Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          22vYxjAnxpYwYWmHRory2lq0jTyyv3aAdS7m+9ru0nY=
Subject key identifier:   7E:D5:4D:2A:C8:45:79:A6:82:C7:B2:D3:27:7B:57:5B:41:1E:1E:67
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       01983E73B962A53601120DE619055BD2C83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          08A8
Signing time:             Thu 24 Jul 2025 22:00:28 +0000
Manifest this update:     Thu 24 Jul 2025 22:00:28 +0000
Manifest next update:     Fri 25 Jul 2025 22:00:28 +0000
Files and hashes:         1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=)
                          2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: vtVCf+64j1p2CJQ5GLSXCagGdWPzIvTXebvLpijCJn4=)
                          4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:73:b9:62:a5:36:01:12:0d:e6:19:05:5b:d2:c8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Jul 24 22:00:28 2025 GMT
            Not After : Jul 25 22:00:28 2025 GMT
        Subject: CN=7ed54d2ac84579a682c7b2d3277b575b411e1e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:13:f1:32:32:c2:5e:c7:d6:0d:e4:a0:7f:
                    db:bc:09:c4:b6:3b:d9:9e:bc:5c:f9:84:d4:5b:a6:
                    f9:48:3d:76:8e:7c:e6:82:d3:30:d2:e6:3c:5d:23:
                    db:e3:39:0c:89:63:74:12:62:03:74:80:fa:c2:eb:
                    88:0d:10:33:9b:ad:a7:95:d4:f4:b8:c7:15:90:4e:
                    c1:48:97:e3:f9:84:21:8c:4f:6a:13:0f:33:c0:a4:
                    c6:7b:80:af:12:27:68:cc:00:77:8b:e7:95:60:8d:
                    6b:d5:7e:4f:ea:30:e8:0b:cc:29:4e:12:d8:cc:0c:
                    1a:8f:54:ff:1b:63:98:3e:8c:a9:79:32:8b:44:5c:
                    92:04:74:52:b2:d8:32:dd:55:9d:d8:ed:b8:55:3d:
                    34:80:0d:83:02:0b:e7:6f:6b:01:33:0a:4c:d7:ec:
                    4f:6b:2e:7c:2a:15:72:a8:da:ef:56:73:c5:a9:b1:
                    3c:bb:4c:9e:ba:fa:cd:17:ff:ca:d6:05:fb:29:c3:
                    74:e4:e9:8c:94:64:72:ab:63:2c:31:f9:ba:5f:91:
                    3d:5e:eb:e1:0b:e8:e8:90:e9:dc:41:7f:9d:b0:da:
                    26:3c:db:b9:3b:50:d2:a2:1d:e2:5e:83:80:2d:80:
                    2f:f0:91:a8:bb:32:c2:0f:d6:5e:69:e7:f8:7e:67:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:4D:2A:C8:45:79:A6:82:C7:B2:D3:27:7B:57:5B:41:1E:1E:67
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:14:f0:cf:45:d4:53:85:31:1c:0c:47:14:c4:b4:1a:2e:
         ce:1c:27:f5:46:9c:27:2e:3f:a6:af:4f:37:99:d7:e0:30:e4:
         ee:c9:53:47:82:04:16:3a:5f:90:0d:8c:b5:0f:23:9a:77:6b:
         62:f6:db:bd:05:37:31:c2:f4:e6:bb:40:e2:94:c3:27:0d:f2:
         53:60:9f:2f:cc:77:e5:fe:97:28:f2:a2:81:93:19:0f:f2:f9:
         1b:89:bf:8d:8a:6d:17:0b:8d:cf:b7:4a:58:df:28:8c:de:48:
         8e:51:ee:9a:e0:c4:c7:ad:8f:f3:64:d7:fa:5c:f2:07:41:f7:
         85:85:d8:90:f2:04:86:df:e6:af:06:d5:3f:99:10:cf:17:37:
         65:84:ae:9b:85:7f:7b:8c:2c:88:88:4f:d9:15:1b:f2:c4:54:
         71:de:13:2e:57:0d:e0:bf:68:d8:78:83:0e:49:c0:fb:c1:57:
         c1:c1:fd:cd:39:1a:91:04:a2:5b:6c:7e:e7:d7:61:42:21:bf:
         68:d6:fa:b7:44:8f:94:12:51:95:c0:72:89:e3:3f:df:c1:45:
         59:73:94:35:8c:59:0f:0e:82:2c:32:cb:dc:23:9b:06:c4:8a:
         dd:83:f9:e1:91:e3:20:d3:93:b4:be:72:c2:40:63:23:84:1b:
         5e:c9:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:37:47 2025 by rpki-client