Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          aTnIXhlyHURCgGTqXRqphMUYeqwXRZGpfGsNtyfUOME=
Subject key identifier:   6A:C3:5B:9B:BD:B7:B6:E1:54:9B:70:C2:8F:60:FB:5F:77:D3:85:B1
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       01984966070A83A9EEA27AE13E0358F8E271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 01:01:19 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:19 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:19 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: 7n/mhXiGFYo3XGcmUr1nPZZr30eKD4ufCelP/h97BbI=)
                          2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:07:0a:83:a9:ee:a2:7a:e1:3e:03:58:f8:e2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: Jul 27 01:01:19 2025 GMT
            Not After : Jul 28 01:01:19 2025 GMT
        Subject: CN=6ac35b9bbdb7b6e1549b70c28f60fb5f77d385b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:0b:c1:34:a0:18:db:dd:ba:36:23:6b:a8:
                    ad:14:e7:af:fd:2d:46:66:d7:9e:44:9a:21:8b:42:
                    3b:5e:5f:e2:fc:6b:b7:f1:8a:ea:09:46:77:bf:05:
                    77:eb:40:89:11:2f:76:29:25:f4:ec:fb:a9:8a:1c:
                    cd:4a:1e:6b:2e:96:c6:17:28:f3:90:df:5e:0c:0e:
                    1f:a7:72:4f:c3:49:b5:35:2b:26:67:b6:2f:07:cd:
                    40:53:0c:82:dd:1a:a0:31:9c:71:ed:1b:eb:37:7f:
                    30:c0:c0:72:f1:3d:8a:ef:65:6b:45:66:82:3b:e3:
                    ac:7d:4d:a6:81:d1:77:85:3c:09:e7:34:e3:0b:54:
                    39:b0:d5:48:0c:e0:14:f2:5e:c5:ba:a9:80:f6:28:
                    8f:e4:03:31:52:6f:fc:aa:da:e5:11:80:1e:54:b2:
                    a5:c2:7e:39:4f:23:8c:d5:ee:14:a2:f9:64:68:c3:
                    83:f4:3a:87:aa:48:80:25:30:c2:23:26:88:97:50:
                    b2:e1:d9:5d:7e:f5:ab:b5:2a:2f:e1:39:fe:68:56:
                    28:64:46:69:80:2c:60:96:df:3e:16:27:07:32:c1:
                    80:62:ae:9a:dd:93:16:93:66:d0:d1:1f:f4:da:4a:
                    9a:4d:a5:59:8d:fb:23:3c:b7:1a:af:b2:15:66:d2:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:5B:9B:BD:B7:B6:E1:54:9B:70:C2:8F:60:FB:5F:77:D3:85:B1
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:59:05:e5:b0:c6:e2:a4:4c:d5:35:3c:c1:51:38:c6:59:d4:
         ca:ed:ac:65:56:2d:79:e2:82:40:8d:5e:dd:48:31:97:e6:4b:
         84:de:a1:08:5d:68:89:75:15:44:f3:0e:d7:a8:a4:10:8d:9e:
         3f:65:14:36:cf:de:86:b6:a9:fc:7d:29:a1:6a:10:da:49:a1:
         c9:84:b0:85:25:bf:25:ee:1f:7a:d5:07:2e:65:5a:96:d1:aa:
         a8:7d:b5:8f:28:6a:d8:36:d9:8a:ab:a1:38:17:b2:55:9c:79:
         db:a6:bd:2d:ce:0f:cc:23:00:56:84:0c:92:a2:ed:72:68:4d:
         36:06:95:43:35:96:fc:25:7b:9c:5d:0b:3c:86:23:c4:ee:50:
         07:d6:21:38:ff:34:18:17:95:52:68:0f:24:c5:ee:b4:f2:01:
         b7:d1:fe:4d:cd:e2:ca:53:e7:0b:87:8d:f1:38:b1:9c:ad:93:
         e4:48:b3:3e:24:61:a5:62:82:f5:a2:bf:04:60:e9:b7:8e:4c:
         4c:c6:a3:1f:48:e8:d1:8c:7f:5b:b4:22:3f:69:34:cd:26:b9:
         a4:24:4c:62:ba:6f:26:c5:db:e1:96:f4:a7:15:30:dc:fb:51:
         97:d0:ea:cb:6d:be:fb:d6:e6:ba:77:4c:64:d4:f9:ee:08:ec:
         95:59:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:15 2025 by rpki-client