Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          GM+2ZC6ygl74++/t6or1RjXuIP7GIZ0nsLfARABZnQI=
Subject key identifier:   79:66:85:12:7B:31:51:7D:D3:96:4F:1F:7B:E5:90:28:3C:EB:CC:0C
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       0198319448E210C48C2AA63ED26E2A8F30BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          15F5
Signing time:             Tue 22 Jul 2025 10:00:58 +0000
Manifest this update:     Tue 22 Jul 2025 10:00:58 +0000
Manifest next update:     Wed 23 Jul 2025 10:00:58 +0000
Files and hashes:         1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
                          2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
                          3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
                          4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: PI47wHwMZeVk04L3T5RcSr7WKz+MKRYF1FuTBh1jfLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:31:94:48:e2:10:c4:8c:2a:a6:3e:d2:6e:2a:8f:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jul 22 10:00:58 2025 GMT
            Not After : Jul 23 10:00:58 2025 GMT
        Subject: CN=796685127b31517dd3964f1f7be590283cebcc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:54:a7:0a:d9:b5:33:10:9e:f6:a4:f7:1b:0c:
                    43:76:55:24:6e:a0:e0:8b:f9:36:65:b0:59:13:60:
                    bd:dd:20:b8:89:73:92:3e:a6:63:b4:73:73:7a:53:
                    ba:f5:d3:97:a9:e5:3a:10:e3:9c:49:c1:b9:0c:d4:
                    22:31:de:99:b3:ec:5e:a7:3e:f5:27:99:52:c9:a4:
                    3b:ef:4d:bd:d5:ad:c5:90:c1:d9:b3:3e:17:eb:70:
                    d1:ca:a4:a7:ff:ef:25:24:c0:a3:a1:a2:65:a1:2f:
                    f1:a2:de:c5:a9:38:77:b1:82:63:b3:08:ce:e9:6c:
                    cb:6e:dd:8e:96:59:f8:c7:df:ea:52:31:43:01:2f:
                    e3:14:e3:02:6c:b9:d0:87:74:25:61:d1:2f:bd:14:
                    05:19:13:1a:1a:50:e3:89:b2:57:8c:3a:2b:5d:be:
                    a4:c4:b9:84:81:ad:8f:5a:da:0f:84:15:04:a9:b2:
                    95:56:fc:9f:00:fc:5a:07:12:4f:45:d0:b3:1a:ee:
                    d9:5e:4d:a3:77:bc:d9:e9:8e:ee:2d:10:8d:1d:63:
                    f9:8f:79:1b:80:98:4c:25:25:df:7e:f4:fd:df:d5:
                    c3:a3:b2:e6:9c:42:fb:92:40:d0:a3:de:da:b6:aa:
                    73:25:77:19:60:b5:30:98:3e:db:e2:a7:4a:6b:3f:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:85:12:7B:31:51:7D:D3:96:4F:1F:7B:E5:90:28:3C:EB:CC:0C
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:f5:2c:48:62:d2:cb:2e:8c:1d:e6:5c:42:10:bc:1a:fb:
         dc:65:74:38:5c:48:01:6a:91:49:e6:60:82:d1:e1:b4:63:48:
         ea:af:45:ab:4e:d3:c1:62:00:4a:27:cd:eb:07:53:23:0b:24:
         5d:76:5c:6f:d1:8b:cd:f0:d9:01:62:91:db:d5:63:a4:42:52:
         52:ed:73:13:04:69:7a:98:5b:b5:72:e1:1c:99:b2:14:76:7f:
         c9:39:54:1d:93:3c:71:b5:a7:22:27:00:37:52:26:eb:f0:c9:
         30:1d:d6:46:29:b8:d9:e6:fc:b2:98:19:b1:85:7f:75:63:01:
         49:68:50:5d:18:0f:ef:82:27:b9:85:74:22:30:31:0d:f9:fd:
         c8:a5:11:b2:6d:70:b7:1b:e5:5d:df:3d:63:16:d7:e4:08:32:
         92:ee:3e:1d:b1:29:57:1f:03:b6:1b:07:49:3e:02:13:d5:2b:
         c2:6f:d1:81:af:6f:5c:97:d7:92:bf:4b:90:d0:93:ad:ca:fc:
         82:63:f5:2b:1a:a7:5d:aa:ba:ab:7f:6a:33:06:c7:b3:ec:59:
         b4:c1:67:47:9f:fb:ab:22:28:f5:f0:06:d4:08:65:31:22:21:
         db:85:68:7d:cf:00:9f:cf:eb:e0:6f:eb:2d:e6:80:7b:b8:52:
         fe:92:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:29:52 2025 by rpki-client