Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft (raw, json)
Hash identifier:          1TMwrtduH/oegldZ8GWU3YOJcYDaf2GuMoy9Mvbt0Qo=
Subject key identifier:   D2:55:12:CD:84:BB:6F:6E:5D:1C:B4:DA:A1:D8:B8:34:6C:6C:FF:D0
Authority key identifier: 7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Certificate issuer:       /CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Certificate serial:       019847E511983D75D4D38C925EAD3E9C6ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
Manifest number:          04C9
Signing time:             Sat 26 Jul 2025 18:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:51 +0000
Files and hashes:         1: T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa (hash: iEhvmxCDWE4QgoN0KDVC0nYZp80ZbJ35iTC3GWKtUXU=)
                          2: fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl (hash: S9vhxf+mABKJIMj08U+yn4nVBPQkksy31bpVMjk44Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:11:98:3d:75:d4:d3:8c:92:5e:ad:3e:9c:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Validity
            Not Before: Jul 26 18:00:51 2025 GMT
            Not After : Jul 27 18:00:51 2025 GMT
        Subject: CN=d25512cd84bb6f6e5d1cb4daa1d8b8346c6cffd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e8:ef:cd:4c:76:6e:e7:fa:61:93:eb:7f:4c:
                    94:9c:5d:7a:3e:3f:e7:c3:06:51:26:9e:e9:8f:99:
                    a9:67:8d:c3:d8:42:37:9f:40:f0:5f:cd:1c:18:36:
                    e4:06:27:fe:c0:62:82:da:a1:cd:f2:5e:a1:0a:46:
                    1b:43:2d:b8:65:bd:fe:7d:32:23:9a:32:e4:c3:4e:
                    e6:2d:80:e0:77:2d:f4:88:26:52:59:ac:87:cd:cf:
                    c6:59:33:c8:9c:bf:a7:52:46:ce:0d:c1:82:7c:17:
                    77:ee:27:9c:c8:4e:77:92:85:77:96:1d:d9:30:1c:
                    ef:68:9b:c1:94:20:8f:ff:5b:fb:89:3a:98:37:fc:
                    54:92:5a:5c:22:df:8f:5a:c4:5e:cd:37:95:ff:35:
                    e7:43:48:bb:fe:89:92:3e:fc:4b:2c:33:2f:cb:9c:
                    79:1e:75:b2:37:43:7e:90:d7:a8:63:79:6b:5c:78:
                    5b:af:e2:01:dc:38:64:10:b2:62:0d:66:c1:d9:e2:
                    bf:a8:66:27:4c:71:de:d2:80:49:61:70:41:70:2d:
                    50:9d:ad:0e:fb:7e:09:83:79:5b:01:4d:14:05:8b:
                    9c:cb:cf:d7:25:dc:66:97:08:32:62:e0:24:68:b6:
                    48:59:8b:1c:49:43:92:f8:c4:48:e6:eb:4e:e0:94:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:12:CD:84:BB:6F:6E:5D:1C:B4:DA:A1:D8:B8:34:6C:6C:FF:D0
            X509v3 Authority Key Identifier:
                keyid:7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:43:e5:b0:a2:f2:d1:50:1d:32:a8:96:f1:e0:47:34:ca:11:
         58:b6:28:89:5f:20:1a:16:41:f2:32:dc:d5:96:7d:68:ce:8d:
         37:11:15:7a:2a:cb:2d:61:7a:26:c0:e8:cb:1e:e4:72:84:b1:
         05:d0:a9:a8:08:a8:b0:8b:0f:9b:27:c1:e0:63:0c:da:2d:4e:
         e6:fe:2c:20:50:2c:f6:a5:38:11:d7:54:e5:b9:65:1c:28:a5:
         c3:1b:73:4c:ac:f8:13:06:94:e7:f6:e2:b9:96:77:a4:e3:ec:
         78:87:00:ef:98:9d:df:8f:0f:d1:00:e7:1e:93:92:3a:d1:be:
         ea:69:6d:58:95:f0:fb:f1:63:65:95:4f:9e:67:9f:f7:73:c6:
         e4:2b:a0:fd:ca:42:57:72:ff:42:77:1d:d2:0c:2b:70:db:30:
         ac:fb:ca:d2:d0:ac:03:5f:8e:40:86:38:e2:d7:63:a4:7d:0a:
         96:7a:de:fc:dc:f8:90:32:49:65:27:36:96:57:aa:c5:76:da:
         4c:a2:57:52:83:62:36:18:72:36:2d:3a:69:7f:87:b8:51:ca:
         72:b7:bb:82:02:46:ae:7f:33:3b:5d:42:ab:66:da:63:93:d6:
         f2:3b:01:cc:cd:d0:9f:59:08:c3:41:bc:50:6b:de:c9:9d:43:
         80:02:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:13 2025 by rpki-client