Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          xTyaCkUw2RkQuKxh2JM+nrNJ6hD+OPvZ+puoppsPKqQ=
Subject key identifier:   31:F4:63:EE:30:AE:C0:FF:99:EB:8C:41:2B:9F:9D:DA:AF:B0:03:16
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       0198D65FC1FC8D7966B77FD97557BE6C1FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0B15
Signing time:             Sat 23 Aug 2025 10:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:56 +0000
Files and hashes:         1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: CnL5Rx+aNp49S25sTKeAE/cgSgoKOCI1JnPfjipcfIk=)
                          2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
                          3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
                          4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
                          5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)
                          6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:c1:fc:8d:79:66:b7:7f:d9:75:57:be:6c:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Aug 23 10:00:56 2025 GMT
            Not After : Aug 24 10:00:56 2025 GMT
        Subject: CN=31f463ee30aec0ff99eb8c412b9f9ddaafb00316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:5c:80:c9:03:28:f8:23:3d:ff:08:f2:e1:
                    d9:69:ac:9b:40:34:2a:e9:a9:a6:2d:4b:77:3a:4a:
                    18:9d:33:0a:79:6f:d8:1c:44:d0:d9:24:66:27:d5:
                    dd:49:ee:6c:35:73:0b:ae:80:a5:fb:87:61:99:59:
                    77:2e:af:0a:79:56:62:48:c6:b5:26:7c:18:cb:30:
                    3e:d8:9d:f8:1f:44:1c:11:38:b8:7b:93:2d:51:ab:
                    60:55:91:ef:fd:04:7a:bc:8c:14:2b:85:32:c2:4c:
                    47:ae:ab:3d:5c:a0:0b:f6:29:54:27:63:fa:8d:99:
                    91:1f:1a:3c:77:1a:ff:7e:38:be:d7:d4:58:24:c2:
                    32:d8:59:bd:88:cf:99:49:db:cf:5d:a1:50:d0:c7:
                    42:30:0b:59:f2:b8:36:ab:b7:dd:b2:9e:70:c4:0e:
                    32:a2:28:a2:8f:2b:6f:7f:16:67:19:8d:a4:d1:92:
                    ff:3a:87:76:ba:89:8c:90:22:4e:21:49:37:be:fb:
                    25:2b:85:db:a7:2b:6f:79:59:74:f9:44:12:bc:b0:
                    38:fd:b9:26:e9:7d:ee:d6:30:37:f6:aa:72:91:e8:
                    63:d1:29:17:60:3c:1e:f0:30:3e:00:a7:0a:12:a0:
                    b2:39:54:62:27:f2:5e:2d:ac:b4:c3:cb:d8:bf:de:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:63:EE:30:AE:C0:FF:99:EB:8C:41:2B:9F:9D:DA:AF:B0:03:16
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:31:a7:b8:29:a4:94:93:c8:25:7a:2b:93:2e:86:91:70:0f:
         9c:d4:c4:2f:87:77:13:b7:90:68:04:5a:d9:92:ae:8e:0d:d8:
         27:ee:6a:6b:e2:ff:cb:ac:fd:12:8a:bc:9c:96:68:22:64:43:
         89:1e:f9:eb:bd:d1:d5:61:39:32:d8:0e:f2:33:76:93:82:92:
         fe:26:fb:55:8a:91:16:7e:a4:3e:4a:5b:de:96:fd:e3:43:d2:
         1e:9f:fb:81:00:42:ed:13:cb:50:bc:2c:fd:48:c4:77:84:64:
         39:b2:ab:cb:43:95:e5:6b:b3:3a:66:2b:fb:04:dc:fa:09:5a:
         21:04:2f:ab:a3:8c:e0:c1:8a:88:1e:13:85:e0:ff:8f:8c:cf:
         12:0e:35:ec:00:8f:4d:1a:c5:d2:dc:67:d1:54:2b:af:04:94:
         b8:f9:fa:25:57:e2:be:1d:4f:10:85:4f:e5:ed:42:2d:f8:e0:
         66:ad:e1:c8:0a:84:6a:d8:c0:bf:4f:8c:10:f4:22:e1:18:e1:
         b0:d4:3b:f9:65:51:30:f5:1e:28:d4:81:99:3f:bc:48:76:73:
         36:3a:f0:ef:c5:3a:47:a5:21:19:46:dd:cc:68:03:a5:45:4f:
         77:a9:49:10:b0:a5:5d:84:09:d8:df:6e:74:19:62:b3:55:82:
         5a:b1:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:35 2025 by rpki-client