Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          n3lmc7bYbm0yyT1JyIZNvRzCAOetjiWeTyejkv+H88o=
Subject key identifier:   ED:F0:89:F2:22:79:E7:24:39:5F:5F:9F:FD:E6:58:AE:D4:78:7A:90
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       01983795A4AF8531E27998FECEA6F0C6A23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1693
Signing time:             Wed 23 Jul 2025 14:00:10 +0000
Manifest this update:     Wed 23 Jul 2025 14:00:10 +0000
Manifest next update:     Thu 24 Jul 2025 14:00:10 +0000
Files and hashes:         1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=)
                          2: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: 5+ApLjlfagozKUagQ49E40g7/vvGVXmDhMwLyUsKPTE=)
                          4: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          5: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          6: fsCpcWbx8Z1eo5cYhqs4znqfBw0.roa (hash: 2EkDKLPS7K1At/yNNFD/xXPTEKBT3zJVxYZiJe5gvgs=)
                          7: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:95:a4:af:85:31:e2:79:98:fe:ce:a6:f0:c6:a2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jul 23 14:00:10 2025 GMT
            Not After : Jul 24 14:00:10 2025 GMT
        Subject: CN=edf089f22279e724395f5f9ffde658aed4787a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:7f:e2:5d:af:3e:35:88:b5:54:ab:49:36:
                    45:1e:fd:fa:66:4f:77:ce:19:67:ae:7b:c5:8b:e1:
                    ef:e4:33:72:d9:91:4e:2c:05:d3:4c:0a:57:65:3e:
                    86:da:c1:ba:42:bd:26:ec:9a:c0:45:12:b0:77:bf:
                    1c:6e:cf:62:ec:8a:bb:2e:90:51:67:ea:2f:4b:bf:
                    97:5f:b6:b6:66:ca:2f:7f:56:20:c6:f5:46:de:ea:
                    e0:5e:db:4b:25:bf:c6:8f:36:17:3c:d5:c3:f5:d8:
                    b8:81:7a:8f:26:61:03:1c:4c:b5:e4:7e:53:2d:37:
                    aa:2a:67:c7:f7:19:c1:6f:df:df:76:ad:6d:51:cd:
                    e2:d7:85:b6:1d:40:50:cf:81:c3:25:35:e3:5c:b0:
                    62:05:be:50:0d:b4:fb:78:33:91:be:66:5c:f4:bb:
                    80:67:28:5f:74:bc:96:52:f1:5e:86:65:d4:cb:3c:
                    ba:d9:6f:cd:85:68:77:95:ea:1f:3c:73:7f:b0:94:
                    13:15:4f:1c:c9:d1:cf:d1:f9:c0:75:fe:d0:57:89:
                    3f:ec:7c:ee:05:5a:0a:b0:fe:aa:c6:31:f3:f4:90:
                    f0:76:f6:b4:f1:1c:a7:a3:37:25:a2:77:e3:65:b5:
                    21:51:04:f5:a1:4b:3b:8c:f2:87:42:49:b5:92:2f:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F0:89:F2:22:79:E7:24:39:5F:5F:9F:FD:E6:58:AE:D4:78:7A:90
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:83:b1:24:4e:0f:d2:62:c7:d1:74:bf:bd:8e:61:d8:55:
         df:f0:c3:19:d9:6c:2d:5b:57:09:ac:ee:7b:67:54:8a:b3:0e:
         c8:fe:95:18:cd:52:89:12:76:52:60:3e:da:a5:8a:c8:43:43:
         5b:6f:d7:da:a7:e5:04:0f:42:41:56:fa:c5:2c:f6:5a:d3:8d:
         fa:ca:40:a9:9c:f8:80:cd:9a:0d:da:85:6a:cd:4f:9a:04:9f:
         a8:30:8a:c4:4e:93:e9:22:44:f0:1b:e2:de:20:0d:f9:b5:2f:
         3c:24:9d:6a:4f:0c:2a:c1:90:f4:9c:76:0d:7a:a3:76:07:2e:
         e5:94:c3:5d:30:9f:b4:47:dd:f8:01:1d:32:7f:da:8a:53:42:
         06:fe:65:27:bb:84:c2:e4:bf:b6:5a:10:4f:79:fb:4e:fa:f4:
         74:f4:d3:87:62:d7:e0:de:36:75:bb:9e:cc:50:1d:65:6d:77:
         9c:27:94:db:51:a6:01:67:f6:6a:8d:66:0e:9f:2d:63:10:9c:
         c4:f9:c9:20:ae:49:79:99:4b:b3:5c:0b:bb:89:d6:58:19:85:
         42:d2:20:ee:00:b0:99:48:20:ea:04:b5:73:14:81:9b:ea:b2:
         d3:2e:0e:11:d7:fe:77:a8:a3:d4:91:51:28:5b:1c:73:d8:10:
         26:2c:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:44 2025 by rpki-client