Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File:                     I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier:          FLnE4Xf+U7+mGO1irKLTYcKoQjFVcJ1QYo5t7CO+eAM=
Subject key identifier:   13:F2:73:BB:A7:87:CC:FD:D0:9A:58:42:49:09:9C:56:F9:DC:4D:7D
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer:       /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial:       01984475F9982E7E630D5986CBE3F7C77C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number:          1346
Signing time:             Sat 26 Jul 2025 02:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:38 +0000
Files and hashes:         1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: 3QAWz9FbN8WrI0U0ZTgTDrhkNWsGKLDSYtwcqwtAQNY=)
                          2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:75:f9:98:2e:7e:63:0d:59:86:cb:e3:f7:c7:7c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
        Validity
            Not Before: Jul 26 02:00:38 2025 GMT
            Not After : Jul 27 02:00:38 2025 GMT
        Subject: CN=13f273bba787ccfdd09a584249099c56f9dc4d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:ac:ab:ca:9c:fb:55:95:c8:54:c7:95:67:
                    a1:96:86:4e:08:d8:55:1f:48:d0:b6:10:00:5a:73:
                    44:25:2a:eb:99:93:3b:8e:20:84:32:8a:e9:6c:20:
                    45:e9:5f:c7:a3:ae:12:15:e0:29:e2:07:47:ba:61:
                    f5:74:2e:0d:49:c4:8a:cb:00:12:30:8a:d9:28:07:
                    6e:56:f8:ff:b1:20:b5:14:25:10:a4:dd:a9:0e:44:
                    0a:04:f6:bf:41:6c:f4:81:68:e6:08:aa:3b:e9:92:
                    2b:11:69:65:42:80:05:3a:4a:5a:0f:fc:89:23:db:
                    64:f5:71:6d:c1:e2:54:b5:52:8c:49:f1:9f:e0:38:
                    13:a4:c5:7a:36:69:1b:f6:08:fe:e0:65:25:3e:51:
                    60:35:6f:6a:22:4d:5c:a9:9f:6c:e3:fd:54:05:31:
                    1f:c3:e3:23:ab:9f:24:76:f3:4b:06:db:3d:55:ca:
                    c5:cf:a6:88:22:af:51:41:07:0d:da:1d:4b:96:01:
                    f3:77:2e:9a:fd:e5:25:6e:89:bb:6e:63:c8:3f:9e:
                    61:8e:e8:d4:15:30:31:9d:e6:49:c9:6f:c0:30:b7:
                    e9:a8:e7:32:c0:40:34:d4:b8:f7:d9:cd:b9:e1:a1:
                    76:2f:36:31:4d:03:e2:50:82:05:43:af:72:7b:34:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:73:BB:A7:87:CC:FD:D0:9A:58:42:49:09:9C:56:F9:DC:4D:7D
            X509v3 Authority Key Identifier:
                keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:14:af:4a:fb:7c:44:bd:a2:d1:3a:b2:ea:2b:46:fd:76:
         cc:db:da:70:12:30:b1:49:1a:b2:9c:7b:6e:18:59:ac:1e:d5:
         87:4d:6f:ea:c8:78:c7:87:bd:7e:0f:1f:be:60:7f:f6:26:60:
         58:f5:5f:d6:47:b8:5c:75:57:bb:b8:f7:f5:05:8c:ef:e3:38:
         55:9c:ce:e3:b3:1c:46:ba:b4:d2:99:26:0b:cc:a4:d6:9d:f3:
         5f:4e:86:06:93:1e:ad:8b:9b:b0:d8:c5:78:c7:83:51:b7:18:
         99:fa:69:6f:52:46:fe:9c:10:07:4f:3d:93:73:90:1f:ab:04:
         b6:68:8e:7c:c6:b0:3d:32:0d:9f:68:2f:1c:98:95:de:47:da:
         fe:e6:4b:1f:95:e7:ff:b0:9d:19:63:22:b2:1f:dc:8b:ec:76:
         8f:42:0c:73:d1:8c:54:67:0f:64:5b:cc:a6:d4:61:46:e5:44:
         83:7b:5a:d2:aa:43:25:a9:5e:bd:61:f9:ec:b5:5c:ee:0d:21:
         2e:0e:e3:f4:9d:83:41:48:d9:71:74:4f:61:c7:9e:0e:91:fd:
         9a:58:73:da:7a:67:da:6d:18:56:89:6a:bb:5e:3b:cd:1b:b3:
         d9:c7:17:0f:e1:4e:fc:b0:a4:32:be:6a:ef:05:12:46:bf:2f:
         04:33:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:11 2025 by rpki-client