Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          KZ8T2hVx5RvOrfdDZ+W/xPI6rET1jdJzoZpuCHMST6Q=
Subject key identifier:   13:65:83:60:C7:1D:DB:5F:5A:A4:05:D0:8D:95:2F:10:E4:9D:0F:61
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       019845F686B6755C77D614007843FC5D7B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          0FAC
Signing time:             Sat 26 Jul 2025 09:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:40 +0000
Files and hashes:         1: GM4FjF5iGCwwZrvF5OPLK7EJcKc.roa (hash: TNBXDdJILbU4GHZNotTea3UIv8zTS99ELWCKcINIuvk=)
                          2: cMpaW7cVC0wOITYTuoFWwIF5n44.roa (hash: 4diQ6JOCI3p/sKjl0F+QVRHdBT8AYRe0IlWz174rlII=)
                          3: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: 1abp4DnEbaiLkDzc1OC5BIUW5GyZO/XCQGxvK9xYPgM=)
                          4: q11-oGTlQe1qTZRc7a_TUm1IpLc.roa (hash: LcRd4esaozcBtrhM5u7DUki+tNg95Mjqju0EcrMRViM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:86:b6:75:5c:77:d6:14:00:78:43:fc:5d:7b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: Jul 26 09:00:40 2025 GMT
            Not After : Jul 27 09:00:40 2025 GMT
        Subject: CN=13658360c71ddb5f5aa405d08d952f10e49d0f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:72:8b:bc:96:f3:bc:32:68:9b:16:d2:26:
                    f0:c6:ad:b1:9a:9b:9f:6a:30:3d:22:34:fb:d9:cc:
                    79:49:b4:39:37:be:c9:a7:9f:9d:55:a2:40:fe:04:
                    13:f9:15:e2:cd:d1:ef:ef:dd:4a:8a:9e:56:b0:f6:
                    3e:dc:63:27:f9:70:b3:07:56:0b:fd:b7:4f:bc:50:
                    cd:c9:70:9e:56:cd:cb:62:ca:02:9d:33:4d:ea:c9:
                    90:37:40:2d:ed:69:9c:63:79:50:5d:5b:3d:0e:f4:
                    4b:92:6e:86:c4:a1:3f:e8:fc:a4:17:37:7f:22:fa:
                    3e:62:87:95:f8:43:83:55:0a:bc:e1:1a:20:b6:b3:
                    bf:c6:92:91:2c:ff:a9:4a:ea:fe:b1:17:35:cc:0b:
                    f2:7f:8c:19:21:c3:f0:bf:ad:b2:8b:5f:fe:0b:09:
                    75:00:45:0e:78:2a:56:fa:a9:55:0a:4b:1b:88:25:
                    f6:e1:f2:62:88:88:7a:b0:9b:95:60:93:6d:df:78:
                    78:c4:f6:e8:c0:e2:87:7a:8a:49:e6:9f:f5:cd:b2:
                    5e:cc:02:9a:dc:4c:26:05:b4:2e:6d:03:d9:52:21:
                    e5:fd:41:d9:38:6d:3f:7b:1e:ee:86:e3:63:15:9e:
                    b9:39:86:dc:1c:06:b3:98:06:e6:08:42:6a:f0:2f:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:83:60:C7:1D:DB:5F:5A:A4:05:D0:8D:95:2F:10:E4:9D:0F:61
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:ca:92:7c:bd:08:09:f3:b8:1a:2a:81:44:bc:28:01:33:
         7b:69:ff:e0:cb:18:53:19:2e:be:57:78:35:af:18:51:e1:59:
         c2:4e:a3:13:25:b8:84:3b:01:c0:30:34:8e:a8:bf:c1:54:34:
         9b:7b:e7:47:16:5f:27:17:cc:d8:77:ff:53:8d:7c:d6:67:9c:
         03:95:ea:1c:c7:39:90:b5:32:84:1e:40:91:c7:15:f0:7d:16:
         c5:f4:f4:ec:6e:98:d4:f6:9d:b4:53:dd:df:e4:b6:a1:34:1d:
         50:2b:04:6f:a8:a3:d9:70:63:83:4a:d7:c8:8c:89:c4:fc:5b:
         e9:e5:2f:30:80:a6:dd:66:6c:52:fd:99:5a:5c:12:ea:c0:85:
         c3:7a:fd:e2:33:fb:8b:cc:19:e0:b8:02:20:0a:a7:65:a6:7d:
         00:75:e0:da:4d:0f:6f:14:a8:c9:ac:a5:aa:93:80:c9:07:eb:
         ac:44:5d:a6:8a:33:7d:27:e5:b8:d5:47:bd:d1:77:83:e0:a0:
         e3:2a:a7:c7:cc:8f:f5:5a:b7:83:35:e0:10:11:26:59:8b:d1:
         92:07:3a:1d:5e:50:da:cd:f5:ad:b8:1c:d0:57:d7:6b:a9:c4:
         d9:3c:f7:e7:44:77:fa:da:f3:22:f7:79:79:35:df:93:b6:59:
         f0:96:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:26 2025 by rpki-client