Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File:                     s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier:          /ZS4rKiaxCtRvXtJc4LcZESS0+3sOZ/VfiAlPnCqBpo=
Subject key identifier:   8C:15:83:A3:BA:27:C4:7A:C5:7D:3F:E1:53:36:52:FC:A4:30:04:69
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer:       /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial:       0198530D59E282179D529CD24C2841BC3A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number:          12F6
Signing time:             Mon 28 Jul 2025 22:00:40 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:40 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:40 +0000
Files and hashes:         1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
                          2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
                          3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
                          4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
                          5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
                          6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
                          7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: yXHhDHcMGlPCNhd/Jr5g9fAQ4AdydydxZ0ZziVnwXps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:59:e2:82:17:9d:52:9c:d2:4c:28:41:bc:3a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
        Validity
            Not Before: Jul 28 22:00:40 2025 GMT
            Not After : Jul 29 22:00:40 2025 GMT
        Subject: CN=8c1583a3ba27c47ac57d3fe1533652fca4300469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:8e:c9:38:6d:93:f0:d3:00:fc:05:c8:ea:
                    23:a2:67:dc:65:29:62:97:2e:f6:ba:1b:5c:da:21:
                    24:87:54:67:2b:23:ca:d6:21:9f:c0:07:0e:c6:34:
                    31:b7:42:c5:ae:3f:76:19:46:ce:5e:2b:40:8a:d5:
                    18:8c:0f:42:49:2f:4b:94:70:59:30:d4:22:e6:19:
                    d7:ed:08:9e:e7:6f:2f:72:1d:c0:ce:7e:dd:27:f9:
                    ff:f4:95:79:c5:09:bc:9c:0c:85:91:d8:7c:fb:64:
                    ba:3b:50:ae:fc:e8:c2:b1:05:f1:e0:20:a7:24:f2:
                    5a:8c:4f:f1:78:13:7f:54:8b:62:c6:56:20:e0:a1:
                    4a:6e:dc:14:dd:69:31:b4:a3:c6:96:98:61:35:d8:
                    97:76:f3:6c:04:60:88:23:55:0d:ad:6f:f4:12:85:
                    37:10:5f:84:48:13:49:d9:71:41:f1:b0:0a:d4:f2:
                    b3:02:06:a6:41:d0:24:af:29:6f:26:63:28:bf:1c:
                    a3:12:dd:83:e5:30:ea:38:d1:30:f1:a8:34:fd:fc:
                    d3:30:4d:da:12:c2:57:63:3d:bb:33:af:76:f7:61:
                    65:2d:0e:0a:fa:97:1c:a5:d3:e6:00:d5:00:7b:f4:
                    84:b1:4d:48:83:e0:f1:2e:61:61:c5:6f:ae:f9:d3:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:83:A3:BA:27:C4:7A:C5:7D:3F:E1:53:36:52:FC:A4:30:04:69
            X509v3 Authority Key Identifier:
                keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:76:3b:f8:fa:5e:fb:e1:36:1b:17:ad:60:57:49:10:bd:24:
         e4:6a:e8:b0:3e:83:f7:3d:ae:eb:0d:0c:4d:95:fe:64:12:3d:
         8c:93:08:87:f5:e4:6e:ae:d6:06:0e:40:d3:6a:0c:4e:69:0b:
         0c:e0:8f:d4:cd:30:c8:6f:19:36:fc:04:64:b6:19:1c:ea:5f:
         12:9a:6d:01:f7:df:4d:3f:80:b6:e6:6e:ac:ba:f7:76:ba:dd:
         8b:e2:db:ea:fe:74:ae:0a:ec:a3:1a:34:25:a2:a5:72:d6:ef:
         c9:4f:6e:51:5c:b1:3e:92:df:9f:fa:c2:0c:26:23:37:6d:4d:
         cd:92:81:a2:19:89:4b:6d:61:5d:d5:bb:27:3d:80:37:a8:c3:
         f2:54:a8:b4:6f:e1:e5:1f:db:82:88:4b:ae:4d:f4:21:81:a3:
         5e:4a:83:79:2f:7a:b0:ca:33:2a:f3:b5:56:54:a8:87:21:48:
         bc:25:6b:37:41:3a:8b:54:05:2b:85:6c:c3:c6:91:08:94:00:
         78:ee:83:17:dd:84:5f:96:f0:4d:98:f0:5c:db:d7:3a:19:a9:
         9d:1d:e4:8e:2b:22:b4:4f:e6:2c:9d:b4:1a:78:ac:12:5b:37:
         bd:74:82:8e:74:ca:6d:79:f4:2f:25:3c:c9:bd:8a:06:9c:7b:
         cc:90:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:20:38 2025 by rpki-client