Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          Kteg0qjckH6QRD5AjDxYRWSF7Mp5nNIYhnXDGvNVVJA=
Subject key identifier:   33:7C:98:4B:77:96:48:95:39:47:C1:39:21:DD:14:42:05:55:62:EF
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       01984A77A2A8B6A78A074BE69C4423F8056B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0BF8
Signing time:             Sun 27 Jul 2025 06:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:11 +0000
Files and hashes:         1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
                          2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
                          3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
                          4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: SJGfx7LVbUsjSs2a36+gLF2osj6Kt6wEPo5/iXignSg=)
                          6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:a2:a8:b6:a7:8a:07:4b:e6:9c:44:23:f8:05:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Jul 27 06:00:11 2025 GMT
            Not After : Jul 28 06:00:11 2025 GMT
        Subject: CN=337c984b779648953947c13921dd1442055562ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:2a:aa:af:f2:0f:7a:cd:e1:ac:e3:b1:5d:
                    86:9f:9f:8d:70:6e:03:5b:16:8c:13:81:50:3c:67:
                    73:a6:5a:9a:cf:3e:83:69:d0:f4:59:42:3d:0f:91:
                    d5:9a:29:49:39:5f:99:0c:0e:bf:0c:ee:4e:04:61:
                    6c:89:57:76:4f:ff:7a:af:74:90:8e:81:88:a0:f2:
                    e0:36:f8:47:8a:7a:67:2a:45:9e:56:36:a1:1f:06:
                    95:95:45:69:cc:a3:2e:e6:4c:71:5d:ea:cc:8e:f6:
                    d5:bc:34:7a:a5:40:5a:c5:19:3c:1f:57:a9:bf:13:
                    7f:7f:d4:fd:5a:3b:39:f3:bf:2e:7d:c9:c6:1f:51:
                    58:1b:66:58:3d:1e:22:2d:ba:a9:2e:c4:c8:67:63:
                    cc:c0:4e:1e:25:e6:60:23:31:52:e7:05:e0:06:bc:
                    a0:0c:2e:ce:f9:d7:34:06:7c:cd:89:d2:3c:e7:02:
                    9e:7d:04:1d:77:3a:e8:af:56:b9:28:9a:f1:3d:bb:
                    22:7a:7c:93:58:58:a9:40:28:75:c9:d4:82:66:f0:
                    e3:0b:2a:c4:0b:c0:14:c2:2a:65:53:d1:56:50:29:
                    0c:6b:eb:38:6a:20:21:ad:85:b4:99:1e:44:0c:d8:
                    ca:b9:a5:74:d8:58:2e:f4:ae:2c:6d:74:c9:28:9d:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7C:98:4B:77:96:48:95:39:47:C1:39:21:DD:14:42:05:55:62:EF
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:b0:27:02:e4:3a:29:2b:a8:83:d1:9d:5f:3a:39:ea:62:
         f6:1e:e3:86:4a:b2:cc:c4:60:71:6f:ad:e0:8b:42:c4:6f:5d:
         0a:d1:dd:12:09:5f:92:80:bc:bb:88:45:db:66:ef:1f:fd:6e:
         00:fe:7b:66:73:9f:94:72:cb:c4:ad:1b:58:b3:7e:43:d8:ad:
         15:fd:8f:4f:05:15:22:c6:8a:eb:ef:65:dd:bd:5f:de:50:1b:
         9b:ec:a5:cc:12:1f:2e:2f:6e:ef:f1:b2:da:b0:6e:37:5c:de:
         b3:9b:6d:95:31:33:17:bb:6d:bf:a9:44:d2:7c:8a:84:a6:7b:
         bf:51:65:38:0e:f4:06:32:ce:fd:b9:45:36:2a:9e:40:09:07:
         c0:6a:58:9a:89:9f:18:23:81:84:de:3d:6f:88:52:d0:4b:78:
         93:8c:e1:69:64:0b:f0:30:8d:2f:c4:6d:f5:63:d2:6f:98:62:
         1b:b7:04:e8:6d:00:76:53:5a:a3:ec:d1:67:13:2a:c3:94:4c:
         b2:8b:59:b0:7f:51:14:1c:ca:bf:a3:e0:86:58:b9:b7:87:a7:
         f9:02:22:2e:d2:42:61:8f:3a:27:5d:c0:0f:38:41:54:85:1f:
         6c:d3:fb:21:08:f5:69:fd:e8:cf:58:f6:3f:93:0f:65:e7:a7:
         19:8d:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:31 2025 by rpki-client