Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
File:                     eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft (raw, json)
Hash identifier:          i3Z/PQexV7O+QN+Wd6dklg/zxNKZKAJxjBUGkTRFwh8=
Subject key identifier:   F9:DB:5C:76:C7:22:98:52:AE:A6:A1:7D:96:FD:91:C7:99:A2:1B:88
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Certificate issuer:       /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial:       0198D51563A9783470F927D26994A9F46662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
Manifest number:          03A1
Signing time:             Sat 23 Aug 2025 04:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:05 +0000
Files and hashes:         1: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (hash: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=)
                          2: eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl (hash: YDhFoq05zJF9pnZDaMwKDIRDGJft9voBCKkuyI/lNo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:63:a9:78:34:70:f9:27:d2:69:94:a9:f4:66:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
        Validity
            Not Before: Aug 23 04:00:05 2025 GMT
            Not After : Aug 24 04:00:05 2025 GMT
        Subject: CN=f9db5c76c7229852aea6a17d96fd91c799a21b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:92:2a:aa:b1:4a:f0:77:9a:d8:9f:72:56:
                    45:5d:05:04:cd:e0:3f:0a:5c:93:1f:51:e6:b4:18:
                    92:05:70:12:81:94:9d:92:6e:73:00:c3:86:64:2a:
                    11:5d:6e:51:5d:45:6e:4c:37:89:8c:ad:4c:7c:30:
                    fc:46:0a:e8:f4:1e:7b:a1:56:a9:70:1f:01:21:90:
                    e9:c8:12:07:16:44:b5:fa:14:34:a7:a8:5d:e7:0e:
                    a0:7c:9f:03:57:b1:8f:f1:2e:77:e4:60:58:00:15:
                    b1:77:9b:41:d9:4f:d0:0e:94:96:2e:7a:e6:97:f8:
                    6a:f4:26:d7:19:d5:1c:64:b8:cc:f0:ba:8c:73:9a:
                    1d:b6:34:5e:55:92:d9:04:c1:94:29:5a:c6:73:68:
                    af:f5:64:8e:ef:3c:00:6f:54:5c:88:9f:cb:0f:e6:
                    a2:07:9c:12:0e:35:6d:9f:5c:2c:ed:51:ba:ca:0f:
                    b8:53:e2:61:e8:5a:60:fb:16:21:8c:da:9d:08:c8:
                    66:0e:20:54:50:46:22:fd:d7:d5:f7:1c:36:b3:9b:
                    56:10:f0:ce:e6:3e:6a:8f:45:71:55:5e:b1:72:03:
                    20:c7:42:6e:c6:d5:6e:bb:44:e8:07:f9:05:92:ac:
                    f3:27:b9:08:89:d8:83:cb:fb:2b:06:71:7d:33:57:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DB:5C:76:C7:22:98:52:AE:A6:A1:7D:96:FD:91:C7:99:A2:1B:88
            X509v3 Authority Key Identifier:
                keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:0f:a7:d8:6d:1c:44:62:6d:03:44:e4:73:bc:69:6d:a2:
         93:52:bf:24:45:9e:53:2e:17:48:5b:25:a6:a9:fa:cd:0a:dc:
         a2:fa:f1:64:9f:7a:66:93:8c:ab:31:d7:0a:dc:01:56:de:57:
         e4:70:b9:df:ec:87:38:07:2a:44:36:1d:b9:36:fe:6d:26:d9:
         ca:61:3c:e7:c8:e4:3a:49:7c:ae:f3:23:2c:4b:5b:f0:0d:cc:
         07:46:6f:fb:ba:b6:cd:19:bf:98:8b:3f:d0:6c:eb:f8:61:44:
         1b:df:88:1f:0b:0f:3f:06:27:0b:b8:93:51:23:16:f5:ed:aa:
         c2:81:6f:45:2d:c2:1f:80:c3:90:f5:be:d3:05:17:a7:a2:59:
         46:7e:5b:f7:42:ae:5c:35:f2:46:7f:da:16:ad:c1:2c:92:b9:
         1e:58:42:24:eb:f7:51:18:f9:a1:95:57:ba:03:b3:c2:be:92:
         ee:b4:14:cc:74:3d:f2:82:4b:31:c1:01:56:4c:60:d8:21:eb:
         8d:df:fd:9f:bd:f8:fd:ce:b7:06:c3:49:74:9c:e0:7f:99:1d:
         91:2f:3b:81:03:0e:16:a0:8c:dc:aa:a6:c4:6f:ea:27:24:17:
         33:05:94:aa:f8:a9:e5:4d:dc:1b:bc:00:08:2f:6f:d1:d2:ab:
         85:52:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:05 2025 by rpki-client