Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          T4hL7bBCpodYQYJnL18CNLZ6Lw2FCAKLr3vEW51fYUk=
Subject key identifier:   FA:79:6B:04:7D:53:E7:7C:DD:38:CF:EB:0D:17:21:CD:EA:F0:BF:BD
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019848C09B9BA9ECF558E7D7B4AE23841429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          1317
Signing time:             Sat 26 Jul 2025 22:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:39 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: VMFPTJyWgTU6aAJmo/lxNT9TPtv84JiXqBTaJGhY0AA=)
                          2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
                          3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
                          4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:9b:9b:a9:ec:f5:58:e7:d7:b4:ae:23:84:14:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Jul 26 22:00:39 2025 GMT
            Not After : Jul 27 22:00:39 2025 GMT
        Subject: CN=fa796b047d53e77cdd38cfeb0d1721cdeaf0bfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:50:46:9e:9a:ce:c9:c0:f6:56:0d:e7:b5:
                    f0:18:1b:6d:18:4f:61:1d:4d:ca:87:ea:e2:31:6c:
                    83:f2:d4:5e:ce:8c:90:22:fd:2d:3b:aa:d0:97:29:
                    e0:85:51:bd:72:28:b0:54:3d:ec:65:75:34:c7:e8:
                    f7:3c:bc:f0:12:68:e1:5c:c1:11:d9:98:bf:fe:27:
                    83:e8:3b:8e:db:f7:5b:9c:31:a1:07:b8:e2:c6:e9:
                    e5:33:ad:19:85:ea:ea:d3:bc:66:5c:55:7c:7f:0e:
                    c6:27:3e:61:4b:80:f4:d2:9c:b7:53:40:b7:a4:cb:
                    5b:87:7a:73:9e:e5:e2:c2:13:30:60:a7:a6:45:3f:
                    77:a7:cc:4c:75:95:7a:20:93:0a:dd:d5:a4:dd:53:
                    0c:2b:f3:b8:33:10:28:06:77:07:7e:fe:07:ed:55:
                    bc:1e:5b:f3:31:93:0c:59:79:95:f0:c3:f4:bd:ab:
                    f9:41:a4:3d:7b:51:97:1c:cf:c3:3d:cd:58:fa:5a:
                    f9:3a:d2:50:36:5b:bd:c8:5a:03:b2:7f:61:1f:8e:
                    67:73:1f:02:89:8e:0c:e6:92:bc:1b:28:bd:04:5d:
                    e4:4e:48:54:d7:25:7c:ff:f3:d3:16:4f:53:0a:2a:
                    78:4a:a8:cb:f8:e8:78:45:ce:79:62:a8:fc:28:bd:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:6B:04:7D:53:E7:7C:DD:38:CF:EB:0D:17:21:CD:EA:F0:BF:BD
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:03:09:a7:cf:76:d3:4e:fe:29:85:fc:31:1f:81:59:6b:4e:
         bf:61:27:10:f8:34:8e:53:1c:bd:dd:ea:43:97:a9:52:ce:bb:
         8c:d9:df:37:f2:3b:40:71:eb:ba:7a:f2:a2:6f:52:2c:33:69:
         64:63:22:5f:2e:56:88:cb:f5:ee:5e:74:a4:03:bd:b1:15:af:
         5b:d8:44:2e:b1:24:43:ba:81:f1:6d:7c:ed:80:3c:15:13:06:
         90:d8:66:be:ad:86:78:df:50:06:e8:05:52:77:3c:fb:9f:09:
         7a:fb:9c:13:cb:2a:31:2c:d2:6e:2d:ac:47:9b:c7:81:b8:c9:
         de:5e:46:03:7a:d4:11:32:6b:bb:bd:48:92:9d:31:fb:6d:be:
         b2:13:17:f6:ea:c4:50:91:f0:40:14:e8:1b:90:39:97:99:26:
         17:ce:af:42:81:0d:73:de:7e:09:61:9c:72:ad:c4:13:73:32:
         0b:02:63:05:69:d4:37:2b:8f:9c:de:4a:ff:d8:66:ec:4b:97:
         52:c5:1a:b6:7c:2f:df:92:32:67:c8:98:4a:3f:16:f7:50:25:
         03:00:da:d1:9d:f3:d8:5c:f4:18:a6:af:fc:d9:dd:de:d8:cc:
         af:d4:2d:10:f0:1b:72:fe:23:f1:71:03:e5:b4:9b:c7:ee:75:
         a0:d6:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:15 2025 by rpki-client