Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File:                     ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier:          +83r2NOGXjoISmLlhqyfxaCs/VwPB9dLiO2LoAEukX8=
Subject key identifier:   28:B1:0C:DE:9E:AD:B9:F4:F3:E8:F1:6F:48:53:8A:1C:D4:B8:C1:EF
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer:       /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial:       01985C11190330A652FEE6347C65988B2013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number:          0D68
Signing time:             Wed 30 Jul 2025 16:01:21 +0000
Manifest this update:     Wed 30 Jul 2025 16:01:21 +0000
Manifest next update:     Thu 31 Jul 2025 16:01:21 +0000
Files and hashes:         1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
                          2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: Gc9352KQOnsUWIrVgCLcw9G1Q4fw1XdfenNjO0Tybow=)
                          3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
                          4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5c:11:19:03:30:a6:52:fe:e6:34:7c:65:98:8b:20:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
        Validity
            Not Before: Jul 30 16:01:21 2025 GMT
            Not After : Jul 31 16:01:21 2025 GMT
        Subject: CN=28b10cde9eadb9f4f3e8f16f48538a1cd4b8c1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:86:c1:22:25:49:72:53:81:9c:33:6d:22:
                    af:14:fc:9b:21:32:d0:93:1c:d0:2e:66:fc:00:a9:
                    bd:fd:45:49:fd:1a:5e:02:e8:6e:e4:39:2f:fc:35:
                    cf:45:b3:a0:81:10:b5:c1:80:77:b7:eb:80:0d:c9:
                    be:8b:23:ee:8f:d0:90:0b:d3:49:4f:2b:04:25:d9:
                    05:ec:3f:ce:27:d3:0a:4a:7d:bf:51:f1:08:f0:8d:
                    b8:71:b7:08:d3:2c:cb:a4:07:03:0c:06:79:09:53:
                    0d:ef:68:56:bd:01:03:62:72:ad:77:6a:8d:0d:75:
                    fc:92:d3:0d:e5:12:a6:75:b2:8c:79:e9:29:8d:e7:
                    d3:b1:6c:24:44:5a:e3:08:96:d5:f9:63:ee:17:1c:
                    dc:7d:8c:fc:a3:b8:1d:f3:9a:91:b0:21:83:2a:89:
                    c5:35:4f:c5:44:ff:fc:0f:0d:bf:04:c4:c8:80:f3:
                    62:14:dc:1d:20:a7:f8:05:76:17:be:f7:d8:60:ba:
                    d5:e7:0f:56:d2:c8:29:69:65:12:78:80:4c:5e:c5:
                    17:55:d2:b6:6d:49:f6:b3:05:ad:a2:b5:f0:f7:08:
                    9e:82:c2:f8:76:cb:51:6d:d8:08:d7:43:c0:43:04:
                    8a:1c:c9:a1:44:bd:00:82:79:cf:f9:0e:8c:ad:da:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:0C:DE:9E:AD:B9:F4:F3:E8:F1:6F:48:53:8A:1C:D4:B8:C1:EF
            X509v3 Authority Key Identifier:
                keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:04:01:85:48:85:f7:fe:55:ca:7e:98:d6:77:7b:28:79:
         b0:3b:d9:18:59:3d:72:c9:e8:ff:9b:2d:8e:e5:f8:a2:4b:ba:
         e1:3b:be:26:a6:53:59:f3:28:93:59:f0:e1:4d:ec:c2:02:56:
         c3:18:3e:38:3a:d1:7d:8a:52:e4:db:2b:5c:0d:8c:d1:68:fc:
         bf:f8:f8:fb:82:a6:41:b3:fa:c4:aa:32:4b:78:c4:00:fb:d9:
         89:34:57:04:cd:46:70:a6:b9:f0:71:b2:48:7c:08:a4:a6:48:
         23:58:85:b1:81:fa:f7:5d:00:5f:39:31:cf:ca:5c:fb:55:11:
         a7:86:3a:4a:d4:a6:78:81:9f:f6:6b:72:72:8f:c6:96:bc:15:
         86:96:78:33:ca:b8:ec:b8:d0:9e:b7:b2:c7:e1:7b:9b:8b:cb:
         ce:c4:6f:77:32:6e:c0:26:5e:82:39:b5:32:51:c8:91:8e:90:
         ab:98:4d:33:cd:ea:d4:8b:f0:e9:64:69:40:2c:56:f9:37:8b:
         98:e5:08:47:5e:1d:67:80:77:0a:ab:f8:7d:51:08:e2:b4:d0:
         b6:fd:63:8d:46:da:ea:ab:d2:fd:d7:98:58:c0:f7:12:57:18:
         51:e1:04:08:ab:f2:9f:72:88:e6:47:f8:ce:49:ea:08:ae:06:
         4e:63:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:03:20 2025 by rpki-client