Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File:                     cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier:          +4qT/yUXiD/qL9nLr2pONgz0WC0uFCbfEcP+LvYp55E=
Subject key identifier:   21:CB:C9:53:E3:25:4D:FF:3D:AE:73:FA:0F:A5:26:59:5A:F4:8C:54
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019838DF74DE8634DE3BDB93D0F9E711D955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number:          15FB
Signing time:             Wed 23 Jul 2025 20:00:25 +0000
Manifest this update:     Wed 23 Jul 2025 20:00:25 +0000
Manifest next update:     Thu 24 Jul 2025 20:00:25 +0000
Files and hashes:         1: 9GpBlLtfTSGwtwmapQ1fHjDSL74.roa (hash: cQGV65QLMLrxeunkDqMGv2/A1B8DKG8uRXwHYjzRdog=)
                          2: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
                          3: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: cjBiGWddBB65yHgyUof0j5uuM9NjlAakIA23D4Qov1s=)
                          4: fxey-d2NI5gsqRXb0UikDcRQ4Hk.roa (hash: mnGLtOe1Pde5CCQx8NNLqfN+Rs/Jpu9t/4yCNDHWIJo=)
                          5: k2cy-dpR9M4bnBgU53KrEJqTZ6Q.roa (hash: 8tyXNOmPdOoM3Bxwfs7taxKxeuKoZ5xeHwq+hSOSI5I=)
                          6: qOUhVI1G4SW4_rAdHVZjiGEJEhc.roa (hash: mLpbGQvUh3BNlZYktMPLqJ4KDfxwOCyR9t25dQjnDY4=)
                          7: vSbN94Ek0qh8lp5raW_jsP7StDw.roa (hash: 1IiSvDv/oRATuWSTCJqnhBPY0+TbN0vkktYsEqhhKcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:df:74:de:86:34:de:3b:db:93:d0:f9:e7:11:d9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Jul 23 20:00:25 2025 GMT
            Not After : Jul 24 20:00:25 2025 GMT
        Subject: CN=21cbc953e3254dff3dae73fa0fa526595af48c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:12:7d:71:77:f2:cf:48:de:9b:bd:a3:89:
                    38:8a:62:87:df:e4:26:3a:5b:46:32:c4:f2:8b:53:
                    7b:89:4b:44:f9:29:57:e9:54:0f:fb:1b:72:fc:83:
                    81:f5:08:0e:6a:2a:c5:4d:df:9b:7e:23:9f:02:1d:
                    21:99:9c:1f:02:79:87:45:61:36:80:89:d9:69:09:
                    10:c2:0c:56:17:90:97:e4:96:f3:30:1a:8f:b1:eb:
                    0a:22:cf:83:3e:a9:f6:4a:56:e3:0f:ad:57:f2:7f:
                    47:36:4a:a1:94:aa:59:a3:4f:66:10:58:40:a1:fe:
                    19:9d:c0:d2:6e:77:69:f1:3e:a5:20:57:d0:b5:c9:
                    f8:36:50:19:00:12:4f:cb:c9:64:b7:66:0e:21:b7:
                    a3:83:7e:67:a7:0f:0c:d4:00:b2:19:79:17:4a:20:
                    2c:5a:38:7d:4b:fc:ed:4c:b4:77:df:bd:22:00:55:
                    28:6e:59:fc:55:c2:40:b8:62:3d:07:1b:6d:87:d5:
                    80:91:6a:eb:ee:b9:8b:5c:05:c2:48:03:6a:16:72:
                    a9:02:e8:9e:58:e8:43:7b:84:b1:3b:86:f3:12:41:
                    03:65:fb:6c:c8:fe:cd:b9:7f:e0:23:a3:a6:22:ec:
                    ff:1f:f8:b4:8a:0e:48:ac:87:f9:76:8a:05:f9:9d:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:C9:53:E3:25:4D:FF:3D:AE:73:FA:0F:A5:26:59:5A:F4:8C:54
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:66:62:e6:3a:60:32:20:96:58:87:2b:da:97:c5:4c:3c:
         43:47:33:60:e6:73:2f:07:c7:82:78:ed:9c:4d:58:d8:db:92:
         c5:bc:0d:e8:d7:61:45:69:b1:6f:75:34:35:18:d8:0a:4e:18:
         66:72:44:f0:8c:cc:06:ea:3b:f7:6e:ea:ea:c3:b5:2a:5e:74:
         f7:7c:80:84:e9:5c:a8:93:2b:7d:68:a3:9c:1a:46:cb:38:f1:
         cf:d5:c3:60:b5:ab:69:54:c2:cd:6d:c7:e3:a0:73:68:01:86:
         fa:fb:fc:63:a0:4d:b9:41:f1:46:fe:3f:99:1e:b9:d7:6a:0d:
         27:ad:bc:92:1b:00:69:fb:5c:98:65:45:8c:4e:c0:e6:67:98:
         fc:f8:12:7a:94:12:ee:11:1c:6e:b3:c3:aa:42:e7:9c:fb:8f:
         1a:d2:25:3f:aa:f1:57:25:79:20:b3:7e:d5:c5:21:2a:fc:ec:
         27:54:71:1d:16:c5:ff:67:06:73:f4:90:d4:bb:d1:74:4a:12:
         66:d2:b9:7b:16:ae:bf:41:3a:d8:7f:e6:e2:d6:15:4d:ef:96:
         b2:c1:a1:37:e7:19:15:e3:41:0c:96:5f:39:84:6b:76:b0:c7:
         f9:c9:85:a7:a8:3f:c2:28:a5:48:13:1a:44:31:d5:0a:29:dc:
         d6:35:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 22:37:36 2025 by rpki-client