Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          /5P2YhLQDc4kAxuHmU14YqHcLt3VUXO1kql5a+U/Zvo=
Subject key identifier:   55:C7:8F:F6:46:6E:0F:FB:29:17:0D:3E:17:A0:E7:86:07:EB:16:59
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0198C9B85D30627ED299539B6C84EA540C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1687
Signing time:             Wed 20 Aug 2025 23:02:39 +0000
Manifest this update:     Wed 20 Aug 2025 23:02:39 +0000
Manifest next update:     Thu 21 Aug 2025 23:02:39 +0000
Files and hashes:         1: 2HcLLIfy1JMDCVGEVTptM8elLd4.roa (hash: LoXji0ZJfkE3eJjr+G7N7ZYdU5+oCyWMzqs03IJOVrg=)
                          2: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (hash: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=)
                          3: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: UJsjVCYnLI8dR6N57UMQfdT3txCnqYddTgGCyXNaTBw=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          7: O-s7sLwyvER4n7KZ25-xO-rbC6M.roa (hash: S3u//Ykp1StY/C11qR48/ymNimiE+nEYX14hg2A2Bbw=)
                          8: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          9: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          10: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          11: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          12: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          13: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          14: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          15: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          16: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          17: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          18: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          19: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:b8:5d:30:62:7e:d2:99:53:9b:6c:84:ea:54:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug 20 23:02:39 2025 GMT
            Not After : Aug 21 23:02:39 2025 GMT
        Subject: CN=55c78ff6466e0ffb29170d3e17a0e78607eb1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:a3:a7:75:97:5f:2d:39:4a:e9:18:ab:c5:
                    e3:d5:a7:f2:22:07:c4:18:68:39:1c:f2:8a:f2:c3:
                    bb:30:3f:c0:74:cf:9b:a1:05:b7:0c:a7:84:af:05:
                    8c:bd:68:c2:f6:a2:10:aa:e6:ce:44:76:1b:a2:32:
                    8c:5f:44:31:d5:91:9c:5d:ff:f6:8a:7a:d2:3b:15:
                    e6:dc:8b:db:93:31:13:d0:3c:7b:15:19:36:fc:64:
                    8c:96:63:36:83:34:c2:ce:5a:9f:60:a1:2a:22:b5:
                    89:d2:6d:3e:e6:64:21:75:17:3c:77:5d:03:d7:e3:
                    74:6c:ae:12:17:26:80:e4:30:f5:91:64:b3:59:29:
                    8b:da:2a:70:f9:d6:a6:35:67:24:d9:54:9b:03:74:
                    bc:7d:a4:7d:c5:ec:8e:40:d7:73:48:59:53:e6:da:
                    0d:ba:82:eb:22:28:1f:98:d4:5f:00:9f:79:fc:e4:
                    77:91:f7:ad:99:70:5e:27:6c:ac:2e:ff:07:f0:1a:
                    af:29:d5:0b:5e:7f:d4:97:20:ef:0c:64:18:60:9d:
                    1c:49:82:d1:b9:ba:db:37:6c:44:10:5c:72:da:9f:
                    0d:42:ad:54:41:f6:b6:93:7c:55:18:75:da:5b:cd:
                    15:c9:ad:5d:33:d6:7d:e0:d3:39:b4:1b:f5:7f:b3:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:8F:F6:46:6E:0F:FB:29:17:0D:3E:17:A0:E7:86:07:EB:16:59
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:0c:e4:e0:03:e1:81:cd:77:4d:97:3d:6a:47:46:3e:d6:7a:
         68:3c:ca:a7:62:49:d6:11:e0:69:33:4e:dc:0b:3e:29:96:9f:
         e5:e1:98:2b:e9:31:77:1d:57:2a:78:59:7a:0a:1e:ec:7a:ac:
         4e:e8:b6:0b:06:2a:87:80:78:9d:06:bf:de:6d:8f:79:04:51:
         07:2d:36:39:01:7a:75:b0:94:63:7b:ac:ef:5b:7a:d0:23:7d:
         f6:47:8b:af:a7:cd:ed:c6:19:08:d2:45:bb:77:91:0c:4b:ef:
         97:af:90:4e:e1:e7:c4:15:96:97:4c:12:c0:80:da:f9:87:f4:
         3e:f2:78:b9:92:71:b1:b8:ec:6c:3f:cd:da:c9:08:61:e0:a9:
         b8:31:2e:e8:00:e4:ec:5b:65:ab:65:64:43:87:6e:7a:7f:5c:
         a7:38:37:e0:98:4f:f7:b7:61:3e:3d:48:4b:4f:e5:3a:15:be:
         ae:58:98:10:88:2b:e1:c6:77:06:58:f5:7b:3b:71:9f:55:4b:
         1a:f6:60:a9:8c:47:42:26:11:38:ec:35:76:38:8b:46:81:b0:
         1c:af:a5:23:59:fc:14:fe:d3:e6:c7:d5:7a:ae:37:89:a8:67:
         bf:04:2f:15:ec:44:b0:93:50:8d:8c:9b:8e:4b:a5:65:38:3f:
         6a:5a:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:54:42 2025 by rpki-client