Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          sqM0szuPIPH7vMnCe6hKrGzpoFXBJzvT8xX8EmGjWKk=
Subject key identifier:   12:20:E2:08:92:68:1A:0C:65:41:63:6A:BC:34:68:77:C2:A5:3B:FE
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       01984A4124C3C817D4BAE0315623943AF155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          108E
Signing time:             Sun 27 Jul 2025 05:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:39 +0000
Files and hashes:         1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
                          2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
                          3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
                          4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: 1H1HaaLC2G9a7ZH7yNhvFgqp1c8MzqErwyXiHreunB0=)
                          5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:24:c3:c8:17:d4:ba:e0:31:56:23:94:3a:f1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Jul 27 05:00:39 2025 GMT
            Not After : Jul 28 05:00:39 2025 GMT
        Subject: CN=1220e20892681a0c6541636abc346877c2a53bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:37:78:7d:84:28:d9:b9:22:a7:8d:40:41:
                    b5:d9:a5:14:78:55:76:23:d8:57:ed:2c:db:1e:1c:
                    e2:6e:3a:a7:ab:55:8c:07:07:17:48:9b:d2:4b:c0:
                    1d:36:b8:69:51:05:d1:f1:dc:3b:6b:79:f0:e0:ab:
                    6f:04:a9:03:62:ac:b6:20:40:ab:03:83:a8:39:05:
                    76:81:da:87:69:04:fc:53:c2:c8:39:ee:c6:19:fa:
                    93:7b:de:42:84:c8:c6:2e:09:ac:9e:08:1a:11:56:
                    d5:27:ef:9d:7d:f1:e7:d6:4d:41:dd:a4:6e:a1:78:
                    93:98:fe:0e:a0:44:40:89:52:52:e6:12:76:d1:60:
                    f9:35:d1:5b:cf:ca:6f:a4:4d:6c:bc:3e:86:f4:4c:
                    b7:59:59:99:30:d7:49:6d:39:bc:90:2a:07:f6:bf:
                    d7:20:a9:df:24:86:6f:c4:f3:fd:ef:3d:c3:65:53:
                    56:a4:4f:16:cd:1a:fd:26:ef:c0:7d:fc:1e:e2:55:
                    a7:7f:9d:42:b2:c8:0d:31:a5:04:9e:58:6a:5f:7d:
                    fe:3c:10:0c:92:43:0c:f9:bc:da:d5:81:68:22:34:
                    b3:6a:32:45:7e:2f:15:f1:bd:3c:76:5d:06:8e:65:
                    8b:6a:47:81:12:74:b9:38:fc:69:25:3b:91:96:53:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:20:E2:08:92:68:1A:0C:65:41:63:6A:BC:34:68:77:C2:A5:3B:FE
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:02:1a:81:61:f5:f4:65:b7:5b:45:02:d6:63:b8:e8:ff:
         a6:08:59:4e:db:9f:f1:3e:bd:f8:e4:f7:a4:3c:07:05:02:23:
         c2:56:4f:ba:e4:56:da:ac:4c:21:54:cd:74:61:ab:00:1c:5c:
         c4:58:eb:58:bc:70:55:84:fc:f2:f3:13:4a:53:fc:4b:dc:ed:
         16:17:16:dc:66:e5:5b:26:be:8b:03:f6:d1:2f:a3:0f:86:72:
         8b:48:19:b0:3d:e3:e0:a3:50:61:d5:a0:76:a7:70:62:46:92:
         79:27:7e:9c:c3:fe:df:3d:9b:f8:7e:e6:88:95:30:d3:fe:e1:
         0e:bd:bd:f3:31:eb:01:45:52:34:b9:8b:7e:20:0b:ff:5c:ce:
         2c:ac:6d:5d:01:76:f5:89:58:03:93:f0:ab:90:e3:18:a9:ec:
         a7:1e:a0:ac:87:60:4a:78:81:f7:39:ac:ef:cd:2d:96:e9:35:
         54:52:be:1f:75:d3:af:99:90:d6:27:02:5e:a2:7c:e1:3b:91:
         c2:83:2f:e2:b5:cb:f0:3d:15:a2:76:3c:d9:bc:30:e1:77:20:
         1e:c1:69:ea:1c:b8:55:48:f3:9c:12:9f:62:7c:a2:1f:05:53:
         6c:8e:bd:64:54:51:79:a5:39:b5:5d:e7:2b:2d:fa:2b:57:58:
         53:ae:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:42:33 2025 by rpki-client