Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File:                     SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier:          bDybOzvdxQTR7lkzZXnVIZ60vkbATGbOxpE8op2RMb0=
Subject key identifier:   AD:0C:7F:EB:50:C0:CC:C2:D5:D3:AD:30:A9:2C:0B:7B:39:7C:44:74
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer:       /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial:       019848897BDF32473F2F2C5673553F122A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number:          02BA
Signing time:             Sat 26 Jul 2025 21:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:26 +0000
Files and hashes:         1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
                          2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: VB1s1tY+UIQWgr5QOhU/P7zpkw7Mp89vtiW40C78/9I=)
                          3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:7b:df:32:47:3f:2f:2c:56:73:55:3f:12:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
        Validity
            Not Before: Jul 26 21:00:26 2025 GMT
            Not After : Jul 27 21:00:26 2025 GMT
        Subject: CN=ad0c7feb50c0ccc2d5d3ad30a92c0b7b397c4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:82:35:e3:a1:d6:82:a5:62:8a:49:a6:0f:
                    20:ba:79:82:66:6a:03:83:55:61:17:88:1d:08:3a:
                    cb:a0:06:b8:61:f2:15:c4:90:5e:7f:55:60:6a:27:
                    24:cd:b1:cc:21:75:2a:da:00:05:0f:8c:13:14:b3:
                    90:59:43:b8:f3:bc:ff:f8:f6:0e:ce:f8:35:64:d5:
                    cd:35:31:a0:f6:b2:66:49:f7:ce:ba:16:45:ec:fb:
                    65:eb:4b:a4:c4:b7:68:76:e1:2c:2f:c7:34:af:e0:
                    5f:25:62:21:82:46:37:68:19:cf:be:be:56:ad:88:
                    9d:cb:fc:c9:83:33:b4:00:d4:87:26:53:1c:b5:e7:
                    8b:f9:17:57:4f:1c:4b:7b:c9:93:2d:0d:22:c4:c4:
                    10:35:c2:e3:9e:bb:73:2f:c8:3d:09:0f:74:f3:00:
                    1f:f8:16:99:7c:66:1c:bc:d8:e2:1b:18:b6:05:95:
                    0d:9a:a2:0f:e9:85:77:16:eb:96:ec:bd:70:cf:36:
                    c6:87:8d:bb:8a:6d:ee:ec:b5:a5:5c:ff:09:29:a8:
                    04:d2:dc:f0:3f:63:cf:cf:c4:50:4b:f8:f2:d9:8d:
                    9e:03:e7:74:41:35:8b:b9:8e:d2:f4:4a:61:34:a1:
                    ae:d1:83:da:ad:e2:e1:dc:f3:0d:2d:36:10:59:08:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:7F:EB:50:C0:CC:C2:D5:D3:AD:30:A9:2C:0B:7B:39:7C:44:74
            X509v3 Authority Key Identifier:
                keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:a6:76:d5:45:6f:97:01:8f:52:b3:03:ae:f9:41:74:74:
         b7:dc:8d:69:1a:7d:5f:e5:dd:43:4c:d4:1b:1f:c9:37:c7:4e:
         67:dc:6f:09:17:7c:9f:d0:d4:de:43:06:df:81:a4:d1:4c:ab:
         97:ef:4e:37:8e:4c:44:ff:41:1e:0e:f5:46:0f:d9:11:21:2a:
         3f:63:d3:2b:5a:f8:ed:7a:0c:5d:13:d0:67:61:66:4e:5f:8d:
         34:54:78:90:b0:31:ec:2e:96:2e:ce:48:7f:72:3e:ce:05:56:
         50:a3:7f:46:cf:0c:19:a7:6b:fd:70:c3:2c:5e:4c:1c:fc:24:
         93:e4:c0:63:73:b7:a4:d6:c4:18:85:30:d5:df:fd:c5:e2:a2:
         84:1d:e9:aa:2c:df:90:bb:d3:67:7d:7a:e6:9f:50:af:2f:14:
         a9:50:eb:e0:8d:82:b7:f5:b7:ca:77:59:5c:23:46:05:58:1d:
         e6:80:bd:6b:d7:c2:41:03:e5:4d:c4:dd:08:bd:2a:60:41:07:
         e4:df:fb:57:7d:87:e7:59:48:2d:09:fc:9c:d1:c0:8d:e4:03:
         c6:fa:ff:e0:c7:cc:e7:8e:81:71:12:b1:f0:dd:4f:30:93:d0:
         f0:de:f2:29:1e:0d:45:c7:2a:59:a9:15:a0:a3:ee:86:fb:5b:
         91:e9:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:00:18 2025 by rpki-client