Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          uKcEGw2OC/p0D2X5cjtqEcMmTmbJ3i0fGC4XrD/Er9A=
Subject key identifier:   42:95:AE:0E:C7:D8:10:3F:A2:8D:32:68:ED:D5:B3:91:F7:62:4C:15
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       0198D473704DCD91D0485B443365CF4B40F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:03:11 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:11 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:11 +0000
Files and hashes:         1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: Uno9OAVdgT0ZyX0zHMR+h9FiwGqet5+JeP/ATqxiirc=)
                          2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:70:4d:cd:91:d0:48:5b:44:33:65:cf:4b:40:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Aug 23 01:03:11 2025 GMT
            Not After : Aug 24 01:03:11 2025 GMT
        Subject: CN=4295ae0ec7d8103fa28d3268edd5b391f7624c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:21:c7:ce:2e:15:24:d4:2d:96:ee:f0:53:
                    29:59:69:9a:b4:6a:ec:a8:e2:ea:0b:e8:a8:78:e4:
                    17:ac:5f:a4:73:9c:7f:be:5f:0e:f9:ad:2c:79:2f:
                    11:e1:31:32:af:6d:af:4a:f8:19:3f:dd:c3:60:b6:
                    45:f9:ea:42:b4:b3:03:10:54:40:6a:17:d6:09:9c:
                    64:6c:74:bf:75:7e:6b:e3:b3:19:e4:66:a3:4d:37:
                    48:0d:0d:67:55:f5:5c:7f:f1:68:91:89:8f:5f:a9:
                    5e:92:7a:1f:2b:4f:e6:50:9a:57:0e:19:5b:cd:c5:
                    19:f8:f6:e4:74:54:43:d9:e3:db:e1:d3:16:3a:ab:
                    fd:85:3f:b5:ce:36:4e:e1:69:06:92:bc:3f:e1:2d:
                    44:36:bb:d9:c9:d8:5e:5a:2d:ce:a6:20:4d:ee:d9:
                    a1:8e:20:77:cc:97:0d:70:15:ce:3a:bf:8c:bd:f6:
                    df:c6:eb:f8:67:cf:b0:91:cf:8b:3c:de:80:30:9d:
                    1f:f1:95:18:39:b0:d5:ef:fd:d5:01:79:98:a9:d0:
                    25:1a:a2:37:26:17:e4:36:7e:08:47:6e:af:8c:f3:
                    26:21:ed:e4:55:81:f2:ff:15:39:b6:ad:df:3d:3c:
                    f9:d7:2c:2c:49:1d:01:d6:be:73:90:ad:6d:b4:f0:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:AE:0E:C7:D8:10:3F:A2:8D:32:68:ED:D5:B3:91:F7:62:4C:15
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:74:b2:79:7b:7e:9e:69:a1:97:35:2e:28:6b:61:e9:43:
         47:3b:0b:f6:cc:41:83:72:72:8e:9d:cb:93:8b:39:25:a4:04:
         50:62:71:3b:7c:73:32:8f:24:ab:7f:62:d6:86:7d:5f:d7:d1:
         6d:b8:30:2d:1e:24:e4:55:17:94:25:ed:e1:d7:d6:80:87:cc:
         44:dc:09:08:fc:37:fc:76:4f:2a:0d:03:46:45:ec:e0:d5:58:
         99:71:c6:65:ea:dd:0d:1d:17:f5:71:40:c7:28:40:c2:19:05:
         7a:0c:13:a6:a3:a4:eb:d5:7d:56:ee:f4:b9:a1:56:b5:f5:76:
         d0:24:8c:02:bf:b8:94:cf:86:ce:02:df:d6:03:16:bd:dd:0e:
         b0:6c:73:cc:94:97:16:d6:8e:db:90:f8:d3:c1:cf:05:60:41:
         7a:6f:55:34:8f:6a:77:b2:e9:c8:f5:60:61:35:94:5f:14:e4:
         ef:29:dd:90:be:63:d0:98:dc:66:4f:4a:23:09:ad:9d:73:14:
         79:a7:83:9c:97:93:5d:ab:69:65:27:fc:63:17:b4:d2:86:be:
         74:c7:e6:e0:db:57:47:40:4b:d8:73:ac:ba:7f:30:0e:a7:8b:
         47:59:10:3d:04:4a:de:67:09:73:df:62:ad:8f:af:c9:9d:a1:
         3a:43:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:21 2025 by rpki-client