Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          h25dl3KxGHwv6DhNvROD7naVD0P7VkUYJAsDGjjgZcI=
Subject key identifier:   A9:B2:0E:7A:AC:D6:8E:21:B4:24:45:86:D7:68:CD:0D:0C:9E:4D:D0
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       01984DB01A1073F7D4F4E366AF17D4E2EDD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          0A8E
Signing time:             Sun 27 Jul 2025 21:00:43 +0000
Manifest this update:     Sun 27 Jul 2025 21:00:43 +0000
Manifest next update:     Mon 28 Jul 2025 21:00:43 +0000
Files and hashes:         1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=)
                          2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=)
                          3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=)
                          4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=)
                          5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=)
                          6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: ilPdvRd+7Tu6azHpUEKl02tT33BATPMCYEdabgsVtW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:b0:1a:10:73:f7:d4:f4:e3:66:af:17:d4:e2:ed:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Jul 27 21:00:43 2025 GMT
            Not After : Jul 28 21:00:43 2025 GMT
        Subject: CN=a9b20e7aacd68e21b4244586d768cd0d0c9e4dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:b8:f8:5a:bb:b7:f3:0a:6f:55:c2:61:1f:
                    f0:95:e6:c0:6c:71:af:62:3b:73:fd:76:ba:6e:f6:
                    76:95:ce:0b:58:75:1c:97:37:ca:c3:10:1d:b2:82:
                    98:df:55:96:6f:54:a8:77:63:75:24:6d:17:a3:c1:
                    28:ff:a7:69:19:ec:d7:90:49:84:05:ba:33:1e:92:
                    c1:25:fe:ab:ea:43:2e:c8:e7:9c:c2:4c:cc:a5:68:
                    36:1a:22:ff:fb:01:df:f7:f5:fb:e0:dc:c1:88:42:
                    e0:9b:e1:db:dc:3a:b3:c5:9d:6c:c2:94:56:55:2d:
                    77:7f:f3:ac:50:76:fd:cd:c7:38:5e:d0:3b:83:52:
                    2e:74:0c:0b:61:9c:bf:aa:19:73:e3:73:45:08:fa:
                    3e:85:19:1a:ba:6d:20:54:67:2d:39:44:80:c6:40:
                    cd:9b:7b:bd:96:15:c5:58:7d:15:a3:65:6e:21:e4:
                    12:02:13:24:99:aa:81:92:71:69:5c:30:0f:f1:8d:
                    31:cb:9f:7b:01:e3:b2:53:6f:9e:64:10:65:20:34:
                    44:6e:b9:44:9b:97:c7:3c:06:01:e7:d9:7a:41:e1:
                    59:a9:e2:b7:be:2d:aa:ff:85:c1:bc:08:c7:43:1e:
                    78:f0:78:86:49:f0:16:9b:78:5b:89:ad:ee:a9:4b:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B2:0E:7A:AC:D6:8E:21:B4:24:45:86:D7:68:CD:0D:0C:9E:4D:D0
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:54:ae:21:83:2d:a8:3f:18:d8:e8:cf:34:30:b0:60:d2:c4:
         f8:8a:63:3a:48:73:f9:93:ee:22:c3:ab:c1:ea:43:9d:19:34:
         f0:99:6f:69:2d:81:3b:31:5a:a4:8d:b3:8c:9a:07:67:47:c0:
         e4:58:07:5f:2b:0e:57:57:d2:bc:52:4d:3b:90:6c:b0:bc:aa:
         c2:cc:50:ac:9d:b7:0e:fa:29:48:5a:ab:50:0f:c6:c6:e0:e1:
         c2:3f:cf:9e:d3:04:71:b4:a0:3d:61:2e:5c:0c:4e:33:c8:88:
         84:54:74:f1:c9:c4:db:fe:4e:71:b5:fa:15:d5:71:08:ae:e8:
         49:57:60:68:82:a7:85:af:bb:b6:91:8a:78:9d:63:a6:f7:6f:
         ce:4f:b4:bd:a8:5c:b0:c5:88:2a:76:85:47:90:89:aa:dd:bd:
         ff:2f:9d:36:cb:53:7e:72:a8:f6:d0:f9:70:c2:2d:bf:58:70:
         29:ac:97:c8:f2:14:15:e2:69:60:09:65:3f:9d:c5:e7:90:72:
         43:e6:e3:0f:41:aa:44:51:e5:df:a0:c0:f8:42:0d:9b:a7:e9:
         82:36:60:cb:c0:00:f7:08:17:95:7a:fa:21:0d:c4:75:db:b1:
         d2:74:9d:9e:9e:56:b7:89:be:49:60:56:c8:e9:ae:73:1d:a3:
         32:52:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:57:51 2025 by rpki-client