Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          guL5vMHxKpnqiajZyi4th5zCgXHGVaxiFiCqy9Kqo7I=
Subject key identifier:   F9:35:B3:89:64:89:08:90:3C:AC:9E:94:1C:39:6C:59:83:EF:76:29
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       0198C56CCAB1F745940667B8AD7B73AAAFD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          083B
Signing time:             Wed 20 Aug 2025 03:01:37 +0000
Manifest this update:     Wed 20 Aug 2025 03:01:37 +0000
Manifest next update:     Thu 21 Aug 2025 03:01:37 +0000
Files and hashes:         1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
                          2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
                          3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: Z02vWFVCZal1pTSjrWcNXa0J+bT+GsrpcVniLlizOeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c5:6c:ca:b1:f7:45:94:06:67:b8:ad:7b:73:aa:af:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Aug 20 03:01:37 2025 GMT
            Not After : Aug 21 03:01:37 2025 GMT
        Subject: CN=f935b389648908903cac9e941c396c5983ef7629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:36:5d:7a:1f:19:38:01:2f:1f:dc:d2:af:
                    a2:09:1e:17:8b:bd:e2:20:f7:f8:c4:8f:c7:44:ee:
                    8a:54:52:62:3e:b6:d7:10:a5:a9:77:bb:4a:cc:00:
                    34:cb:f7:3e:1a:5e:0c:f6:13:03:3c:ad:d2:0a:15:
                    31:ac:a7:fb:c0:78:ae:ed:a4:d5:d8:72:9c:cb:78:
                    eb:2e:89:f8:4d:da:1f:bd:b6:87:38:7f:3b:6b:90:
                    e4:f8:66:50:60:23:f5:8d:f8:d5:94:df:18:56:d9:
                    6b:6e:03:e9:83:d9:69:33:fb:5e:6b:d6:a2:77:2c:
                    ed:ce:99:82:60:d3:79:5b:1b:1d:42:df:71:ee:bb:
                    57:b3:c2:34:4b:ad:75:c9:94:45:0d:63:3c:82:75:
                    89:b8:1b:ea:de:91:2f:8a:21:d2:b6:07:f2:c3:37:
                    75:33:2a:50:98:7c:22:ef:cb:e9:ba:5e:f8:b5:3b:
                    a4:33:69:ef:c1:2f:3c:24:c5:62:00:86:04:f7:d7:
                    06:0f:02:82:39:14:ae:b1:56:97:96:5b:f4:d0:80:
                    1b:d8:a5:df:94:0d:1b:cf:3f:44:f5:81:f8:ae:58:
                    27:f4:95:c5:75:1a:68:83:e4:7c:e5:62:57:9b:a1:
                    37:64:ff:a9:0f:e2:65:74:10:d6:d9:56:8f:b6:1f:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:35:B3:89:64:89:08:90:3C:AC:9E:94:1C:39:6C:59:83:EF:76:29
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4b:e8:0f:ca:74:c3:dc:5f:39:6a:d0:f2:1d:e1:c8:6a:90:
         a6:29:71:88:09:ca:2e:a0:71:99:a4:42:ce:96:a4:e2:62:77:
         11:f9:54:05:88:66:5c:50:33:ef:7b:65:4e:e6:f6:c9:17:5c:
         82:76:98:2e:76:bd:1f:18:60:a8:63:26:5c:c9:42:97:d6:d9:
         ed:33:7c:63:f1:1a:bc:db:49:e5:90:8d:4e:35:ce:3f:a1:5d:
         57:d9:67:05:4e:aa:e8:b5:1c:0a:24:2f:e1:b5:9a:e4:09:5e:
         c0:a7:e6:62:45:27:ed:a5:7c:07:6c:ee:8a:4a:6f:0b:23:5c:
         f2:72:11:14:22:16:e5:4e:59:21:09:61:71:7e:c9:42:1f:c3:
         2c:82:8c:9f:f7:53:9f:4f:43:d5:ab:d1:4a:e6:6d:93:0b:d0:
         f1:a7:73:27:53:74:37:b9:cb:cb:ce:d6:f0:91:09:97:d9:20:
         ea:d1:0b:d0:05:e5:0f:f2:84:61:3f:6e:0b:5d:0a:34:e2:d0:
         40:97:04:04:ca:08:c5:13:15:1f:ec:0c:b3:22:c4:a1:98:c0:
         90:47:ee:10:4d:e3:88:c1:06:ab:6a:09:4b:b4:9e:a9:b4:70:
         dd:4e:d7:e9:e3:c7:62:ef:26:94:07:5c:06:e0:3b:5c:63:81:
         4f:52:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:00 2025 by rpki-client