Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File:                     MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier:          L8UVHJNhAqRCTncTjfysuT3NUmsPyZ6W5lgd29SM49g=
Subject key identifier:   94:5B:25:8C:11:9C:37:BF:D3:11:68:4E:2A:13:7F:E0:69:B8:F8:67
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer:       /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial:       0198D54DD3095D1F8767C7DAED7E070578A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number:          0CED
Signing time:             Sat 23 Aug 2025 05:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:43 +0000
Files and hashes:         1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
                          2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: fwkUMKjZB3yBfdwAPAZCnSDoTMB3HSgy7CyjBaYcXig=)
                          3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
                          4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d3:09:5d:1f:87:67:c7:da:ed:7e:07:05:78:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
        Validity
            Not Before: Aug 23 05:01:43 2025 GMT
            Not After : Aug 24 05:01:43 2025 GMT
        Subject: CN=945b258c119c37bfd311684e2a137fe069b8f867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:b9:13:e9:09:1f:8c:1f:02:bf:b6:28:a4:
                    ac:75:0f:6a:0b:89:e7:a9:ad:a5:a8:21:a8:24:bc:
                    8f:3a:57:30:06:1c:dd:d7:62:ab:f6:30:ff:34:66:
                    4f:92:34:0e:1d:c5:00:96:0b:17:ee:56:32:fd:ac:
                    ee:e5:70:17:06:46:75:dd:e8:d2:83:66:6e:0b:bd:
                    76:b3:b1:02:25:d8:25:e6:86:21:59:9a:2b:62:5d:
                    13:a3:b1:b5:b4:9c:c4:4f:77:5c:2e:e9:f2:27:9e:
                    fa:ef:c9:82:b0:ff:38:bc:98:27:86:be:59:fb:a5:
                    d5:33:0c:52:4d:7e:2c:68:be:b3:95:b4:e9:e6:5b:
                    6d:e9:1c:6e:95:bd:2d:69:93:41:ac:e7:42:be:db:
                    d7:cd:20:33:18:21:a2:d0:f5:4c:bd:a3:19:73:06:
                    95:99:b3:22:aa:85:44:83:fa:57:b4:ef:bf:02:a4:
                    d4:32:27:3e:52:8f:ff:2b:14:70:9f:54:37:95:17:
                    aa:62:2d:72:35:1b:21:d6:9a:42:f6:18:e3:af:c6:
                    6a:f3:f0:11:2a:6b:a8:47:9f:e1:6d:1f:58:1f:dc:
                    46:2c:f1:1f:42:83:80:0a:cf:20:bf:85:c8:bc:2f:
                    33:38:03:82:fe:0b:d2:c3:ef:c7:89:80:19:97:62:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5B:25:8C:11:9C:37:BF:D3:11:68:4E:2A:13:7F:E0:69:B8:F8:67
            X509v3 Authority Key Identifier:
                keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1e:ea:70:1c:b4:cb:a8:65:bc:6f:58:68:8d:0d:49:87:a7:
         4a:37:c1:9e:c2:9c:c4:de:1c:a1:53:f2:26:c4:50:3e:22:3e:
         07:d3:92:94:27:9c:38:1a:c9:21:4a:68:79:56:68:57:9d:15:
         7d:5d:f1:cb:89:86:4b:77:2d:2b:43:24:f5:a4:58:d9:c5:8c:
         28:56:fb:eb:96:1f:a0:39:60:ec:5a:f8:5d:31:5f:2f:03:48:
         c4:8e:cd:83:4f:96:fa:b2:de:99:4d:b0:b8:04:66:e2:d2:bc:
         cf:fa:cf:f1:5a:2c:fe:c6:ea:19:cf:77:53:02:f7:c9:b2:80:
         1e:54:a8:e1:67:b8:88:1f:f4:90:f5:69:0a:93:b0:e2:ab:15:
         ae:4a:cb:ac:74:89:a9:70:f5:e4:80:22:28:49:d7:af:6b:fb:
         ea:bd:0d:44:58:77:87:60:cf:e8:b5:ed:e5:6d:e3:81:80:e2:
         7e:a9:7f:d5:43:0c:37:b4:63:ca:00:09:38:19:a1:c9:13:5f:
         e5:48:9b:d8:9e:6c:e1:08:74:e2:00:87:a8:2a:89:59:db:b5:
         78:b8:6d:1b:cc:ad:e3:e2:17:7e:5a:b0:7a:b0:20:16:a0:e5:
         63:5e:f8:a4:b5:d6:ca:c1:8b:47:0f:63:a8:05:d6:2d:f5:fa:
         d8:76:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:22 2025 by rpki-client