Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          Y2m0Km4erySfHIYJm4ZGrz5SFYilB11egDqhYU+yHn0=
Subject key identifier:   AE:33:AA:52:49:CD:95:FC:29:25:EA:27:D0:8B:6C:79:FD:42:60:F8
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       01983E740700C9516E1F863DC5B55483EDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1619
Signing time:             Thu 24 Jul 2025 22:00:47 +0000
Manifest this update:     Thu 24 Jul 2025 22:00:47 +0000
Manifest next update:     Fri 25 Jul 2025 22:00:47 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: iYwqNgMLibBclNz6v5CbsZEnbvS/q0QSTM6B0+Rp20s=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:74:07:00:c9:51:6e:1f:86:3d:c5:b5:54:83:ed:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jul 24 22:00:47 2025 GMT
            Not After : Jul 25 22:00:47 2025 GMT
        Subject: CN=ae33aa5249cd95fc2925ea27d08b6c79fd4260f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:75:38:84:5f:93:48:21:ef:01:71:c7:7a:
                    09:73:53:29:76:57:74:57:17:29:a5:18:9e:4c:20:
                    96:21:f0:65:09:e4:09:80:9a:c3:c7:eb:3e:72:2e:
                    6b:47:29:d5:f8:da:1b:d4:ba:b5:62:82:53:32:ab:
                    25:fb:c2:61:4a:1d:31:00:e9:6e:9a:c6:7d:a3:da:
                    de:09:03:52:8b:fc:66:f1:88:34:d5:94:69:fb:59:
                    63:04:a0:c8:70:4a:b0:f3:55:dc:f6:35:0f:e7:c6:
                    8c:4a:63:13:92:ab:78:49:9a:f6:8e:22:d5:28:fb:
                    6e:23:9d:45:62:25:60:a8:27:49:8a:12:bc:b7:04:
                    db:c6:91:35:38:aa:42:57:79:15:82:b5:b2:e5:ee:
                    64:1c:32:d6:f7:ff:f1:bd:77:4b:46:1e:bc:35:ec:
                    a1:43:79:b7:ae:d5:47:fa:cd:54:97:b3:c6:51:52:
                    ae:cb:d9:f0:9d:81:32:1f:84:00:3f:9d:8d:5e:51:
                    f9:2b:59:77:e8:3f:fc:b6:6f:c8:23:42:b1:61:2d:
                    1a:db:14:fe:c3:4b:e9:c5:a7:71:10:78:76:b8:b6:
                    8c:58:09:a9:13:e9:47:27:e6:19:0f:94:a3:06:6b:
                    9b:02:b0:ee:66:e7:bd:da:9d:18:d8:9e:1a:47:47:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:AA:52:49:CD:95:FC:29:25:EA:27:D0:8B:6C:79:FD:42:60:F8
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:80:b1:2c:9d:43:e8:37:37:a9:41:d0:fc:ab:9c:8d:f8:5a:
         95:1c:79:e2:de:9f:82:90:a6:6b:1e:28:43:79:f8:f1:cb:3b:
         32:fd:47:5b:a2:ed:b2:3f:aa:77:fc:11:d9:30:5e:a2:e0:7d:
         fb:13:45:db:51:9a:29:66:56:5e:50:50:4f:13:ea:38:57:db:
         bd:cb:40:8d:b4:79:5c:43:b2:d2:ad:87:4f:02:f9:4b:1f:6c:
         53:c6:14:98:3c:c0:7c:76:38:a7:2a:69:30:7a:f2:65:36:8e:
         d1:a6:e6:a4:fa:0d:07:73:14:d5:c7:a0:7c:44:9a:92:a1:1a:
         7c:bf:09:e8:47:4e:af:6a:54:29:c3:6b:55:84:fb:c0:d4:e5:
         01:e9:4e:62:2a:50:87:4c:ca:85:6f:9e:07:97:f4:eb:80:44:
         6b:e1:20:91:3d:c4:a0:39:93:90:a1:4c:e6:30:6f:0a:f2:fc:
         c9:6b:7b:0c:0a:92:21:fc:da:19:d6:88:8b:a4:24:e7:f2:ef:
         d0:cc:68:4b:d2:00:b4:fb:96:be:7c:88:69:67:52:07:33:49:
         f5:1e:22:81:47:86:30:c7:f9:d5:06:4d:75:73:2f:e8:4a:67:
         a3:9b:63:4a:a1:7c:6c:d7:14:d8:63:79:72:68:a1:e8:89:bf:
         53:2e:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:41:05 2025 by rpki-client