Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          yW/zdk/SM7HZim7mP5lJfF7r1/FOnFvI9MOYxuIT4Zk=
Subject key identifier:   0B:70:FF:E4:54:35:4B:A9:29:CA:D8:F2:A7:5D:AA:00:2C:0A:87:CE
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       019844ACDF6D5A924A434B42AB70AFFA8D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 03:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:36 +0000
Files and hashes:         1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=)
                          2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=)
                          3: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
                          4: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=)
                          5: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: REDXGGhvbr78Tf2RSjFiZtfpknBU75b53hVxB8e91eE=)
                          6: Wgp0YQwJQq4VG6uZluu1oFgmg8g.roa (hash: Pid5x2mXBM1ejdavSJH9rOxNTt6jgdN510wqmMNGw8o=)
                          7: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:df:6d:5a:92:4a:43:4b:42:ab:70:af:fa:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: Jul 26 03:00:36 2025 GMT
            Not After : Jul 27 03:00:36 2025 GMT
        Subject: CN=0b70ffe454354ba929cad8f2a75daa002c0a87ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:6f:03:ff:b0:b1:41:c8:a2:f0:1f:70:21:
                    7b:56:10:9d:b8:91:00:0b:3c:b8:0b:4f:45:c9:ee:
                    b6:06:94:d8:30:26:3e:7e:f2:55:7a:11:25:6c:0c:
                    9d:e5:b6:e2:2d:fe:b6:95:b0:cb:55:23:ec:27:77:
                    67:2b:46:67:db:2b:49:e6:0c:44:fd:ff:5e:f3:4b:
                    70:8e:82:58:e9:8d:88:f9:24:42:22:05:5f:9b:91:
                    d4:e0:c6:2e:e3:5d:2a:ca:50:4b:20:ed:6e:fe:f7:
                    83:97:a6:80:5f:f1:93:53:4c:9b:a5:ff:84:f9:a1:
                    50:80:8d:63:1c:aa:6c:38:31:d7:36:58:f8:60:94:
                    12:0a:8e:9e:68:5a:2d:3f:1b:b9:59:aa:9c:a7:b7:
                    0b:b1:ab:c0:4b:f7:f3:68:50:08:2b:0a:61:bc:bc:
                    e7:c6:85:5c:ed:07:9f:88:e3:a1:ae:9e:07:ae:f4:
                    8f:d9:be:24:71:09:fa:15:f3:13:3c:2e:d0:44:51:
                    8e:c6:e0:73:4d:62:0e:d8:05:71:96:9e:7e:ed:5b:
                    a2:b7:ca:a2:a1:ae:cb:29:9e:9f:50:47:00:13:c5:
                    31:69:79:eb:93:93:c2:a5:cd:63:52:a6:3d:e9:90:
                    55:89:40:3e:ea:c8:a2:72:c7:a3:c0:53:5d:e9:1f:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:FF:E4:54:35:4B:A9:29:CA:D8:F2:A7:5D:AA:00:2C:0A:87:CE
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:93:ab:35:c0:4b:5f:f3:ef:d1:fe:b7:bf:1a:c9:8b:7b:
         ae:2a:b6:eb:b4:21:18:b5:5e:42:16:c5:92:d3:b6:f6:c2:1b:
         77:9e:92:3c:1a:74:e9:c3:b4:d5:b0:b9:bf:67:b1:a3:f0:ba:
         62:57:fc:f8:e0:c5:47:02:9f:f4:be:23:ae:5e:de:c5:0b:f1:
         85:24:95:c1:b0:fc:bc:0a:5b:46:4f:a3:6d:20:30:84:99:44:
         3b:eb:9d:d4:ff:cf:5b:2a:2f:53:95:6d:5b:55:3c:26:79:dd:
         52:aa:fa:4d:4e:cd:60:cd:87:fd:ac:fc:b2:72:58:a8:f7:53:
         72:4b:eb:94:f2:aa:1e:83:6f:f0:5b:b2:bd:fc:e5:f0:81:ef:
         4c:1f:65:9b:7d:11:79:8e:8e:db:03:8e:f4:1b:5f:cd:a3:54:
         6f:22:a2:24:fd:f4:7e:df:ea:03:1f:2e:d0:52:6d:75:de:eb:
         db:9e:08:23:49:cf:77:f1:09:6c:d3:93:31:d6:58:2a:04:a8:
         60:2d:39:0b:a2:bb:ec:a8:a9:39:65:ab:c8:7b:96:87:e6:fe:
         85:f3:da:4d:2e:d3:bf:4e:74:2a:e4:de:85:d2:7f:de:29:37:
         08:fc:ec:70:d8:96:80:10:d9:fa:4c:69:ae:65:df:54:e4:6d:
         cc:2c:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:41:14 2025 by rpki-client