Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          Aulx7KTWQJwjIptn56aXLtJoPqa2T6Ktwjyd9a4V3nA=
Subject key identifier:   CD:25:06:71:6B:27:58:03:40:FD:72:A0:0F:05:2B:2F:03:84:60:C8
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       0198304C202554D82EA5F2193AAD00528F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          06CD
Signing time:             Tue 22 Jul 2025 04:02:31 +0000
Manifest this update:     Tue 22 Jul 2025 04:02:31 +0000
Manifest next update:     Wed 23 Jul 2025 04:02:31 +0000
Files and hashes:         1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: psTlCIvgY7lyAoH0AG53ZhYuf0c28pUDc8lks7vImM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:30:4c:20:25:54:d8:2e:a5:f2:19:3a:ad:00:52:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Jul 22 04:02:31 2025 GMT
            Not After : Jul 23 04:02:31 2025 GMT
        Subject: CN=cd2506716b27580340fd72a00f052b2f038460c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:c7:7d:1e:f3:3d:70:5d:4f:ac:df:eb:09:
                    24:7f:7d:e5:af:37:42:41:43:4f:d9:cc:47:ba:71:
                    ed:17:be:4f:03:e3:1f:06:b4:d5:7a:07:93:23:4c:
                    e2:1a:00:5e:b4:62:1d:0d:d8:ef:b2:59:ee:13:a7:
                    3b:58:28:50:c0:09:ba:03:16:7d:88:c4:7b:78:06:
                    eb:4e:a5:0f:5e:01:fa:34:0e:88:04:85:68:49:0c:
                    f3:ff:43:de:c1:77:7f:4e:a1:b8:22:d5:cf:86:dd:
                    d8:52:df:1e:e5:cb:27:b8:84:f3:08:97:c5:b2:f5:
                    a3:f8:aa:9a:95:80:5e:a4:fa:b1:e5:43:e0:93:72:
                    a7:7d:79:a0:d6:51:75:e5:f7:04:fc:5b:4a:9f:ae:
                    b7:ce:f6:d1:7c:24:51:11:aa:d0:c9:94:4e:31:1c:
                    9f:ff:c5:5f:4d:7a:1e:a2:66:04:9f:87:76:73:ec:
                    fd:e7:67:fd:ed:f8:ff:d2:41:90:8a:6f:d7:e0:34:
                    3e:8b:e4:b3:de:2a:5b:97:14:27:e7:6e:cb:b3:9b:
                    13:c0:dc:7c:93:63:11:2a:5a:89:ff:1a:0d:00:31:
                    12:d6:6c:b2:55:c7:07:e2:56:59:e8:44:91:55:5f:
                    d7:6d:85:99:09:a6:92:a6:76:14:89:eb:ab:79:e7:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:25:06:71:6B:27:58:03:40:FD:72:A0:0F:05:2B:2F:03:84:60:C8
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:5c:4a:a3:d9:ee:4a:08:1f:78:95:ce:7a:c9:24:a8:c1:
         f2:b0:c8:de:31:1a:56:1a:de:a5:0d:74:70:f7:4a:fb:76:cb:
         9d:f2:45:99:83:6a:7f:ef:bc:cd:b0:d4:5a:72:62:46:6f:7d:
         99:76:d8:da:07:1b:6a:bc:be:0a:d3:0a:4a:07:f5:c5:58:d8:
         97:0a:55:fc:7f:df:46:a9:13:82:56:f3:ca:4b:28:ad:3f:19:
         7a:ea:5a:15:e5:9a:5b:ce:fe:4d:bd:40:3d:da:a7:6a:50:29:
         07:68:14:0e:34:aa:7d:43:52:87:59:60:7c:78:a3:b8:2e:f8:
         12:0d:0e:ef:7e:8e:af:5b:99:7e:8c:25:f4:a4:2a:bc:03:0a:
         89:70:a1:01:93:be:8a:b2:ff:1a:88:b1:d5:94:24:d3:64:e2:
         80:db:e6:01:51:d3:23:17:9b:cc:79:2f:4f:95:11:cd:1d:bf:
         2f:4c:e1:1c:6f:02:84:47:ec:1c:13:cc:a7:c3:1a:0b:5a:f4:
         6e:47:c4:16:5f:b0:6a:9e:2d:eb:7c:2b:11:e9:d7:54:ee:cb:
         75:31:a8:dc:49:c8:63:c5:a2:29:55:e1:b7:2e:b8:f2:ce:a3:
         30:34:03:6a:d2:cb:e3:89:7d:7a:5a:08:0b:82:52:90:b2:d3:
         5f:1a:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:28:41 2025 by rpki-client