Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File:                     l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier:          139oNTU/1pJFg/ESZ1dr7AKrVGM7f1CLr1A3d9w0Qhc=
Subject key identifier:   E8:69:90:9B:B8:73:9C:C5:63:47:71:84:88:45:4C:8C:C6:FE:26:70
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer:       /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial:       0198D4A8414E662DECB21A0748A7F27974EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number:          0D2A
Signing time:             Sat 23 Aug 2025 02:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:53 +0000
Files and hashes:         1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
                          2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: y5Ww36Zs8D+OujXa31Du7cVGuCyqQ4biuPOx0Hx121E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:41:4e:66:2d:ec:b2:1a:07:48:a7:f2:79:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
        Validity
            Not Before: Aug 23 02:00:53 2025 GMT
            Not After : Aug 24 02:00:53 2025 GMT
        Subject: CN=e869909bb8739cc56347718488454c8cc6fe2670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:a4:4a:3d:e2:af:2e:05:c9:f9:1e:30:75:
                    cb:cf:75:fa:44:60:52:79:86:6f:fb:ef:fa:0c:5c:
                    d7:ec:20:9c:7f:9e:f6:4a:cd:d6:7e:1b:0d:eb:1c:
                    28:23:8e:7f:d1:f8:47:a3:aa:bc:db:40:6e:9e:06:
                    0d:d3:0a:8b:aa:6e:3e:a1:41:a8:21:92:b4:ad:9f:
                    7a:c8:55:d8:68:19:df:51:08:e6:8d:37:3c:22:b7:
                    f5:43:b3:13:2d:f9:97:0f:75:1d:32:33:85:eb:89:
                    2c:23:31:eb:9d:6b:c0:1c:66:d3:ca:e8:51:47:c8:
                    e2:45:0b:3a:39:16:23:33:dc:d1:98:83:fc:d2:57:
                    db:a2:38:6d:16:91:1f:a5:2d:33:ee:5b:ce:4b:ff:
                    7f:a0:86:cc:69:92:ee:26:43:01:5f:15:9f:bc:71:
                    e6:b6:ae:58:29:cb:d4:16:cb:38:97:be:87:a0:b2:
                    a9:89:de:78:59:49:00:f7:20:9e:84:56:cc:99:c9:
                    45:32:ef:4a:58:81:23:8c:f4:7c:c0:b6:db:00:cb:
                    38:ca:1c:4f:94:63:68:43:9e:39:f8:5f:20:7c:ee:
                    56:30:6f:e5:05:40:f9:cd:27:3f:1f:e2:e9:ab:82:
                    97:d9:de:0f:89:f5:09:2e:6d:15:09:aa:2d:7d:66:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:90:9B:B8:73:9C:C5:63:47:71:84:88:45:4C:8C:C6:FE:26:70
            X509v3 Authority Key Identifier:
                keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:46:b6:0e:e2:0e:a2:49:04:58:c2:94:26:74:1b:43:04:f4:
         e7:76:70:f5:30:a8:8e:ec:91:b4:c9:ea:b7:6e:78:68:3a:1a:
         7f:99:a0:49:f6:3e:76:69:cd:14:07:0b:ef:f9:8c:a4:1f:fb:
         84:ee:d5:0e:e7:ab:f6:89:85:1e:de:82:4e:95:70:45:3f:0f:
         cf:43:f9:59:01:30:17:2c:1c:bb:28:f7:bf:cc:bd:ed:f6:7b:
         e5:39:2a:15:63:b6:b7:8d:39:07:d2:5d:5f:9e:eb:b4:aa:21:
         ef:77:73:6e:ec:3b:47:82:93:e4:7c:94:be:15:3b:1f:b2:50:
         e0:5a:c4:b0:e5:d3:db:9f:ce:60:bc:03:4c:b1:d5:b2:00:8c:
         84:04:28:df:8e:8c:06:d2:47:f9:a5:ac:ab:d6:fa:77:1f:de:
         2e:04:33:2e:44:b4:2b:a4:15:ed:f2:22:0b:1c:dc:e1:07:f0:
         ef:01:cf:07:a0:08:13:b4:15:b5:28:42:2b:4e:1d:c3:d5:e5:
         39:6b:79:19:4b:a1:5a:0a:0a:79:bc:4a:45:ad:fc:8e:3f:d8:
         56:c0:56:69:b3:b6:52:5c:13:ea:64:f1:20:69:eb:1b:84:36:
         31:aa:2a:1c:0c:0b:1f:29:8d:e3:61:48:7a:7a:8a:47:b6:3f:
         47:d9:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:07 2025 by rpki-client