Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          ZpM6zl8KAoGVIFoQ+Nm5EdVAaUJl3XbIhCglg3hZZ0Y=
Subject key identifier:   2A:8A:FC:26:1D:0C:76:37:4E:7E:D7:EF:22:DD:D2:B1:B9:71:9C:73
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       01984A77CAAB52EEFE40CFF102B6C2A9F8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 06:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:21 +0000
Files and hashes:         1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
                          2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
                          3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
                          4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
                          5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: TZGPfauWoHgDVEjkkPcVc0PPHjxnPMDWmP6Mxub0TLM=)
                          6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:ca:ab:52:ee:fe:40:cf:f1:02:b6:c2:a9:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Jul 27 06:00:21 2025 GMT
            Not After : Jul 28 06:00:21 2025 GMT
        Subject: CN=2a8afc261d0c76374e7ed7ef22ddd2b1b9719c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:18:a1:ec:31:05:d1:0c:52:a9:02:4e:c4:
                    c0:5e:a5:5b:1c:ee:5b:57:a3:22:2c:fd:b9:8a:b3:
                    ec:21:2d:72:4b:35:cc:c7:38:ca:b1:db:10:e3:ef:
                    58:34:ca:81:4d:64:07:d0:d2:cc:db:57:a1:a6:4e:
                    a4:6b:59:ba:42:73:95:95:85:80:74:08:d4:90:25:
                    70:af:58:0b:c5:f2:44:d7:eb:82:96:31:18:52:81:
                    3c:b8:08:d3:01:8a:09:09:49:a2:a1:34:6c:d4:0b:
                    6c:52:54:fc:a0:ea:0e:64:8d:43:e0:86:ba:25:c4:
                    d3:da:c9:f4:e7:a1:33:8b:39:e5:8c:04:5d:aa:67:
                    9b:24:e8:1c:26:94:14:da:98:57:af:3c:c3:93:3a:
                    21:13:65:74:ac:aa:ee:6c:b7:67:be:69:e0:23:f3:
                    cd:dc:1a:f5:d6:57:0e:9d:15:23:90:d1:ec:8b:64:
                    ed:17:f5:bf:64:8c:02:b2:6e:18:9f:90:8b:93:c9:
                    ad:32:55:dd:05:07:e6:88:15:bf:91:b5:29:a9:9d:
                    f3:b6:52:77:3f:87:93:ae:be:f6:fc:3c:dd:90:ca:
                    b5:b6:25:16:34:35:f3:e2:cb:ed:e7:8b:51:19:e7:
                    8f:de:85:68:fa:45:7a:cf:11:b4:65:ad:4e:f8:1c:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:FC:26:1D:0C:76:37:4E:7E:D7:EF:22:DD:D2:B1:B9:71:9C:73
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:33:40:37:f9:03:b0:32:d9:03:0e:0b:15:d9:a3:59:03:
         44:7c:50:60:5b:bc:56:33:1a:ea:09:57:91:92:75:c0:bd:2f:
         f7:65:e6:34:f8:45:ed:31:dd:1a:31:36:c8:e1:a5:13:e7:fa:
         5f:d2:72:6f:e3:2e:e2:40:ae:ef:9a:dc:4d:ff:01:7b:23:14:
         c6:51:0e:37:6f:3d:59:a1:c0:75:b8:4e:23:30:0c:4f:36:5d:
         b7:a4:5a:58:ec:f0:fa:26:0b:54:6b:4d:8a:67:9f:93:3a:64:
         4d:6d:bf:84:ff:eb:53:0b:f3:19:fa:6f:66:c3:8b:8e:5d:1b:
         79:d3:50:4d:f5:80:a0:99:53:ae:3d:85:b3:c3:79:b6:9e:9f:
         a0:c3:75:1e:f9:2a:b1:31:d0:5c:8e:8d:6e:54:07:8e:75:29:
         97:82:de:d0:54:ba:c2:bb:ee:b5:87:13:80:c9:04:0e:ca:ea:
         71:53:17:18:6c:db:f3:7c:91:fd:f9:0c:fd:e0:b3:ee:d7:69:
         63:86:8b:10:20:16:a0:90:a4:9b:96:b5:e8:39:d9:ed:1f:b4:
         8f:f4:66:b3:8f:96:38:cf:5c:e1:9f:37:d0:93:d1:e5:5f:bd:
         ae:92:0f:1e:99:19:74:58:d4:ce:2c:8b:e8:5e:72:71:b5:4b:
         1d:41:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:55:07 2025 by rpki-client