Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File:                     mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier:          SI+bDwjLcKLnIVWHRFAD/DrwQOXSU3nykfIP2EHwGrI=
Subject key identifier:   E8:29:B4:6B:82:01:CB:AF:E1:47:83:78:7E:ED:75:5D:93:C9:24:12
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer:       /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial:       0198440878C93F29B6A9B84BC86EE0E36405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number:          05D9
Signing time:             Sat 26 Jul 2025 00:01:02 +0000
Manifest this update:     Sat 26 Jul 2025 00:01:02 +0000
Manifest next update:     Sun 27 Jul 2025 00:01:02 +0000
Files and hashes:         1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
                          2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: +1UuId9TdT7W7zeT9I9MYCkZPr5tJeLVbZbPd9ANWMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:08:78:c9:3f:29:b6:a9:b8:4b:c8:6e:e0:e3:64:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
        Validity
            Not Before: Jul 26 00:01:02 2025 GMT
            Not After : Jul 27 00:01:02 2025 GMT
        Subject: CN=e829b46b8201cbafe14783787eed755d93c92412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:91:ed:c5:f7:b1:f4:f5:b8:39:c9:bd:ca:
                    d5:38:8b:4e:7d:ec:45:e2:b9:74:73:18:fb:16:71:
                    14:aa:a0:37:ba:6d:7b:24:06:c9:5b:89:dd:d3:a2:
                    c7:19:b6:6d:b5:32:7f:00:6b:01:35:79:a8:2c:cc:
                    ec:f2:b7:d1:e2:2c:30:dc:cd:17:55:b7:35:07:27:
                    22:8a:6e:68:2e:96:7a:29:b3:93:49:c7:1c:b2:f5:
                    36:ce:2d:53:4e:6f:48:d2:54:c6:4c:09:72:24:aa:
                    4c:fd:94:f4:c2:82:9f:65:38:29:ef:c3:60:67:28:
                    db:71:32:80:fd:cc:31:86:1d:d9:8c:91:49:8f:0c:
                    1c:a2:0f:19:70:de:7c:83:f3:04:01:ec:00:95:98:
                    06:f4:97:a2:b6:cb:64:05:56:12:f3:ad:e8:ff:68:
                    88:69:fd:a6:68:f5:f1:d7:e0:09:71:39:6c:eb:5a:
                    ce:fe:c5:40:67:34:88:52:82:ec:3b:c7:e4:33:af:
                    cf:3c:b7:ed:6b:ff:7f:e2:7f:f7:cf:d6:a9:a3:46:
                    12:20:ed:7d:ab:4f:19:1c:f0:1c:05:31:95:36:6d:
                    01:6a:22:f6:8f:0e:d2:a1:b9:f6:c7:29:8d:b8:9c:
                    f2:10:15:b3:00:0c:fd:75:b5:fb:8d:8e:1f:6f:19:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:B4:6B:82:01:CB:AF:E1:47:83:78:7E:ED:75:5D:93:C9:24:12
            X509v3 Authority Key Identifier:
                keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:e9:e4:1a:39:9c:4c:b8:f6:92:99:25:05:86:a1:2f:8d:
         67:fd:a1:fb:7e:d2:17:00:58:b3:e9:cd:8f:1e:89:b8:ca:ab:
         86:0a:26:fb:d3:e4:84:03:10:ff:2c:be:16:37:b7:df:50:d7:
         59:60:9c:7b:1b:56:7a:df:27:de:bc:85:3f:10:26:61:4d:91:
         fc:7f:dc:45:3d:11:e7:82:b9:86:bb:e6:b3:65:ad:c6:e0:24:
         a8:a3:0d:01:5a:8a:39:d2:3c:c7:a7:63:56:c5:dc:5a:d1:28:
         5c:c8:61:27:12:22:1b:ba:90:3f:46:b3:08:76:6b:ea:3c:80:
         50:db:55:3a:a8:1c:41:bf:87:79:13:d2:96:8e:3e:8a:4e:09:
         52:03:7e:54:57:72:d3:9b:42:c9:4d:4f:95:4c:3a:80:e1:e0:
         49:07:12:87:8b:bd:b2:23:7f:65:0a:bf:cc:9a:43:4d:96:e7:
         6a:16:95:92:a7:e7:47:cc:d8:56:ac:79:d2:ff:49:de:84:b5:
         86:10:85:34:0a:d8:74:ce:31:d7:64:ba:9b:67:0f:31:70:3a:
         ba:c4:47:e2:dc:b4:78:1b:fa:40:aa:5a:28:59:71:8c:23:0e:
         0f:d9:79:5f:d4:97:71:db:30:b1:03:e0:61:ed:28:0d:65:e4:
         9a:15:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:58:59 2025 by rpki-client