Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          9BZAkY6Mxc5kNGVBrvnARDsPb6EutHj3gaucwIgiNHU=
Subject key identifier:   9B:AA:1A:DC:11:EF:B9:BC:1D:E3:82:26:C0:88:B7:87:B2:BB:5B:4A
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       01984BC198A1DDC8CA6A6345CDF334062C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          0372
Signing time:             Sun 27 Jul 2025 12:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:35 +0000
Files and hashes:         1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: rON8gKKPd4ENSmNq7LirND24XPnPP4C3/FA4C104fZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:98:a1:dd:c8:ca:6a:63:45:cd:f3:34:06:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Jul 27 12:00:35 2025 GMT
            Not After : Jul 28 12:00:35 2025 GMT
        Subject: CN=9baa1adc11efb9bc1de38226c088b787b2bb5b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:7e:6c:58:f7:8c:49:00:a6:4b:c0:6d:fa:
                    b0:98:b6:3f:11:70:4c:ba:e7:b7:15:ce:71:99:f1:
                    01:c8:5f:07:43:c6:d5:28:fa:81:d0:86:22:a6:60:
                    bf:7e:0b:eb:24:94:57:58:af:ac:01:38:15:24:b7:
                    ec:5b:a4:f9:65:1f:6f:60:45:59:f2:30:a5:5a:2d:
                    0a:94:c5:51:25:83:85:b4:29:07:83:91:87:53:49:
                    77:39:8a:66:0c:4a:fd:f7:ac:67:42:1c:28:f8:6b:
                    df:fd:fd:bf:43:72:bb:50:28:78:c9:85:ac:af:60:
                    54:c2:17:32:2a:0b:33:38:e7:74:49:4a:23:75:5e:
                    81:98:16:b6:63:4f:46:62:50:b0:c4:d4:e7:d4:a6:
                    d6:22:c5:30:99:81:7a:d8:4c:37:aa:86:e3:cc:a6:
                    7c:5e:57:e2:6d:83:ce:5d:02:ce:56:1e:0c:87:d1:
                    66:6e:da:d7:4f:58:8a:1c:35:11:7d:13:41:05:3f:
                    40:b3:f4:75:0a:f7:24:6d:0b:fa:22:9a:d1:69:ee:
                    89:34:af:a2:09:ce:fd:32:da:69:3f:4a:11:9a:2a:
                    fb:91:16:0d:d5:61:25:f7:f1:08:2e:0b:32:e4:91:
                    81:a2:0d:ec:e4:93:d3:64:f1:68:30:05:5a:fd:5e:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:1A:DC:11:EF:B9:BC:1D:E3:82:26:C0:88:B7:87:B2:BB:5B:4A
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:a6:db:5f:18:f1:26:4d:ba:f6:0f:49:9f:ee:2a:3b:a8:
         c1:84:93:02:65:de:c4:b1:ea:80:94:c1:e9:30:88:f7:57:3e:
         c6:4e:72:82:58:3f:5a:b8:e8:0d:09:cb:c7:19:3f:d9:59:53:
         aa:62:4a:59:b9:d2:a2:10:4e:b3:b0:a1:b8:ad:cb:0b:ae:90:
         f6:c3:f4:10:27:98:7c:a8:cb:6c:91:d8:3b:2f:f2:d5:ea:f4:
         b2:b9:09:d4:0e:cc:54:ee:da:ae:05:32:39:f6:46:04:b1:98:
         80:43:f6:87:73:21:b1:25:af:63:2b:3e:51:33:1f:61:1f:0e:
         32:b5:5e:fa:00:bb:9f:67:b1:40:d1:57:22:3c:f5:9f:fc:10:
         15:3a:52:83:fd:35:84:49:ff:f7:83:08:37:ae:bf:af:52:c0:
         49:39:35:97:e5:61:f0:00:55:42:34:99:66:25:bb:58:d6:ba:
         ff:d0:ed:4a:8e:89:ec:76:c8:70:f8:02:58:e9:3c:fa:a7:d2:
         cf:a4:bc:84:a2:a0:2a:2a:78:a0:a7:a2:37:08:3a:c9:65:00:
         93:51:d9:f0:d9:27:63:c3:5e:f8:f3:d5:9a:a0:6c:f6:8b:9b:
         be:83:7a:37:d0:12:41:db:8f:3b:5b:cc:b8:33:8e:b3:ef:52:
         e7:b0:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:55:10 2025 by rpki-client