Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File:                     cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier:          QW9WpXk/FldqL2CN8N0OsXIXMUz4045RFpfVzNu0xy8=
Subject key identifier:   CD:01:03:F9:05:94:6A:52:67:9E:34:25:F7:72:9C:9E:E5:28:00:01
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer:       /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial:       01984AE5BC79F8154C8466D772B901F75DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number:          093A
Signing time:             Sun 27 Jul 2025 08:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:26 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:26 +0000
Files and hashes:         1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
                          2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: jP4Zn6PMco9vUHEAjNCPKambWlhEnmLO9tXuw/bU5rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:bc:79:f8:15:4c:84:66:d7:72:b9:01:f7:5d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
        Validity
            Not Before: Jul 27 08:00:26 2025 GMT
            Not After : Jul 28 08:00:26 2025 GMT
        Subject: CN=cd0103f905946a52679e3425f7729c9ee5280001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:62:ca:18:35:fd:6c:36:9e:6a:b7:9b:57:
                    fd:73:e7:cf:ff:90:b4:7d:40:a1:bb:1b:24:0b:91:
                    a0:cc:68:81:6b:ef:aa:b6:67:d7:6d:4f:14:42:7a:
                    ed:0d:7b:f0:07:eb:e4:01:fd:7c:90:18:17:3a:2c:
                    88:83:3a:cf:70:c9:a5:65:a7:b3:c9:7a:2a:7d:2e:
                    21:a9:1c:94:bf:80:f5:4b:02:c5:55:b5:38:41:27:
                    21:16:1e:03:a6:04:1b:a6:48:5c:9a:c6:00:f4:b9:
                    5c:79:ee:d9:3a:66:db:83:af:f7:21:69:a0:ca:05:
                    49:cd:3b:10:8b:8e:5c:34:ad:71:07:b5:77:d2:f7:
                    11:48:d6:44:bb:22:23:37:75:de:b9:59:21:77:cd:
                    7c:49:3a:06:69:01:ef:57:44:a2:16:f1:2c:53:2c:
                    7d:fe:dc:66:4b:bb:ec:3d:95:cd:44:f3:10:ae:01:
                    e0:0b:83:4e:bb:2f:37:15:45:44:e4:01:c2:bc:a4:
                    71:a3:23:c3:14:56:70:0b:0f:34:e8:22:60:d4:07:
                    46:6a:dd:92:ba:42:f4:91:13:1c:c0:8f:76:16:39:
                    bf:75:8f:54:5e:3a:2c:43:f7:04:d6:d1:a1:eb:e5:
                    ce:fb:4e:d2:21:f1:3e:e7:92:7c:ca:44:e6:a9:f7:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:01:03:F9:05:94:6A:52:67:9E:34:25:F7:72:9C:9E:E5:28:00:01
            X509v3 Authority Key Identifier:
                keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:72:fd:9f:35:ef:7d:59:5f:fa:60:8e:fd:9c:99:dc:fe:6e:
         ad:5b:f8:01:4f:55:45:20:11:7d:93:7c:f7:bf:e8:1f:50:d6:
         6d:79:97:83:18:55:d9:c6:2b:6e:1e:a6:f3:3b:6e:3a:8f:d2:
         c6:43:75:ce:a5:94:2f:00:4a:f7:70:27:7a:b5:6b:f6:f8:ca:
         06:8e:87:38:58:f6:28:a4:b5:3f:9f:2e:78:b0:09:40:91:62:
         bb:d3:47:1d:f5:f4:b3:c4:6f:1d:58:5a:59:29:0a:9e:e2:f3:
         06:bf:19:4e:58:55:19:0d:61:55:6c:80:4e:3f:64:89:cf:51:
         39:e1:e7:d2:ac:b9:79:60:19:e6:89:50:a1:03:59:2f:48:df:
         69:e6:b4:5e:da:aa:f4:c2:b4:df:50:e1:a3:a0:03:3b:6c:b7:
         47:57:88:93:18:e5:e7:f6:40:48:da:3d:ce:32:1f:bf:e7:fb:
         c5:11:5f:ce:ef:e6:64:c1:53:a8:d6:9d:1b:cc:81:7d:c3:9f:
         d4:93:8f:72:e3:6c:57:3c:9f:3a:62:f6:91:d6:9b:75:3a:71:
         6c:f3:73:c8:3d:ec:bf:cf:f6:2b:94:b0:a8:a6:dc:37:d8:b9:
         c5:1b:da:74:fa:40:ca:2d:d3:f4:fe:3b:8f:8a:c0:0b:56:f9:
         fb:5b:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:06:50 2025 by rpki-client