Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File:                     mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier:          MS0u9fDdJenyk4CzJ6l+U2OWqBlSmFhTA1EdvxC/8LI=
Subject key identifier:   22:3E:7C:C4:53:F0:64:F0:73:DE:AD:DF:6C:83:A9:50:B3:2C:57:12
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer:       /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial:       01984A41618D07A4A6E97648A7A175B9BB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number:          1608
Signing time:             Sun 27 Jul 2025 05:00:55 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:55 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:55 +0000
Files and hashes:         1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
                          2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: Vh2Ud9zoI7UopRixYb0QM3ShTc/OgC4n4VDlcA+wDn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:61:8d:07:a4:a6:e9:76:48:a7:a1:75:b9:bb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
        Validity
            Not Before: Jul 27 05:00:55 2025 GMT
            Not After : Jul 28 05:00:55 2025 GMT
        Subject: CN=223e7cc453f064f073deaddf6c83a950b32c5712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:9a:93:50:97:1a:ac:96:9b:44:89:82:50:
                    49:21:9f:8c:61:5c:d4:f5:c3:52:14:c6:4e:85:7c:
                    07:41:bb:32:a0:e6:15:b5:36:8c:66:64:3d:fe:83:
                    57:11:c7:f9:57:ec:79:c2:8b:6f:6e:67:14:6b:23:
                    14:74:b7:09:52:65:88:e5:7a:dc:67:1f:e7:29:0f:
                    b7:d1:96:22:ed:2c:3a:0d:d2:66:f2:63:fa:82:af:
                    ef:cc:88:1a:22:11:95:bb:e9:96:cf:9f:31:2d:fa:
                    24:9f:a0:5d:be:f8:c4:40:d2:51:9a:c6:70:f8:a8:
                    c2:cc:8f:55:f3:f7:d9:fe:cc:c1:18:82:8a:05:d0:
                    a5:65:4c:f0:d2:b3:1d:58:8b:c2:7b:87:20:00:b0:
                    d0:19:cd:9e:a7:9b:b2:83:44:c8:fd:c0:50:fe:28:
                    5e:07:fc:6d:da:57:c3:3c:31:22:ba:a8:36:ad:44:
                    8c:a4:5b:09:80:ee:fc:7f:3d:4c:a7:a2:60:1f:7e:
                    d3:0e:05:03:6f:32:e0:15:a1:71:52:a8:60:de:bb:
                    c5:10:24:09:d5:de:fd:2e:3e:b1:57:9a:79:c3:b0:
                    68:7d:d1:e0:8f:61:5f:31:7a:d6:c9:48:c7:38:34:
                    2d:ac:22:68:59:40:57:33:bf:18:99:93:77:25:c8:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3E:7C:C4:53:F0:64:F0:73:DE:AD:DF:6C:83:A9:50:B3:2C:57:12
            X509v3 Authority Key Identifier:
                keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a8:f6:6e:6d:6d:3e:ba:02:67:e5:f5:c9:81:d7:4d:97:1e:
         3d:7c:72:22:02:9a:84:ef:2c:5e:03:2f:99:29:f3:8a:de:7b:
         de:1f:ad:f0:a5:d6:a2:55:7f:4b:4d:96:94:26:57:1a:1b:43:
         0a:a8:20:0f:84:59:b7:d3:b7:1a:1b:0f:0d:8b:f5:03:ff:09:
         f8:50:03:f4:b6:88:9e:32:be:a4:7b:21:b6:cc:24:8f:a5:46:
         9e:02:51:c3:67:f7:d1:49:59:dc:f5:0e:f6:32:37:4f:e9:aa:
         89:56:5a:24:43:c5:a8:a2:3f:69:77:b2:51:5d:fa:b9:34:ed:
         a3:9b:f9:94:8d:92:7c:d7:92:d3:1f:fd:1a:73:76:1c:d4:fb:
         83:57:fc:65:3f:44:05:d4:f6:52:07:d2:27:a9:c7:7f:56:1d:
         b9:50:9d:55:d3:15:32:d4:ce:df:f5:fa:71:e4:dc:58:24:9d:
         b6:09:bf:c5:24:17:19:04:42:5a:5b:e8:75:1f:d0:1b:eb:32:
         51:de:7e:63:ac:06:45:dd:f1:aa:23:b3:39:6b:4d:cb:fb:0a:
         a8:51:81:8d:bb:57:3c:5a:75:ad:95:6a:4f:c0:96:58:f1:44:
         40:a7:eb:b2:19:9e:54:9b:e7:c7:1d:7b:86:aa:05:7c:ce:88:
         c3:c5:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:20 2025 by rpki-client