Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          803DtQsEOlxQvG+nqvsekuQpOVGIlBL6YsDxs0f+5MA=
Subject key identifier:   28:0F:E0:8B:8F:65:B8:CE:01:59:4D:47:80:D9:63:D3:0C:22:35:E2
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019847E4F490878C43073A645DDCCF868C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          033E
Signing time:             Sat 26 Jul 2025 18:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:43 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: QnxJMt2IztaOrN9cDL0uK6McP7vLfPmHMQqfZGPYJSM=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:f4:90:87:8c:43:07:3a:64:5d:dc:cf:86:8c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Jul 26 18:00:43 2025 GMT
            Not After : Jul 27 18:00:43 2025 GMT
        Subject: CN=280fe08b8f65b8ce01594d4780d963d30c2235e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:fe:f0:6f:15:10:38:69:ea:76:1b:e1:38:
                    7c:7a:ec:7b:5c:7d:ed:90:2f:7a:2b:a2:46:0d:8d:
                    ff:4d:4f:83:10:04:c4:ef:50:4e:d2:42:34:35:8e:
                    1f:65:56:d5:a6:cd:34:a5:23:cd:23:58:85:80:ac:
                    64:a8:c8:2d:d2:fc:d4:28:6e:2a:16:84:b0:c9:62:
                    ce:51:fd:dd:9e:c2:cb:0b:e3:f3:98:25:72:91:54:
                    0d:2a:12:1d:08:7d:7c:7e:ff:6d:bd:1f:ef:f8:de:
                    e9:38:af:8c:f8:ef:c6:e9:9d:39:0c:8f:06:dc:17:
                    49:f5:26:99:f0:42:62:db:dc:f7:17:41:26:a9:1d:
                    96:bf:41:97:d7:19:96:bb:bb:21:80:e4:82:f5:b3:
                    af:e7:11:24:ee:38:b9:a0:0d:cf:0b:61:28:36:ac:
                    5a:7b:c4:28:99:e1:28:ca:38:62:ab:8a:4f:fd:d6:
                    1d:2d:16:31:df:81:50:e2:6c:a0:87:d3:ed:93:2e:
                    81:77:f4:f5:20:f9:92:59:a3:20:53:a2:52:1c:5c:
                    a6:b8:d5:48:36:c7:68:d1:cf:80:4c:a0:d1:49:af:
                    ad:fa:ce:83:5b:fa:8e:2c:ab:a1:f2:8e:2b:13:77:
                    a2:cd:32:52:ae:08:f2:72:55:62:c6:d0:d2:35:a9:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:E0:8B:8F:65:B8:CE:01:59:4D:47:80:D9:63:D3:0C:22:35:E2
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:48:97:a1:2b:ee:76:6f:20:f6:8d:89:b9:e9:ed:db:10:e9:
         70:09:23:4c:ff:d9:13:55:88:0e:1c:5b:ee:4d:5d:20:d3:f8:
         6d:b0:31:18:6b:98:2a:b8:87:a6:cf:7a:6b:f3:bc:03:1b:04:
         37:c1:f4:e5:e8:05:cf:33:d4:75:08:7d:87:74:e9:98:d3:c5:
         d3:7c:6a:19:7e:43:50:ed:b9:88:62:15:c4:dc:34:f0:5e:26:
         7f:f6:ab:08:53:f7:de:4b:84:84:b1:3a:c7:4c:df:32:e4:c8:
         e7:b3:39:a2:9f:ca:ae:c0:46:ee:da:fd:af:be:59:65:a8:1b:
         81:05:29:fa:3c:34:d4:d3:e0:35:2b:ce:90:46:7f:e9:f9:00:
         63:16:9d:47:23:09:db:62:01:4a:7f:09:8c:5d:d0:62:61:c4:
         1f:61:3d:02:57:92:ef:e0:e1:8b:b2:00:e0:8d:0f:7b:58:42:
         4f:f2:43:93:01:df:bd:5e:90:85:f9:f8:22:8d:14:67:5f:ee:
         40:74:92:51:4c:f9:d1:b7:57:e4:1a:63:fa:68:50:66:36:b2:
         23:40:a6:df:3a:44:94:9c:e3:07:71:05:85:00:7b:c0:86:e0:
         30:ba:bd:28:e2:1f:c8:fa:6d:08:95:b7:fe:b3:3c:d6:58:bb:
         cb:9d:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:50 2025 by rpki-client