36:b2:43:
                    d4:fe:b8:6d:a5:af:36:08:d8:7a:83:67:fa:b1:43:
                    d1:d9:c6:ea:b3:14:8a:64:d1:4b:18:53:33:88:82:
                    fc:1f:e2:3a:7a:41:27:e3:00:e9:ec:fd:02:9c:0a:
                    bf:85:b5:16:b3:14:bc:da:a3:50:cc:d7:a5:6e:09:
                    4a:68:57:5a:32:b9:1a:c4:55:45:31:e6:64:67:3c:
                    87:ef:c5:67:bc:fe:8e:7f:f4:b1:23:f2:c8:d0:dd:
                    4a:4b:dc:f9:98:e3:84:9c:be:ec:b7:1b:db:a2:d9:
                    5a:bf:f3:9c:1b:16:fd:24:15:10:be:21:f9:3a:8e:
                    60:ff:fc:fe:27:0c:03:87:3e:99:bf:f4:d3:7a:dd:
                    39:15:7f:c9:fd:2c:85:e6:7c:a7:92:21:d3:7f:67:
                    59:b8:a5:d4:f6:2e:18:dd:f4:c5:c4:40:68:98:e6:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:12:C2:FD:F3:86:FD:94:34:F9:CF:80:C6:D5:4F:DB:0A:AD:98
            X509v3 Authority Key Identifier:
                keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:da:b9:1f:48:82:6a:82:5f:04:65:1b:b3:5d:9d:2d:de:a6:
         41:44:14:9e:f7:40:cf:1f:9d:f5:6b:31:d4:31:d0:14:fe:ba:
         39:9f:aa:38:d2:9e:b9:1f:9f:8f:51:24:11:eb:cc:25:5b:8b:
         4b:48:72:1b:a0:86:f2:5d:4b:ac:f3:a6:75:66:33:3c:70:ac:
         b7:25:7e:a2:4c:7c:46:94:88:eb:a2:d3:c7:18:88:50:c7:c7:
         6f:a4:eb:c8:51:23:6a:e6:e6:ba:96:07:da:57:a6:d1:ce:75:
         59:ec:34:8e:bb:0a:2c:f5:c8:fc:be:19:a2:51:73:73:a1:46:
         1e:e5:e7:ae:a7:d7:88:88:fa:f1:30:5f:b3:4c:84:3a:aa:d6:
         10:1a:fe:fd:e9:1d:e3:09:32:80:b9:42:19:e8:10:34:5b:67:
         ec:a8:af:91:48:5d:e2:1e:25:81:e0:29:e9:75:b4:f6:62:38:
         2b:1d:9d:19:ef:7c:e8:e4:a2:37:01:37:b0:b8:d9:5b:91:13:
         5a:ca:b5:71:86:06:68:93:de:75:3e:4c:9c:8d:bb:ac:52:fe:
         5d:75:0f:49:0d:2c:12:99:d0:7e:60:eb:3a:6b:2c:72:6a:99:
         ac:87:47:5c:51:8a:26:d2:ab:60:65:06:a7:19:b0:75:2c:97:
         aa:68:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:39 2025 by rpki-client