Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          wR27X2g9n22Fiyo6niaTCsyLGksVEDipH7MlAvvnrCY=
Subject key identifier:   AA:EE:3C:4D:64:8F:1E:0B:3A:E5:FD:75:72:7E:1E:C2:33:06:E2:2E
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       01984A0A1F90CCDDFA67029384CA28068203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 04:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:34 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: qmwzUCUI4G5FjqFhgiOuRCmDRHYTqWaKdcKd9yoOhpQ=)
                          2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:1f:90:cc:dd:fa:67:02:93:84:ca:28:06:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: Jul 27 04:00:34 2025 GMT
            Not After : Jul 28 04:00:34 2025 GMT
        Subject: CN=aaee3c4d648f1e0b3ae5fd75727e1ec23306e22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:6a:e8:44:d9:f1:6f:05:cb:87:92:97:41:
                    af:13:10:92:25:bc:78:7e:e8:98:b9:0d:32:18:55:
                    13:77:12:b8:91:98:ef:22:3c:48:a6:6f:ad:77:fa:
                    2e:60:fc:16:35:33:81:eb:f1:ac:e9:cf:2d:87:04:
                    56:9a:99:c1:a7:cc:4d:73:d1:ae:d9:99:f7:2f:6d:
                    ea:08:fc:18:87:25:90:83:11:e9:f9:74:ad:18:68:
                    d2:08:cd:7d:07:fc:6a:12:35:3f:be:c8:79:03:0e:
                    9a:36:77:ab:bc:43:be:a4:8e:e8:fb:75:aa:45:10:
                    61:ff:9e:93:6e:84:d0:91:ab:1e:49:6d:98:c1:c8:
                    24:fe:31:80:0d:ff:3f:e2:4f:09:bd:80:80:39:d0:
                    ca:66:82:98:c2:4b:bb:bc:e7:3f:9e:e6:e5:82:ed:
                    76:e7:d0:e9:cc:ac:10:43:ad:5d:3e:d1:5d:a2:a3:
                    4d:45:39:a7:65:82:04:6f:30:4f:66:6c:af:b3:5c:
                    69:6e:67:03:0d:ab:61:d6:2e:10:5d:a4:5c:1a:4f:
                    8e:39:6c:66:d3:21:ac:70:ac:fc:b8:bc:ab:5f:2a:
                    e6:a6:7e:f1:cc:0b:62:68:63:ab:d8:dc:70:3f:fa:
                    00:b1:14:10:c8:ba:df:0b:0a:fb:15:93:0f:1c:2d:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:3C:4D:64:8F:1E:0B:3A:E5:FD:75:72:7E:1E:C2:33:06:E2:2E
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:20:83:77:0f:9c:d4:8e:12:63:90:33:a3:7b:3c:92:77:3a:
         34:40:7f:94:85:5f:35:3c:34:ca:9f:c5:7f:58:ee:2f:7f:9f:
         f2:e2:1b:53:45:e4:a3:ca:02:22:d6:a9:72:4d:d7:1b:59:5f:
         cd:4a:f7:6a:10:dd:f3:5d:c8:e3:76:d0:33:50:95:23:7b:57:
         d1:62:60:a4:31:a9:52:7c:7f:e6:ba:05:7b:ad:6c:f5:c0:cb:
         3b:4a:eb:43:c9:af:56:6f:f7:05:9b:05:02:4b:08:81:15:98:
         75:68:39:18:f6:2c:04:4d:0b:79:ae:cb:66:ee:94:59:5c:95:
         9e:a2:2c:b6:24:0d:9b:e7:dd:3b:c1:26:a6:2c:94:2b:89:98:
         c9:d4:8d:3e:11:1a:80:b1:58:8c:23:64:2e:f6:38:f7:8a:10:
         6b:43:2d:49:00:c6:65:14:c0:80:44:e9:64:09:65:15:98:3f:
         1f:b6:0a:2f:5d:c5:03:2f:44:68:a3:00:8c:90:fc:8d:8e:f0:
         0b:0c:49:5e:16:84:18:5b:0d:b2:e0:ff:52:57:b8:61:79:35:
         17:aa:c9:26:96:75:ba:62:ff:a7:86:1b:15:a0:5c:5d:ce:9f:
         a7:7e:09:f1:1b:74:a7:2c:e8:61:8c:b1:d4:3b:c4:c8:61:30:
         57:0f:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:56 2025 by rpki-client