Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          oyqiJgReZEDWHKQVHCZsCKsOi5eZ0XA3nRRUltrTmVQ=
Subject key identifier:   DF:47:30:33:21:8F:8E:7D:0E:A6:03:9D:14:8A:17:AA:6E:2C:11:E5
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       01985A22643CC3EB99F5EE3CBE947C15497A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          1611
Signing time:             Wed 30 Jul 2025 07:00:59 +0000
Manifest this update:     Wed 30 Jul 2025 07:00:59 +0000
Manifest next update:     Thu 31 Jul 2025 07:00:59 +0000
Files and hashes:         1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: O1EsGCCe5emvUfuUbq15nQ2DzYBUFlphBInmZzey+vE=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5a:22:64:3c:c3:eb:99:f5:ee:3c:be:94:7c:15:49:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Jul 30 07:00:59 2025 GMT
            Not After : Jul 31 07:00:59 2025 GMT
        Subject: CN=df473033218f8e7d0ea6039d148a17aa6e2c11e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:21:eb:73:7f:ac:5c:52:ad:90:1e:d7:da:
                    10:2c:47:f6:c4:5f:b6:87:50:20:f1:2d:c2:d5:51:
                    4b:5c:ba:9f:50:09:f6:ed:c6:66:4a:26:22:bf:5a:
                    db:17:10:d4:45:6c:bc:f0:47:e1:21:70:69:74:3c:
                    ea:1b:c4:ab:a8:31:e2:06:f3:51:c2:a6:c3:6e:6d:
                    df:59:6e:37:d3:36:0d:aa:7e:85:28:d2:e8:5b:42:
                    04:ff:c8:2d:39:45:e0:05:3b:d0:29:89:b6:b7:26:
                    d3:18:0b:93:08:b3:ca:c1:ff:0b:73:a4:7d:49:c8:
                    5d:52:61:0a:d9:85:56:2f:82:58:4e:f6:f6:7e:a9:
                    07:59:6f:f8:4d:bd:11:06:89:c6:14:b5:61:24:1f:
                    b1:ae:29:51:35:b1:e4:ba:54:c4:9c:6f:e3:f9:44:
                    16:fd:8b:f2:41:52:2f:76:8b:12:b2:01:62:02:e5:
                    eb:37:f2:1e:83:7a:ef:ba:28:11:00:39:e5:4a:76:
                    47:74:f9:e2:27:89:47:0b:24:71:0c:76:fa:c0:1b:
                    da:d2:2a:da:f5:c7:ff:c4:c8:2f:ea:1c:a8:60:46:
                    94:fb:70:a0:74:df:8e:5f:ff:1d:f7:bc:e0:e3:4d:
                    5d:c7:80:4e:23:58:71:fb:47:e3:7b:dc:56:66:01:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:30:33:21:8F:8E:7D:0E:A6:03:9D:14:8A:17:AA:6E:2C:11:E5
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:b2:e4:e5:9a:24:a1:bd:d0:ef:2c:b7:75:14:f2:1b:c0:
         f3:ef:52:f3:bb:c3:d1:83:c2:3b:2a:30:b9:63:90:08:9e:d3:
         6e:ce:b2:16:e5:d6:ab:bf:16:19:70:8a:43:aa:33:de:b3:11:
         fd:90:48:d6:92:2a:6b:63:43:c6:29:ce:6b:26:e4:58:92:47:
         d0:cb:5b:3b:b6:48:da:4f:23:9a:2e:21:cd:f7:b7:39:84:f7:
         56:d3:65:93:88:a2:ea:0e:76:6a:54:70:db:8e:e3:dd:02:c3:
         3b:8f:e2:98:d9:cf:0d:71:ce:09:d8:71:33:72:7d:65:d7:e6:
         0b:35:dd:cf:e2:be:b3:a1:d4:57:7f:16:47:f6:15:a2:86:ed:
         d6:e1:5c:65:56:69:69:0c:62:5e:55:07:73:53:93:da:0a:f9:
         f7:31:fa:26:cb:b7:6f:a3:52:c1:9f:c8:86:a4:db:8c:33:1c:
         61:38:65:fe:21:18:cd:b6:27:65:ed:87:5d:ad:b9:e7:11:1f:
         55:71:eb:0d:27:17:53:e5:69:bd:af:5b:fa:5a:46:e0:ce:60:
         07:1b:30:02:3e:e4:c2:dd:87:53:cc:9b:a9:b5:a9:24:5e:b4:
         e1:f4:ea:16:56:7c:91:66:ec:ff:d0:d1:de:e6:dc:13:d2:66:
         ef:fe:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:07:19 2025 by rpki-client