Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File:                     9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier:          WV7OaYEvusQo0B7iFJ2zTrgzASuhoojTb1jfaHiYsHc=
Subject key identifier:   84:A0:4F:A8:EC:A7:15:82:59:EB:C7:55:03:84:F8:D1:42:3E:56:18
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer:       /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial:       0198D4E0E0A15254BE2DCA4EF0C6005262CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number:          14E7
Signing time:             Sat 23 Aug 2025 03:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:43 +0000
Files and hashes:         1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
                          2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
                          3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: F9qiHRewszsDEeisGg8BN1ox7voj17b0Qw/+xyZuu1I=)
                          4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
                          5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=)
                          6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
                          7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
                          8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=)
                          9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:e0:a1:52:54:be:2d:ca:4e:f0:c6:00:52:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
        Validity
            Not Before: Aug 23 03:02:43 2025 GMT
            Not After : Aug 24 03:02:43 2025 GMT
        Subject: CN=84a04fa8eca7158259ebc7550384f8d1423e5618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:95:4c:26:8b:ca:60:ce:fd:ae:5c:df:35:
                    20:e5:0f:53:d2:d9:2a:c0:94:df:e2:34:77:78:6b:
                    5c:2a:4f:57:4a:8d:07:e4:35:59:67:bb:88:9f:2f:
                    2e:c6:74:c9:a5:4c:5a:e9:2d:aa:f7:8d:5b:86:ff:
                    cc:75:4e:47:ec:c3:4b:6a:28:03:fa:8d:6f:a9:0e:
                    1b:c1:6e:4b:01:13:fc:44:af:05:06:5c:e3:12:5a:
                    83:49:ab:1c:43:fa:45:b4:20:ae:f2:10:b8:f5:cc:
                    d6:6f:93:58:dd:40:2c:6d:bf:37:c7:90:f7:76:06:
                    18:5c:55:b9:08:62:e1:34:32:5b:3f:84:29:0c:33:
                    52:f9:01:0b:8d:b6:8f:7c:32:30:c7:b2:73:51:70:
                    7a:86:4f:41:bd:97:1a:c9:de:20:60:da:75:f9:26:
                    41:87:7c:e1:37:cb:4c:b0:65:fa:93:3e:20:b7:ee:
                    7f:9b:38:8e:3e:57:2b:a8:e4:0c:a3:00:37:ba:6d:
                    7c:00:66:b3:e0:1c:91:03:94:39:7f:19:af:90:83:
                    8a:c0:ec:15:a5:18:0c:dd:e2:a1:2a:fc:d3:7e:73:
                    a7:a7:02:23:84:fc:fb:cf:0e:95:40:19:4c:60:df:
                    91:29:65:80:f4:84:73:69:79:e2:91:91:10:ac:03:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:4F:A8:EC:A7:15:82:59:EB:C7:55:03:84:F8:D1:42:3E:56:18
            X509v3 Authority Key Identifier:
                keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:24:1f:2a:5e:77:eb:b0:b3:54:a1:53:00:a1:45:e7:3c:f6:
         ff:6c:b1:f0:52:ec:a0:7b:82:97:f8:88:af:3a:ac:2a:30:2e:
         c9:6a:5b:b9:86:61:27:c1:ca:cd:9e:42:ee:5b:db:70:d6:63:
         3a:8b:52:98:c8:71:32:ff:fb:98:e1:23:ad:37:a6:e7:fe:99:
         81:01:3f:3e:e2:b3:a9:0e:12:7f:15:ad:72:ac:92:aa:0b:88:
         76:f3:3e:6b:ab:e3:9a:a6:99:d9:f8:c9:38:71:19:2b:21:e7:
         39:71:22:3e:ed:b7:ee:cd:c4:09:bb:61:50:8e:e3:9d:f8:46:
         d2:e3:05:6f:c6:f2:bd:0b:b1:be:1a:0b:cd:62:f3:6e:90:ec:
         7b:6e:f4:6d:82:ca:1b:89:c5:88:8c:a7:76:be:d7:1b:0b:c1:
         d1:c9:db:b4:87:12:37:ed:f8:cb:8b:34:e3:04:cc:22:a1:4d:
         20:6b:07:b4:6f:d2:55:43:c7:64:e5:20:a7:2e:82:94:ef:07:
         a6:7d:3a:c9:63:c8:5c:c5:e9:20:bc:72:c2:54:f9:ff:3b:bf:
         c8:18:8a:ac:f6:27:d5:65:a5:c9:43:1b:44:d9:4f:5c:24:b4:
         87:07:aa:d4:44:7d:cf:c6:03:85:3f:7d:35:74:a4:73:07:9e:
         ce:4f:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:09 2025 by rpki-client