Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
File:                     Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft (raw, json)
Hash identifier:          xNFKhQPV2m7SPU4Oxg11ZExS2LYv3H4NmOkugtonRDY=
Subject key identifier:   37:B3:AC:DB:91:D7:7D:F0:0C:64:71:DD:AE:5E:B7:66:C7:E4:FD:95
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       019842876C23870437C6BEB0CB18531112BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
Manifest number:          14F1
Signing time:             Fri 25 Jul 2025 17:00:27 +0000
Manifest this update:     Fri 25 Jul 2025 17:00:27 +0000
Manifest next update:     Sat 26 Jul 2025 17:00:27 +0000
Files and hashes:         1: FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa (hash: j140J+F2FieGPuclb2mIxRwUBHdQxhpr5HBQnLeYiuY=)
                          2: LY8Jbr9sr_WCwWd2UrTGC0BKmRM.roa (hash: 5HQaKtYyBGcauN3lnpEH9LKsor/0JL7vB86zpKq4Hys=)
                          3: Q6_kTmc8fX58I7EBj3sPsSojmYU.roa (hash: sbWoHZJ8TPnfLH8vFWPl9mieLm0sgZlIoabKMFRTcsU=)
                          4: QwwF_wEdyDROs6QadM_Il4CHbmo.roa (hash: wIhy46sTXD8c4yrBC6xzFGpvCG5G7CsjAqGsWxX4VHQ=)
                          5: Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl (hash: 6HWQmaPDSvpOW72uvw6MRs6YDM6Q8E8CsOnUcE7+OSA=)
                          6: WPCRGLeltSJ3YXo9id1i5ppsRw4.roa (hash: XvpGDNA3BMBDAmGYF6lZbS8+WVJqVHEpsQax4jq6kCo=)
                          7: fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa (hash: 28gFmZmHqptl7sCCfNJhDhWI9ZQKOET/7qvAVv/S5j4=)
                          8: ffILj9IjNg6C8l0EmvWVQGIules.roa (hash: 2yNsIvmaeDyakVCS4RtNiFkTumvlxMJmMDP3cNZiXd4=)
                          9: xATH_4DImK8fd5hc84k_g1PniNs.roa (hash: WRPuSYa86Ir4oWe89J036B9Z8F9HC0m1Vigt9eZnloE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:87:6c:23:87:04:37:c6:be:b0:cb:18:53:11:12:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jul 25 17:00:27 2025 GMT
            Not After : Jul 26 17:00:27 2025 GMT
        Subject: CN=37b3acdb91d77df00c6471ddae5eb766c7e4fd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:19:fe:d2:cb:1f:81:7a:b4:cc:41:f4:40:
                    fe:a1:4b:ef:90:92:3f:26:d9:ba:89:9b:9d:5c:13:
                    e4:6a:32:a8:66:49:d4:8a:5f:01:3d:19:36:df:99:
                    7c:45:3b:53:36:8b:3f:5f:fa:ca:a3:d5:84:5f:59:
                    50:c7:09:b7:79:ce:9b:6f:83:ed:9b:51:bd:72:3e:
                    41:f2:05:d9:d4:3f:5d:0e:30:53:e7:b3:df:b2:df:
                    6a:e9:93:53:05:92:b1:cc:5f:1d:be:3e:67:68:e8:
                    c6:47:0a:b6:9c:18:68:a3:a4:a0:86:64:84:33:69:
                    be:10:fc:e9:ff:c4:ae:82:f1:ec:0b:1e:83:eb:4c:
                    ac:fb:11:84:81:a3:54:d0:86:13:68:49:c3:c6:34:
                    4c:cf:e3:36:22:20:58:a6:61:c2:ae:04:91:a9:93:
                    e0:a5:21:d5:1d:1a:8b:47:ca:a4:fd:f8:95:26:55:
                    59:9a:7a:52:12:a1:72:60:c1:9a:e6:95:f5:ad:af:
                    f1:80:7f:f2:47:20:4a:0d:7c:69:51:de:dc:49:35:
                    98:c4:05:07:a9:4e:68:f1:a6:e2:1b:85:97:dc:ba:
                    c6:c0:ff:79:3d:f9:5f:4d:18:f4:74:85:d0:a7:cb:
                    6a:6e:e7:44:6b:10:13:2d:d0:ea:79:e3:36:6d:68:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B3:AC:DB:91:D7:7D:F0:0C:64:71:DD:AE:5E:B7:66:C7:E4:FD:95
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:bb:bd:7e:db:ee:9c:7a:d0:99:4e:28:02:24:05:60:e7:
         f1:9d:4e:48:40:c8:85:41:f6:a1:42:1b:49:1d:84:c1:8e:3f:
         1f:30:aa:97:c3:5d:52:1a:8f:ae:9e:b3:fa:08:a8:bb:e7:b7:
         06:f8:42:a3:b8:72:bd:75:c7:ba:59:50:3c:5b:46:b8:0b:43:
         aa:c8:fb:0f:42:6d:a2:99:1b:6d:3b:89:c4:04:aa:17:0c:bf:
         b0:fc:ad:7d:6d:35:bf:31:5d:fb:08:a3:70:6d:27:ff:46:4d:
         7e:7f:af:56:fb:b0:41:7f:34:ad:7f:77:e2:88:5c:2a:74:b3:
         19:17:87:53:fd:52:49:35:04:a6:37:d3:f0:66:2d:02:c2:d2:
         a1:c7:56:c0:90:99:f3:4c:10:b4:96:14:78:b4:26:89:de:9f:
         50:06:12:0c:ad:4b:e1:88:53:53:94:f2:85:1a:0b:69:00:3b:
         a4:62:3c:a8:58:9c:66:86:23:c7:ac:5f:00:d0:ce:9d:1c:c9:
         22:a1:72:d2:b5:c0:38:03:6e:14:1d:38:47:38:8d:90:c5:af:
         06:7f:b1:7e:6f:79:f6:2e:05:df:1a:87:6b:3a:f4:c5:c5:7b:
         b7:62:e2:77:9a:9a:b0:52:7a:3f:ee:8e:1c:d2:26:d5:4e:82:
         90:e4:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:00:00 2025 by rpki-client