Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File:                     rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier:          DzXAIByvlGOaXN1S2tRIKAcKCr3TtmpRxiIASngEJwQ=
Subject key identifier:   9E:51:95:9E:FC:CB:61:75:E1:96:3D:8F:58:B6:5D:49:CD:18:23:77
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer:       /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial:       019849D3456A941FBB6F8F53243BEC819D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number:          0F1F
Signing time:             Sun 27 Jul 2025 03:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:39 +0000
Files and hashes:         1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
                          2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
                          3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
                          4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
                          5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: UXe/fE529jLCqbAh4vid3oX1lUZ83HkiIDZC/fKOYGo=)
                          6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
                          7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:45:6a:94:1f:bb:6f:8f:53:24:3b:ec:81:9d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
        Validity
            Not Before: Jul 27 03:00:39 2025 GMT
            Not After : Jul 28 03:00:39 2025 GMT
        Subject: CN=9e51959efccb6175e1963d8f58b65d49cd182377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:cf:8d:2c:eb:79:18:7d:31:6c:9a:21:6d:
                    34:fc:9f:12:19:b6:00:d9:cc:3b:16:38:65:d1:83:
                    85:f9:bd:d7:2e:d1:81:31:d0:c3:3d:9c:60:c2:fc:
                    29:4b:69:b1:a6:b0:d4:d7:1a:68:97:a6:3d:3e:67:
                    00:5d:42:14:a4:a7:3e:91:c1:08:98:5d:b6:79:0c:
                    f7:10:24:16:71:37:d9:0f:59:92:69:af:13:4f:7b:
                    43:78:ea:74:6e:a9:58:02:8b:5a:fe:93:1f:32:86:
                    93:18:d1:cc:7c:2e:df:3a:68:1d:36:a4:51:da:aa:
                    c1:71:1a:e6:b5:c9:5a:ed:85:e6:bc:67:55:45:26:
                    1c:7a:d1:d0:f5:95:ae:15:29:ee:fa:bc:41:f5:80:
                    35:77:3a:12:6f:7b:15:80:33:a7:82:17:79:f7:2a:
                    57:7f:79:22:40:df:ab:09:70:ce:4e:da:51:fd:63:
                    7b:6d:c1:7e:60:9e:d7:6d:60:de:47:56:0a:d1:8d:
                    1b:24:c0:a6:21:ce:15:8b:54:f9:fd:ae:d8:82:a2:
                    88:6e:7e:d9:e1:41:22:02:e9:8a:10:c5:04:5b:d3:
                    30:f9:0e:47:70:30:a0:8a:d6:75:39:de:2c:55:d4:
                    2a:53:21:ce:5b:a0:62:75:46:62:5f:c0:81:c2:b5:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:95:9E:FC:CB:61:75:E1:96:3D:8F:58:B6:5D:49:CD:18:23:77
            X509v3 Authority Key Identifier:
                keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:48:75:f2:7e:6b:a9:8c:6a:e9:66:59:e4:10:cf:6c:17:12:
         46:3b:04:48:4f:c6:cf:bc:13:22:c0:19:b5:be:98:98:fc:c0:
         c4:f8:4f:ad:6b:1a:be:d0:02:bf:0b:d0:92:3e:97:bb:03:ba:
         c8:da:09:5a:c4:7e:b8:53:dc:7e:fb:f2:58:45:bb:d4:88:55:
         8b:3b:2c:56:e2:08:56:17:17:15:e5:fe:84:25:a3:f3:92:d4:
         73:c9:27:ff:b7:49:e3:67:04:ff:91:b4:42:08:c4:c9:c6:81:
         e1:c0:0e:65:af:cf:ac:01:91:be:86:9a:83:ec:19:b5:24:8d:
         6b:12:30:34:3c:52:49:12:e7:d2:16:4b:5d:96:e0:87:5e:da:
         b4:e1:57:83:03:55:ee:53:dd:91:fe:af:97:03:20:6b:6d:a6:
         99:57:c0:dd:b3:88:fc:ad:3c:c7:a9:8e:3f:9a:d6:19:11:f8:
         a8:02:c0:22:a8:4f:fe:88:07:56:f4:b1:a2:f0:c8:8c:10:b4:
         2c:08:95:63:b9:46:76:df:0b:24:1e:74:bc:4d:49:fb:d2:8c:
         f8:41:d7:03:52:40:f1:87:75:84:6c:2d:a2:ab:37:df:ad:84:
         cf:b1:a9:6f:17:38:b3:cb:5f:a0:54:22:c9:b5:c4:fb:d0:40:
         4e:f5:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:41 2025 by rpki-client