Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          CFN34AUrFu3Rx/MPsO1Cu0+g8zszQZ1xTDwzpF/OfUk=
Subject key identifier:   30:3E:B4:F6:5F:18:98:63:43:AD:E9:5E:5F:4A:CD:97:54:F1:51:F7
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       019849D350670CC54F6A8D643AB2FCB97545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 03:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:41 +0000
Files and hashes:         1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
                          2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
                          3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
                          4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: HLlmcx4FXJBgdGhAuzDcauQyGEQqnqeconVxtWAGPeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:50:67:0c:c5:4f:6a:8d:64:3a:b2:fc:b9:75:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: Jul 27 03:00:41 2025 GMT
            Not After : Jul 28 03:00:41 2025 GMT
        Subject: CN=303eb4f65f18986343ade95e5f4acd9754f151f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:ac:98:03:c2:23:c2:ef:12:4f:4d:b9:f2:
                    6f:3a:4c:ee:04:fc:9e:15:00:25:86:13:c0:cf:00:
                    6e:7f:af:e6:fe:01:e9:0f:92:0f:3f:35:24:2c:51:
                    06:79:8d:7d:68:59:f9:14:7e:39:9d:2e:8c:58:17:
                    c1:39:c4:c4:f1:28:06:ae:b1:32:cf:73:45:6f:89:
                    75:65:c4:b8:a4:01:ca:b5:db:b4:bf:17:46:07:f2:
                    d7:94:dd:87:6c:7d:44:25:86:eb:17:cf:ff:43:58:
                    b0:9b:ea:05:54:9f:af:37:80:5e:80:85:dd:02:86:
                    d1:78:eb:2e:55:43:c7:56:2c:69:22:ec:27:db:48:
                    88:b9:30:e9:50:92:22:15:aa:d4:58:d5:a6:1b:fc:
                    ca:87:81:64:5c:32:c9:a2:b7:d0:e0:06:a3:03:05:
                    9c:52:fa:75:3a:30:49:02:50:9c:ce:6a:59:f4:6f:
                    75:05:bb:7c:2f:38:6c:5a:0a:9b:a1:40:c7:be:95:
                    7f:11:2c:1f:b8:27:2c:3a:28:d7:84:54:49:be:9a:
                    3a:6f:bf:6b:56:d0:5a:11:67:2b:35:ab:4c:91:63:
                    c9:eb:53:56:66:97:52:9d:2f:89:32:1a:56:99:61:
                    da:07:98:6b:7b:90:41:e6:19:6d:99:50:9a:01:36:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3E:B4:F6:5F:18:98:63:43:AD:E9:5E:5F:4A:CD:97:54:F1:51:F7
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:50:76:c4:8d:0e:6a:33:b1:38:09:4a:70:3d:aa:cb:7b:1e:
         c3:df:14:e4:8b:c0:b5:1a:a2:6c:9e:0d:7f:ab:19:87:14:40:
         54:aa:72:c6:06:ed:40:62:83:4d:0c:31:9c:5d:8a:da:8d:ed:
         41:a9:eb:15:64:6c:b2:6e:ab:72:81:4e:c5:58:f3:25:f8:65:
         60:fd:75:85:5d:d0:0e:43:ea:d1:97:6b:ac:05:ad:9c:67:2e:
         7c:cb:54:d2:47:7b:e1:a0:20:07:aa:46:ba:1c:57:a5:cc:63:
         1b:6d:f2:82:10:ff:40:33:9f:b8:0a:12:ac:ee:c5:c5:bb:67:
         03:a5:7a:dc:cb:35:76:73:5c:16:4d:91:d4:64:ad:85:1e:5b:
         54:7f:a6:15:af:77:63:39:13:bd:e4:7a:86:56:1c:2f:ef:24:
         07:d0:7e:76:fc:0b:24:5f:41:b3:f1:5b:fd:1c:7d:4f:ec:1b:
         3e:23:99:92:3a:8f:23:f7:1f:cd:b8:df:06:35:b1:a2:40:9a:
         84:9c:37:4d:32:6d:a3:29:eb:da:77:66:10:21:68:9d:2b:a5:
         f6:54:df:a5:b6:43:a1:3e:a9:9a:78:0b:46:12:dd:e8:a5:06:
         7f:a8:f6:0a:c6:dd:24:cf:0f:c2:02:4d:08:f6:61:4d:c0:f2:
         9f:83:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:41 2025 by rpki-client