Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File:                     bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier:          EUt+uJPqwWkn+1pJl0vgPfRGHF+JhfSvBtoRuM4PxoQ=
Subject key identifier:   96:79:54:05:4E:05:22:FB:FC:A2:13:6E:7E:E1:70:2C:AB:A8:67:82
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer:       /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial:       01983495308A7F5C098DD2E92FA4527433BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number:          08FD
Signing time:             Wed 23 Jul 2025 00:00:49 +0000
Manifest this update:     Wed 23 Jul 2025 00:00:49 +0000
Manifest next update:     Thu 24 Jul 2025 00:00:49 +0000
Files and hashes:         1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=)
                          2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=)
                          3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=)
                          4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=)
                          5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=)
                          6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=)
                          7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=)
                          8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=)
                          9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=)
                          10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=)
                          11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: jiRNvw74aeEYe6pfkZJShHwJ26o+caH9R6vHtITeP00=)
                          12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=)
                          13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=)
                          14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=)
                          15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=)
                          16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=)
                          17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:95:30:8a:7f:5c:09:8d:d2:e9:2f:a4:52:74:33:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
        Validity
            Not Before: Jul 23 00:00:49 2025 GMT
            Not After : Jul 24 00:00:49 2025 GMT
        Subject: CN=967954054e0522fbfca2136e7ee1702caba86782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:e0:71:a1:c4:90:b4:00:55:83:a6:2e:55:
                    81:22:0d:5d:51:69:72:8e:82:d3:ac:a7:d9:fe:fe:
                    9c:a4:28:13:30:49:c9:46:36:8b:25:25:87:26:a3:
                    10:7a:50:01:a9:94:e0:f2:1f:56:74:16:87:b0:8a:
                    99:e6:dd:22:0b:f4:24:0c:ac:d2:9d:6e:36:ee:de:
                    0c:5a:a6:86:fd:a3:97:84:82:88:07:d7:e1:40:50:
                    9b:be:6c:6c:6b:25:8c:b7:d1:15:cc:ad:ce:ef:6f:
                    d6:94:43:74:b1:2b:b4:d6:c6:86:d4:00:63:35:b5:
                    71:5f:7c:e4:a8:a1:9e:77:0b:26:ea:87:c6:da:a6:
                    d6:01:cb:4c:5a:0e:8e:c2:7a:a3:e9:ea:23:ad:43:
                    bc:92:f8:bb:78:67:4b:1a:fe:81:20:25:26:34:d4:
                    ef:e5:5f:d6:e6:96:3a:39:98:63:0f:ae:24:51:a8:
                    6d:f6:76:eb:16:3b:97:00:70:11:ed:96:e6:b5:82:
                    33:d9:eb:f3:d7:0d:ef:a5:a1:9f:12:2f:2e:b7:cc:
                    36:6e:4f:6d:f7:7a:6a:08:78:d4:57:45:4f:c1:36:
                    7d:21:af:4f:6b:da:be:09:92:e8:8e:d1:d4:5f:96:
                    f7:11:ba:46:22:c0:71:27:90:ae:92:a1:de:39:ed:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:54:05:4E:05:22:FB:FC:A2:13:6E:7E:E1:70:2C:AB:A8:67:82
            X509v3 Authority Key Identifier:
                keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:f7:0a:c6:d4:78:58:1f:51:4b:6c:82:8a:a2:61:29:c2:
         88:c0:67:23:1c:a8:80:bd:a0:7f:0d:df:83:24:ba:96:3a:98:
         98:23:eb:9d:e4:05:f6:3e:52:25:31:92:60:32:95:2c:4d:75:
         32:23:03:5c:ce:e9:ed:5d:87:84:39:0d:9c:2c:28:d6:25:ad:
         7b:49:f6:88:6f:4a:39:af:94:42:84:a8:a6:26:1a:b1:ed:ef:
         48:7d:4e:41:47:e6:78:05:e5:d5:30:81:72:c3:8b:e7:44:63:
         59:68:74:a0:6e:38:60:5f:19:96:56:ef:33:9c:ed:e9:b7:8e:
         7d:3e:0f:b7:0b:cf:0c:b1:be:6d:01:06:90:ce:98:69:04:39:
         b1:94:39:2f:ea:a7:7b:4e:33:9b:7a:d3:17:62:88:26:a9:8b:
         f1:b8:95:04:c5:8a:68:6e:f1:2d:64:c8:9d:a2:af:92:67:58:
         da:56:b2:24:0c:86:73:8b:a6:9d:6e:1a:2f:1b:23:e5:a8:a9:
         b1:f1:ff:59:83:fc:41:3a:6d:02:09:96:ff:8d:20:63:85:5f:
         26:18:02:9b:b3:2e:18:2c:ed:8f:dc:bd:ab:a6:14:7d:e1:a9:
         4f:af:ab:ef:7e:22:9e:a3:9a:16:b7:d7:2a:09:b3:46:64:08:
         3f:44:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:55 2025 by rpki-client