Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File:                     4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier:          oL3ek/Z7W0s98F1t9d/BGJoBOvJzeukT0TCQx5jAKNI=
Subject key identifier:   1E:08:EC:A0:77:CF:AE:DB:12:28:10:A3:4C:39:0E:CB:5F:E9:24:E1
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer:       /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial:       0198C91193256B2D1D7B72A536B199FEE87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number:          05FE
Signing time:             Wed 20 Aug 2025 20:00:28 +0000
Manifest this update:     Wed 20 Aug 2025 20:00:28 +0000
Manifest next update:     Thu 21 Aug 2025 20:00:28 +0000
Files and hashes:         1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: EXHLHdp43oP4UhmqpSVeLN/B6wmjC6VvZf9A95QcnCs=)
                          2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:11:93:25:6b:2d:1d:7b:72:a5:36:b1:99:fe:e8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
        Validity
            Not Before: Aug 20 20:00:28 2025 GMT
            Not After : Aug 21 20:00:28 2025 GMT
        Subject: CN=1e08eca077cfaedb122810a34c390ecb5fe924e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:11:28:fd:83:e7:2a:aa:bb:d1:56:1f:b8:
                    9f:a4:8b:bb:c0:74:cf:38:90:ed:13:1c:df:eb:22:
                    51:b8:bf:8c:58:c5:05:80:cd:2e:e5:e0:dc:0e:65:
                    0e:4b:68:64:ff:92:2e:8f:14:60:ba:8d:9b:78:7f:
                    7a:88:33:b5:5b:71:a5:20:5d:7d:49:f6:6c:da:8f:
                    55:35:33:c8:1e:a9:8a:76:60:ae:ea:69:71:5b:1e:
                    3e:1e:a7:a4:87:4c:6c:24:fb:a6:51:f0:8c:cb:f2:
                    05:2a:45:1b:a4:8f:67:42:0d:06:d1:78:1a:d3:13:
                    3c:58:aa:c6:4c:af:5b:23:2b:a4:eb:2a:df:39:e4:
                    5e:b8:02:b1:63:0d:a4:61:b1:ec:d2:94:7e:12:48:
                    d4:51:f4:37:3d:56:c6:4c:db:a6:00:a2:d3:25:7f:
                    dc:a0:77:b7:6a:a3:07:9b:b5:94:2b:68:2a:4b:31:
                    3d:df:84:b5:29:d9:5a:38:31:4e:28:a8:ca:75:8c:
                    b5:37:cf:0b:31:74:f3:cb:76:90:6b:fc:4a:6e:ae:
                    69:3d:a8:24:f8:26:0a:3a:e6:1d:20:c4:c5:1c:e5:
                    94:f6:12:79:42:f6:89:8a:8a:08:b1:6d:9f:23:e4:
                    e8:e6:33:1b:22:93:5d:d7:a8:0c:cf:16:51:26:15:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:08:EC:A0:77:CF:AE:DB:12:28:10:A3:4C:39:0E:CB:5F:E9:24:E1
            X509v3 Authority Key Identifier:
                keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:15:f4:fb:19:09:10:6d:67:31:03:00:92:84:98:23:ad:dc:
         d1:c7:d1:7e:a0:a6:d0:b0:0c:d8:2e:75:1b:78:c0:da:b6:29:
         d2:c2:c2:a8:5b:2d:8a:90:0b:e3:e4:eb:4b:b7:c2:1b:79:ea:
         37:10:1f:c0:88:2e:9c:1c:2f:b5:47:9e:db:40:2a:50:c4:fd:
         5a:70:00:b6:0c:b4:54:09:3a:2f:77:46:60:7e:3c:df:6b:0d:
         60:bf:a9:ac:2a:61:4f:86:72:9f:8d:56:13:cd:62:df:16:bd:
         80:56:f3:af:64:23:6c:b1:00:cc:43:43:0a:15:85:c7:07:2d:
         b4:86:9f:ef:8b:a8:71:67:94:28:aa:d9:6d:3d:c1:7f:04:ef:
         c8:0d:c5:75:33:73:23:d5:37:1b:b8:4e:6c:23:bc:f7:3d:2a:
         74:5e:50:fa:18:86:68:a5:d4:37:c9:63:8a:ee:ec:44:de:f4:
         db:23:78:cb:72:a6:6d:cf:2a:ff:f1:ca:92:3f:00:c5:b6:f9:
         09:b4:21:8f:84:da:4b:e8:7c:46:01:bf:23:29:30:7f:9c:d8:
         11:fa:70:59:8a:5a:ac:f3:9e:4d:04:df:64:f2:b4:6a:7f:25:
         78:1f:e9:db:81:a8:c7:57:cf:c6:be:c4:b9:82:2c:e5:99:e4:
         b0:ac:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:43:39 2025 by rpki-client