Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File:                     F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier:          I+FQfk4hwcW6Ns3B9Ohu3yMySDWkD/K0V0rbeqHJj4k=
Subject key identifier:   82:12:66:0B:45:0B:B7:ED:12:E8:A5:E3:48:0D:9C:07:97:F2:7A:EB
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer:       /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial:       019847E4E23A94A0C5F44313F63A9DF1BAA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number:          120D
Signing time:             Sat 26 Jul 2025 18:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:39 +0000
Files and hashes:         1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
                          2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: EjaFd/bNM61HBMy25N1jx8jbG0Rhz9fkWAVXN75wr4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:e2:3a:94:a0:c5:f4:43:13:f6:3a:9d:f1:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
        Validity
            Not Before: Jul 26 18:00:39 2025 GMT
            Not After : Jul 27 18:00:39 2025 GMT
        Subject: CN=8212660b450bb7ed12e8a5e3480d9c0797f27aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:76:6a:0b:aa:b9:06:e0:fa:3a:5d:7b:8f:
                    7d:05:60:e1:a2:0d:57:4f:99:04:96:87:9f:af:b2:
                    b4:81:36:be:3d:01:77:c5:18:56:cc:0c:0a:68:af:
                    18:42:8e:1a:b6:42:f8:cd:54:4a:3d:ec:36:a9:3f:
                    1f:fa:66:a1:e8:a7:ce:9a:9a:b5:f9:6f:0e:b5:bd:
                    38:a2:92:ea:58:6b:e2:37:b1:3b:03:19:f1:12:83:
                    23:72:4e:3d:7b:67:7f:57:37:6a:66:71:bb:b3:1e:
                    49:71:22:3e:45:2a:41:bb:07:8d:98:0d:13:0f:00:
                    1f:a5:d0:1f:64:30:e9:c1:a0:ae:46:d0:c6:39:db:
                    97:3c:7b:6f:a9:76:cd:8f:97:85:c5:1c:6d:c1:2f:
                    8e:1d:87:98:26:65:a2:a3:e4:34:e5:36:72:64:0a:
                    b4:4c:64:66:c0:8f:79:d3:b6:80:f5:98:9a:78:ac:
                    02:71:35:15:5c:19:7e:e9:ea:0c:d8:34:7e:1e:77:
                    0c:2e:b2:1e:c9:c0:03:e7:44:e1:fb:24:73:7a:e5:
                    b5:17:f0:fa:35:29:19:d5:09:99:64:20:85:fa:de:
                    3f:ed:02:76:4b:e3:8d:27:dc:63:bc:ae:c7:4c:57:
                    16:3d:fb:36:40:e5:7f:0b:90:14:66:a0:f5:06:8f:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:66:0B:45:0B:B7:ED:12:E8:A5:E3:48:0D:9C:07:97:F2:7A:EB
            X509v3 Authority Key Identifier:
                keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:21:a4:61:ae:fb:7b:15:ea:6f:47:a8:61:8b:ea:57:5d:c9:
         9e:17:47:24:bc:7e:62:6f:c6:ab:2d:e3:67:57:51:37:22:44:
         fa:ea:16:c0:cb:6e:33:63:6c:e7:bc:51:51:e7:4c:0b:27:ac:
         88:fc:53:37:7f:f1:2c:e8:83:db:55:e2:cf:cd:02:b8:3c:02:
         e2:0b:0d:8e:58:f8:b0:47:f9:1e:ed:55:4e:bc:dd:13:05:05:
         2f:24:0f:0b:8c:9b:9f:c6:93:c6:66:52:4f:a2:a2:9a:59:bf:
         9e:a8:3a:d4:49:b2:f5:60:db:b5:91:8a:26:4b:19:53:b7:25:
         1d:4b:78:58:c6:27:ce:31:73:12:81:97:1b:39:ae:6a:fd:20:
         fd:5f:40:fe:cb:c4:32:d5:9e:4a:b4:1f:74:f5:6f:2b:2a:1d:
         80:59:57:c1:d9:f7:e5:29:5d:69:8c:c0:4a:ff:d1:06:f8:5c:
         76:66:47:77:a4:94:7b:6b:f4:3c:8d:32:57:19:72:fb:73:27:
         0b:33:f2:11:0c:57:4d:1e:98:50:ae:d5:23:ab:8f:dc:0e:f8:
         94:81:a5:43:97:72:a9:99:93:03:a6:98:65:36:e2:d2:58:06:
         2d:a4:9b:94:45:35:a6:b4:96:7e:63:71:29:b1:04:cd:b1:f0:
         63:f5:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:40:39 2025 by rpki-client