Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          wVFj6bKkgeCmD9FiaoByQDsUgquIgvEshRAUUFUJQsY=
Subject key identifier:   47:4A:9C:66:D1:53:BD:CF:36:42:8F:56:1B:4A:E1:72:87:D2:67:43
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       0198D65F4065FE274C49160E7DAF317F049B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          0F0A
Signing time:             Sat 23 Aug 2025 10:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:23 +0000
Files and hashes:         1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: lnucWxR9/zlUA2DWzH2z/p3uwftjEZex7dHuUClc4/s=)
                          2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:40:65:fe:27:4c:49:16:0e:7d:af:31:7f:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Aug 23 10:00:23 2025 GMT
            Not After : Aug 24 10:00:23 2025 GMT
        Subject: CN=474a9c66d153bdcf36428f561b4ae17287d26743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:32:4f:a5:c0:72:91:3e:1b:69:67:ad:6e:
                    11:85:0b:3a:8f:09:b2:32:87:eb:27:d6:9c:cc:b7:
                    4c:7c:4f:34:7c:7b:70:2b:bc:53:ac:70:cd:ce:f7:
                    f7:61:0a:fb:34:79:a1:e8:a9:a7:44:ca:b2:11:d8:
                    fe:7b:d6:ac:3e:a7:8d:47:af:87:89:06:be:d2:41:
                    9f:08:2a:ac:96:d3:00:8d:5e:f7:4c:1b:35:9a:de:
                    ea:7f:84:45:4a:00:5f:22:10:87:bd:6e:d4:50:9c:
                    ed:c8:f7:8e:fd:3b:31:21:64:90:20:77:81:aa:99:
                    7f:52:42:c7:aa:de:26:fe:46:6a:15:66:77:c0:a3:
                    a4:ce:6f:c1:f8:b6:a4:26:17:d2:65:20:4a:18:f3:
                    65:c6:76:6d:1b:0e:81:d1:d3:ef:49:1a:1e:39:58:
                    b4:74:df:67:3f:14:87:4f:d2:59:19:08:67:bb:77:
                    f3:e7:ce:4c:30:73:ca:17:eb:12:64:1b:f9:f3:b9:
                    aa:77:34:b9:22:d6:4f:97:f8:2c:5f:bb:c3:a7:b1:
                    46:ea:85:06:79:75:93:62:ac:6a:d2:17:fc:ea:80:
                    28:33:59:6e:41:6f:99:15:c0:7f:44:35:96:6a:f2:
                    48:3f:a6:49:f1:c6:65:6f:a5:39:7d:f4:c6:73:de:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4A:9C:66:D1:53:BD:CF:36:42:8F:56:1B:4A:E1:72:87:D2:67:43
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:6f:2f:c1:5d:91:2e:38:ef:fe:68:43:2c:f9:ca:dc:98:
         75:c9:d7:4b:21:ea:c5:75:d1:9a:c8:50:28:de:83:a4:a1:35:
         48:0b:fb:6c:fa:77:02:dd:ed:ad:f0:dc:2f:67:5c:5e:ae:b6:
         f8:1e:a4:f0:1e:35:e9:82:04:bb:f9:55:5c:27:7d:b4:52:fb:
         f6:15:1a:70:4b:ac:ce:8a:89:f3:82:fc:c1:99:2a:6e:a2:c2:
         26:94:b8:ab:00:8f:8d:d7:2e:7c:ec:c0:c9:5b:cf:03:a6:ff:
         c1:e2:91:42:e1:1a:a6:24:c8:0c:ed:c0:51:17:b5:a0:d8:e0:
         54:7c:ee:0e:06:b8:1d:b9:58:2a:44:8e:1a:5f:90:97:3e:c7:
         4e:a7:fd:5f:d1:2b:56:f5:12:a3:70:a3:a0:14:98:8c:1b:76:
         e4:cd:03:3f:2e:fc:2e:78:31:14:86:ee:ca:39:e3:3b:f1:3b:
         ab:67:01:c9:e4:fb:10:53:7c:9d:57:1a:d3:8c:40:0b:21:57:
         27:a8:64:71:53:ca:67:25:b6:a6:26:ae:05:32:c8:c9:d9:69:
         5e:cb:01:a6:f3:65:ac:8e:48:f7:6c:8d:c4:d4:f6:fe:f4:2d:
         6a:b9:3f:66:e0:b6:cf:01:04:85:d1:27:0a:a7:00:f2:d0:cd:
         3f:dc:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:09 2025 by rpki-client