Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          A0SK+1NGuajSWreND0ho2cydbytW4Cb9/AT/qJgqP6M=
Subject key identifier:   F0:0D:69:9B:AF:84:E4:38:F7:C8:75:DD:18:BA:97:A6:2B:EB:07:FD
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019835709DCD18622EDEB63EFB93B49904C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          12ED
Signing time:             Wed 23 Jul 2025 04:00:29 +0000
Manifest this update:     Wed 23 Jul 2025 04:00:29 +0000
Manifest next update:     Thu 24 Jul 2025 04:00:29 +0000
Files and hashes:         1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=)
                          2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=)
                          3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=)
                          4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=)
                          5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: buH9WlzsTrXkyRfLxxdl71n9fBrmAjnOKm/GoCX02vU=)
                          6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=)
                          7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=)
                          8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=)
                          9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=)
                          10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=)
                          11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=)
                          12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=)
                          13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=)
                          14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=)
                          15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=)
                          16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=)
                          17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=)
                          18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=)
                          19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=)
                          20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:70:9d:cd:18:62:2e:de:b6:3e:fb:93:b4:99:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jul 23 04:00:29 2025 GMT
            Not After : Jul 24 04:00:29 2025 GMT
        Subject: CN=f00d699baf84e438f7c875dd18ba97a62beb07fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:66:6c:6b:2c:d0:bf:6c:ff:d2:d4:a7:57:
                    f4:f4:b1:e8:29:4f:f9:ab:fb:6e:95:09:58:cf:05:
                    f6:57:ef:08:b0:9d:67:2e:69:0b:26:07:e3:ba:e2:
                    1a:2d:2c:39:f1:6f:19:7f:c3:bb:26:52:11:2d:95:
                    0b:69:f1:51:38:c5:13:57:86:ae:21:d9:1e:e8:cf:
                    27:18:36:2f:05:da:4d:a4:0a:8c:f1:ff:7a:e1:97:
                    f2:db:cb:9d:b6:ec:ff:7c:4e:2c:83:0a:cd:9e:3e:
                    cd:67:c4:00:cd:02:14:45:85:c7:0a:43:c3:12:cc:
                    68:16:89:0a:30:43:42:c7:58:da:5d:38:e4:25:81:
                    37:82:9a:85:22:70:d9:10:bc:7b:c8:7c:f6:97:97:
                    a7:eb:70:00:e3:cb:c6:c7:75:2e:99:21:1f:f5:d8:
                    b4:d3:eb:1d:2f:a2:63:05:2e:d4:04:35:32:4c:31:
                    4e:5b:0b:e9:b7:8a:3e:75:f9:b9:8f:5d:57:d4:f3:
                    c2:ff:8d:0e:fb:d6:8d:74:65:3d:d3:94:e9:ba:a8:
                    36:d7:79:ae:e0:05:06:24:d2:46:9d:5a:cc:07:9b:
                    ec:7a:9e:26:f1:ec:c9:ca:2f:f5:11:05:2d:64:2a:
                    c0:2f:93:9d:37:7a:f6:76:80:4b:bc:f4:d0:11:ba:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:69:9B:AF:84:E4:38:F7:C8:75:DD:18:BA:97:A6:2B:EB:07:FD
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:8a:ab:73:f9:89:67:b4:fb:ee:46:db:55:c4:6e:31:b1:
         8f:33:57:8f:5f:77:a7:12:fa:28:f9:31:c8:45:e3:02:79:22:
         36:ff:20:5b:45:d9:82:ca:34:0f:46:ed:11:1d:39:19:a8:87:
         f6:48:ab:32:5d:89:13:ce:1c:b4:67:ed:3c:11:de:ff:7a:ea:
         61:89:a4:e0:b8:41:a7:6c:df:8c:e3:5d:86:7d:e9:93:a0:2e:
         7a:bd:49:b9:13:a3:b4:75:ef:17:26:c0:b6:12:14:69:93:31:
         85:fa:46:d8:02:44:39:47:e0:53:31:4a:e1:f8:15:6c:63:90:
         0c:29:b5:10:3c:e3:c1:b7:e3:b3:c4:41:98:d2:d1:0d:80:03:
         48:27:6a:c2:26:ba:c5:91:e5:c3:be:b7:ce:bb:06:fe:83:24:
         67:f6:55:d2:13:1a:4b:51:b6:67:1b:6d:28:b8:51:eb:53:59:
         88:c0:f7:96:ff:b9:1a:c9:01:c9:f8:40:3c:70:de:6c:b7:3a:
         84:00:25:0e:e4:43:12:82:40:3b:fc:5d:ed:24:11:61:c5:9e:
         6f:ed:ce:b4:9c:42:be:4c:bb:57:e7:40:9d:67:b3:15:d6:80:
         54:b9:a3:12:51:69:6e:08:55:18:52:e7:39:09:26:89:da:9a:
         c7:dd:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:32 2025 by rpki-client