Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          ZcM6eTRjDi7Ww5+utwc6lCtNEL3Zw5Q45z77U51E2/o=
Subject key identifier:   50:63:C4:AD:15:62:4B:25:EE:AF:6C:48:E2:57:8E:BF:87:8D:D8:D2
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       0198D54E8421B3EB872C241F1505AC09074C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 05:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:29 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: Yv9QhrG9vPqwA+G6HreWVRIGwD+4Rq70RVGOnxWmInU=)
                          2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:84:21:b3:eb:87:2c:24:1f:15:05:ac:09:07:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Aug 23 05:02:29 2025 GMT
            Not After : Aug 24 05:02:29 2025 GMT
        Subject: CN=5063c4ad15624b25eeaf6c48e2578ebf878dd8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:54:63:33:29:fa:8d:57:e1:66:0d:43:37:
                    2c:af:f9:5d:a7:fc:73:63:19:2c:f5:06:58:56:5a:
                    99:2b:31:69:fd:b2:1d:61:03:05:8b:49:5f:fc:85:
                    66:50:9c:39:82:3c:89:cc:3b:85:49:9e:48:5d:37:
                    2e:d2:90:55:93:b4:6b:11:d6:85:80:79:71:a1:38:
                    61:54:00:60:f9:75:14:4b:58:00:96:7e:86:34:76:
                    08:37:6f:dd:04:7a:91:f0:5f:63:a4:96:61:bf:11:
                    f6:af:a4:f6:fc:60:63:36:29:fb:44:94:47:ab:b5:
                    71:35:11:86:eb:38:ba:5e:81:72:2a:17:d8:59:99:
                    34:40:e9:84:a7:8e:37:d0:cb:7b:9c:8f:a7:d2:0a:
                    81:20:9e:52:da:66:39:12:83:35:f6:d8:c3:64:91:
                    ff:a4:30:fa:2d:a3:30:f8:38:f2:53:5b:a0:5b:d6:
                    0a:83:fb:54:0c:3c:4b:41:7c:e5:3e:11:36:3a:df:
                    0d:fa:91:f0:cc:8e:fd:1a:d5:96:d6:a8:8f:28:0c:
                    57:bb:85:b0:3f:40:63:ac:34:46:69:dc:6a:0f:2b:
                    d7:2d:8c:ed:5c:59:47:02:a2:6b:35:60:84:ce:60:
                    f3:e4:f9:b9:06:a9:b1:e6:d2:ee:b4:45:e0:82:24:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:63:C4:AD:15:62:4B:25:EE:AF:6C:48:E2:57:8E:BF:87:8D:D8:D2
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:85:d6:1c:7f:50:6d:60:4b:81:b5:22:64:82:fd:1d:f6:
         86:82:cf:72:19:28:89:7f:75:08:54:04:0d:54:da:44:b9:89:
         ae:f2:ce:d0:66:ea:06:ab:de:9a:df:8e:86:cd:ab:4b:dc:65:
         33:4f:ca:4d:db:91:13:e3:2b:1e:d1:fc:4f:3e:66:d1:f2:76:
         04:92:dc:f4:12:d4:d8:12:28:7b:75:b1:d9:9a:b9:d7:00:c5:
         11:e6:91:3b:c5:30:b8:a6:6d:22:fd:1d:6e:5d:81:1d:7f:bb:
         06:35:93:7d:5e:bb:0f:72:2f:9f:97:56:b0:1f:53:c4:a3:f2:
         06:69:6f:ce:56:f4:32:5b:63:f7:7a:e0:55:71:b5:aa:c3:7d:
         89:81:a7:3f:31:df:a0:5d:48:c7:d9:47:fd:67:d2:37:90:8c:
         6a:16:a6:f1:08:b4:62:2e:9a:c9:23:7b:10:ec:0d:62:af:0b:
         fd:ad:bb:09:62:02:0b:b9:ff:27:c0:1e:09:de:d1:39:fa:83:
         18:c2:a3:66:26:b8:d8:27:00:e8:73:2e:cb:32:ff:94:9e:d3:
         65:b4:cf:42:56:73:0a:a0:f0:26:b1:5b:ce:8b:15:47:03:87:
         40:24:c4:a1:56:ba:75:f1:3f:a9:5d:62:6c:cc:bd:42:bd:57:
         c6:f9:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client