Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File:                     rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier:          TdnQtgEkpaulaIQBn4BB3GbAD6z5UuszKRAPvItH+fY=
Subject key identifier:   9B:9C:06:B6:E2:62:23:03:AC:22:46:47:5F:BC:D3:1C:1A:8D:2D:45
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019845892639856161CD27689F73463323C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number:          0B35
Signing time:             Sat 26 Jul 2025 07:01:12 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:12 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:12 +0000
Files and hashes:         1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
                          2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
                          3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
                          4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
                          5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
                          6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
                          7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
                          8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: 2TG0B+HsrObKtQEt+JHZQF3xKO2l7HCfRIwnmtCoEPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:26:39:85:61:61:cd:27:68:9f:73:46:33:23:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Jul 26 07:01:12 2025 GMT
            Not After : Jul 27 07:01:12 2025 GMT
        Subject: CN=9b9c06b6e2622303ac2246475fbcd31c1a8d2d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:a6:63:d5:d5:67:80:b5:65:3d:bc:9f:52:
                    db:08:e3:cf:49:b8:3e:5d:6e:8c:34:13:2f:a8:fb:
                    22:01:b0:7a:af:54:ec:10:9f:ef:92:16:7c:4c:8d:
                    e7:d7:c3:5e:1b:d8:ef:5a:ca:f8:a6:59:6b:be:db:
                    d3:55:19:08:68:9e:64:aa:63:51:9b:94:39:a3:aa:
                    1a:31:9b:8b:cb:a7:56:a2:00:5d:cf:69:4c:74:73:
                    83:b4:19:47:01:ab:78:a2:3b:3e:a4:fd:6b:1c:37:
                    9f:0d:b4:82:6d:a7:49:3b:1f:cd:78:56:a0:11:13:
                    d7:97:55:ae:bc:0c:e5:d5:30:61:d9:ef:1c:73:22:
                    f5:c1:9a:dd:df:30:38:16:47:9c:75:cb:19:19:b1:
                    51:26:96:1d:d8:f3:bd:9a:c6:6e:df:51:8c:20:12:
                    ba:44:b0:3e:29:88:db:2d:0b:2e:7b:00:6e:d0:b1:
                    3c:44:31:89:35:57:e8:e7:99:42:1d:11:82:7d:ad:
                    7c:66:b7:04:1d:5e:0b:38:d2:74:86:41:79:7e:7a:
                    46:53:ae:45:70:29:b3:84:e3:f1:d9:6c:a6:7b:6d:
                    d6:32:d8:49:d1:de:09:37:b0:04:20:10:0e:e4:a3:
                    2b:7a:09:c7:d1:ab:9f:41:23:86:a7:fe:e8:04:93:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:06:B6:E2:62:23:03:AC:22:46:47:5F:BC:D3:1C:1A:8D:2D:45
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:75:5d:1d:fc:ed:87:1c:fd:5c:99:4f:17:a3:15:41:2f:
         6f:b4:2f:28:ab:3d:8c:d7:0a:12:e4:05:3d:fd:83:b5:d5:dd:
         a1:64:7b:41:51:fe:62:16:dc:a7:5b:2d:fa:dd:63:36:8a:d3:
         0a:62:22:c5:74:2b:9e:2c:60:72:e8:0f:6a:69:a9:4d:0f:1a:
         f6:0f:b5:0b:66:42:18:cc:89:f1:40:a4:61:18:87:f0:9e:e4:
         c6:5c:f9:ef:81:7c:cb:c3:cf:aa:3c:dd:d0:13:70:76:30:13:
         2c:af:fc:4d:96:5a:39:99:3c:98:c1:aa:b5:99:b8:c2:be:06:
         2b:66:82:0d:03:1e:68:25:c9:2b:51:a4:9e:9c:df:d8:a1:31:
         7b:3b:95:a7:cc:3d:fe:54:db:e4:e2:f2:f8:3b:c3:82:85:11:
         ed:98:b1:35:ea:24:1f:d6:38:d4:79:ce:e5:7c:1a:a1:1c:64:
         79:2b:18:77:0f:5f:0b:93:ea:5d:db:70:b0:40:16:ac:79:8c:
         89:e8:01:16:e4:e2:0c:f7:34:06:6a:01:c6:e8:3e:9d:80:a4:
         8f:29:80:5a:82:83:6f:14:94:cc:2a:b2:59:02:06:bb:f2:0a:
         54:e8:12:3f:49:77:de:3a:a7:41:5f:9d:3e:dd:05:d9:6f:09:
         11:19:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:39 2025 by rpki-client