Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          D74PPRerzkgESBki3AOJbH3oJMF3ZgbZfIhBWp0wuGs=
Subject key identifier:   E8:E1:0A:80:0F:CE:48:27:A1:00:71:E6:1A:A0:DF:41:BD:20:FF:0B
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       0198530E2F5EA354F6A55AE6F70AF3A9A049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          15D6
Signing time:             Mon 28 Jul 2025 22:01:35 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:35 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:35 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: 6GrAttdppta7XkZw3fkyB/II95i4xTG3CH/lo5Ejy+I=)
                          2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:2f:5e:a3:54:f6:a5:5a:e6:f7:0a:f3:a9:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Jul 28 22:01:35 2025 GMT
            Not After : Jul 29 22:01:35 2025 GMT
        Subject: CN=e8e10a800fce4827a10071e61aa0df41bd20ff0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:5c:58:7e:91:74:e6:d9:27:b4:fe:72:56:
                    f5:47:66:b6:be:1c:3c:58:96:7a:8c:d4:4b:47:54:
                    cf:0c:f0:08:67:5c:f6:c5:2e:cf:bd:e4:4b:ca:bb:
                    78:49:c9:6f:b0:c7:38:ba:b6:30:a0:b7:75:a1:a1:
                    f3:15:de:89:d3:58:de:af:2b:8d:61:68:a5:da:4f:
                    53:9f:ae:39:96:65:0f:a3:dc:65:6f:7c:fb:90:a0:
                    cd:42:e6:e0:60:bb:2b:08:31:f9:fc:40:2b:ee:f7:
                    8d:4f:23:fa:e3:22:c5:1c:a3:d1:fe:19:26:03:35:
                    fc:89:b1:ca:6b:fc:4a:56:28:75:96:20:7a:cd:30:
                    31:52:0a:df:81:b0:c1:1f:05:3a:5a:85:f6:a5:8f:
                    2a:c1:05:a5:a1:03:af:4e:0c:46:05:42:3d:15:6d:
                    58:46:07:06:39:32:da:8f:dc:85:87:67:ef:b7:16:
                    fa:16:68:d5:33:f9:3a:48:f2:8e:44:fd:32:5a:f3:
                    be:f1:dd:8b:8e:2d:c6:ca:3f:42:7f:e9:bf:97:7b:
                    dc:43:1d:2e:2d:c2:c8:5f:1e:86:90:e1:0e:20:14:
                    f1:c4:38:95:53:1e:b6:4b:6f:6c:65:57:49:20:de:
                    71:7b:bd:9f:35:c2:55:59:21:14:0d:16:79:1e:25:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:0A:80:0F:CE:48:27:A1:00:71:E6:1A:A0:DF:41:BD:20:FF:0B
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:51:e7:09:55:32:09:fb:fc:86:a8:58:91:5b:27:21:83:
         62:74:dc:1a:85:6a:5b:73:71:d5:6b:33:38:81:39:bd:d3:48:
         d3:59:bd:0c:4e:b2:c3:27:95:45:bf:9d:fc:e1:5d:14:52:09:
         4c:ea:35:3b:60:ad:0e:a9:26:18:ce:a5:f6:fd:b0:b6:9f:9b:
         20:44:3b:ac:a1:d0:9d:69:dd:4b:83:00:74:9c:7e:c6:ba:0a:
         66:92:e0:5c:fb:e3:db:7e:7a:0f:88:13:ef:4a:f1:3b:4d:83:
         61:e7:2f:74:f2:17:f5:3b:fd:ec:68:b8:14:27:ef:cf:fe:85:
         45:b9:06:f0:24:b0:84:6c:f1:74:7d:a5:59:0f:55:6f:a5:c1:
         fe:3c:c4:d2:9c:e8:3a:10:04:dd:55:66:db:47:20:fa:a5:2e:
         e5:4a:47:75:dd:5a:36:21:b3:36:0a:14:5e:14:e9:43:47:0c:
         9f:60:b9:d8:e6:4a:d4:72:fc:1c:2a:13:94:95:1d:57:3a:44:
         f4:02:9d:65:bc:0e:68:70:4a:96:60:fc:ae:a7:c7:71:bc:53:
         71:a6:b6:65:39:3a:28:0b:f0:91:6b:ff:02:e1:0a:67:fe:9e:
         af:38:f9:6e:0f:cf:9c:66:1c:6a:47:96:f5:c1:c9:7d:58:86:
         a8:52:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:18 2025 by rpki-client