Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
File:                     aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json)
Hash identifier:          ZJQ9C58dSSVMVP6+gWpLUjGlco82+La29jy0SP/Wmts=
Subject key identifier:   ED:77:26:FB:66:59:80:1A:B7:73:B7:36:2D:BE:3B:75:17:EF:DD:29
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Certificate issuer:       /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial:       01984965199F99A633BD111F8B46672F50FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
Manifest number:          0941
Signing time:             Sun 27 Jul 2025 01:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:19 +0000
Files and hashes:         1: 8SXa1LGEgRchazaJtCn45wimFzI.roa (hash: aarcdMLMUD+vhP2Nt/G/Xfb4TI1KlOo20WqPIWfHmGk=)
                          2: 9h0zhhREd-POjncfc-zEp4ug01M.roa (hash: JFrWYEIaG5U63hgpJ7xXhrCvo1w1GUW7UsCloYFy5DI=)
                          3: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: 4U+Tga6JWh9ylmO/8wmyv3QO8Xtb4MvsXsnNUvCxQGk=)
                          4: hOg_cmo_1iPWo-TSIDavHMMiNf0.roa (hash: x2NoBu31Yw8pVlDgk5TVKt6dy/zU3kvxFv7RpieFwqA=)
                          5: mrLaA1eR5ZA6ZP7iWY4b8XRMWTY.roa (hash: jJecCTBKKFO9xnb082mcb8oh5M5FNk8lCFd2JS7Xlls=)
                          6: zZ03RoGozbT1HFe4mhpawTrExsc.roa (hash: lLn9Wn1De0ejD1AHiJO5yX30r5UE6GRrj/0NmZ5bxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:19:9f:99:a6:33:bd:11:1f:8b:46:67:2f:50:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
        Validity
            Not Before: Jul 27 01:00:19 2025 GMT
            Not After : Jul 28 01:00:19 2025 GMT
        Subject: CN=ed7726fb6659801ab773b7362dbe3b7517efdd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:83:d7:aa:d4:0a:d8:8c:66:31:05:8f:29:
                    b4:ae:78:f8:4f:19:16:d6:b4:47:0c:af:e9:c4:25:
                    3c:7b:67:19:e0:14:19:a5:fc:17:31:7b:c0:f7:48:
                    70:19:b6:db:83:83:17:c1:fc:da:a9:2a:2b:04:c2:
                    46:67:8e:e7:c9:3c:d6:66:6a:fa:26:f0:3e:1f:5d:
                    d3:e1:31:b9:80:89:1b:bf:18:2d:70:c8:56:e3:7c:
                    0e:9d:b5:26:93:fb:a2:95:df:26:ed:12:8d:66:0f:
                    8b:ae:19:25:c4:24:db:53:4c:ad:af:85:8b:4c:b7:
                    70:d8:a6:76:06:10:df:e4:8e:4c:5a:37:87:bd:c8:
                    d0:b4:8d:26:f1:3c:80:f6:24:9e:7a:07:1e:77:34:
                    e0:22:6e:0f:29:21:84:56:df:61:af:cc:94:8d:e1:
                    10:ca:76:8c:53:b1:25:15:91:c8:16:7e:d8:7c:2b:
                    ff:61:94:f6:89:34:fd:85:b5:a7:22:21:92:07:fb:
                    db:40:41:08:23:e3:2d:b2:a7:83:40:11:7b:19:e8:
                    7d:c1:16:56:b6:7b:bb:ef:79:0f:ea:59:8b:c6:dd:
                    84:5e:d9:27:54:9d:82:47:dc:40:62:93:54:e7:4e:
                    30:b0:f4:6b:8d:fb:48:81:b9:74:71:cc:c3:53:a2:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:77:26:FB:66:59:80:1A:B7:73:B7:36:2D:BE:3B:75:17:EF:DD:29
            X509v3 Authority Key Identifier:
                keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:d3:90:bf:f8:08:ac:50:eb:7e:bd:be:9b:79:3a:ca:1e:
         e5:6a:f6:7f:e2:e6:79:4b:4a:52:ae:7f:13:78:b4:54:35:67:
         bc:49:3e:7f:11:27:6f:5e:2f:4f:e7:c9:e7:bf:31:e8:b2:de:
         54:e1:af:fe:73:c1:e2:a8:4c:9d:1d:1d:bb:bd:c8:40:c7:d4:
         fe:57:96:de:8f:1c:f7:0b:f2:e2:1f:d4:e2:92:3e:f7:7f:fa:
         4e:21:e9:80:34:75:15:7e:82:f5:8c:fd:f6:de:b8:58:9a:34:
         a8:a9:e7:57:42:9f:de:2e:d0:12:20:75:b4:10:1a:a5:a9:c1:
         b9:33:aa:78:f4:83:bd:bf:be:85:da:14:c7:9b:33:c7:12:46:
         d2:09:90:4c:63:9c:44:d0:b5:8e:85:b4:ef:c9:8e:49:d4:22:
         15:ca:52:44:af:7c:e1:99:1c:c8:e1:d6:42:38:58:55:56:7a:
         6c:1c:8f:ab:55:85:cb:67:3f:26:ab:f4:16:eb:bb:1b:aa:c0:
         bd:f6:ce:07:8f:83:cf:b2:fc:49:8e:12:79:9f:36:e4:4d:5a:
         7b:bf:f0:68:0f:21:3d:f6:1e:50:ed:55:74:6f:ea:56:ee:f0:
         16:cf:74:ea:dd:9c:bb:15:fb:10:06:2f:d8:98:57:00:1c:b9:
         a0:ce:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:54 2025 by rpki-client