Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          F3ykwNkBeyQAZx3KMZkURLO+/64xBBY8q+1FG4EgtMs=
Subject key identifier:   0D:A0:3C:7F:F7:2C:6A:EF:AA:05:86:90:16:3B:AA:5B:71:E9:B8:7B
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       0198530E6D64609E1A2B5D39B77D3A341092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0826
Signing time:             Mon 28 Jul 2025 22:01:51 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:51 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:51 +0000
Files and hashes:         1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
                          2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
                          3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: htMx0We/F1yALIIOVb1zuhgG082ABZNyGNvxdlBHIUA=)
                          4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
                          5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:6d:64:60:9e:1a:2b:5d:39:b7:7d:3a:34:10:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Jul 28 22:01:51 2025 GMT
            Not After : Jul 29 22:01:51 2025 GMT
        Subject: CN=0da03c7ff72c6aefaa058690163baa5b71e9b87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:ee:f3:6c:09:3f:ed:2f:cc:ef:2c:d9:49:
                    e1:f4:77:55:f0:d4:ba:71:17:52:a5:31:f5:8c:41:
                    ce:99:38:0f:7d:78:ba:74:45:44:b9:f6:77:26:44:
                    4d:d5:78:66:b4:07:27:ba:a6:2b:8b:cb:2d:7f:5a:
                    a2:a5:85:f4:e7:9f:a3:01:92:f3:27:f0:9b:7b:9c:
                    85:0e:49:49:66:a0:d8:cf:1a:9d:6b:a0:07:da:54:
                    37:e7:d0:ec:27:83:69:48:d0:8e:17:23:cf:99:48:
                    a7:18:a3:ad:59:f4:3c:99:fd:10:ef:70:cd:40:b4:
                    93:07:5a:a3:2f:14:65:d8:33:96:98:24:7c:54:a2:
                    93:8e:b4:8d:1a:c8:97:93:5b:36:ae:15:78:26:7d:
                    27:e2:37:46:76:b1:d8:3e:b8:1e:ff:ed:a6:88:65:
                    fc:62:72:04:61:6e:2e:15:7f:fd:14:4a:a1:80:13:
                    45:9c:ab:aa:53:00:99:43:2a:f8:4d:f8:07:fa:b3:
                    00:98:f0:22:5e:bf:22:05:25:5a:a6:11:f1:6e:c9:
                    e6:97:b2:6a:9f:4e:c1:40:6b:a1:b9:1b:7d:bb:67:
                    98:a6:2d:6d:b3:0a:2b:c6:d3:35:63:57:87:dd:3f:
                    5a:09:b5:49:0a:53:a3:5d:5c:1a:fb:18:38:d7:9f:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:3C:7F:F7:2C:6A:EF:AA:05:86:90:16:3B:AA:5B:71:E9:B8:7B
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:3c:45:62:be:7f:23:aa:46:f5:a9:8f:85:36:9a:4c:2f:
         47:f3:8d:ac:08:8d:cc:e8:6e:f7:a2:28:6d:86:1d:f5:dd:1c:
         a5:8e:b4:a0:d1:f7:73:86:b9:2a:a9:61:dc:09:0c:9a:a5:e7:
         f2:d6:31:54:f8:78:ec:df:e4:c5:29:30:15:3a:c8:e8:14:16:
         96:fa:ff:db:cc:8a:3f:05:1c:df:b2:04:06:63:be:79:28:11:
         da:14:3f:6f:e1:b2:30:23:0d:b6:4a:d7:bf:0f:13:49:00:ea:
         7d:3d:eb:fc:b4:f1:cc:f8:57:07:70:22:dd:cc:5e:07:bd:cd:
         ff:6a:fe:75:06:06:29:8d:67:4d:ea:f7:d8:e4:8b:08:37:8c:
         c5:4d:8a:e2:e7:9c:72:f3:f2:f8:aa:07:d8:6e:5d:30:91:00:
         67:50:19:16:07:b6:b7:49:c9:9d:bc:99:70:20:e9:dd:b8:f1:
         11:0b:d2:e8:7f:40:ca:2a:b7:77:1c:01:3a:37:ae:0f:df:7d:
         79:79:b9:de:39:b4:9a:30:fd:b3:6e:66:cb:00:8a:99:c0:36:
         30:73:56:f3:91:53:bf:7b:ae:42:6f:21:70:4f:f3:83:1f:11:
         d5:76:fd:52:68:85:97:b8:0a:e4:dd:34:6e:1c:a1:cd:82:d3:
         ed:01:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:06 2025 by rpki-client