Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          GNDULhnbRD+c4l0ChwLRM0RvhP6Q+XJR01lFRtl/QpY=
Subject key identifier:   B7:9C:E4:2E:14:52:15:21:59:FA:58:86:DB:30:3D:40:DE:63:14:D9
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       019933EE94FAC4B114C30BCEF2B553D4A13C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          1369
Signing time:             Wed 10 Sep 2025 14:01:37 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:37 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:37 +0000
Files and hashes:         1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
                          2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
                          3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
                          4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: e8F8uPmcBvzzS+17ikp0uwhghZbWJOaPJ+lsG7zlgck=)
                          5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:94:fa:c4:b1:14:c3:0b:ce:f2:b5:53:d4:a1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Sep 10 14:01:37 2025 GMT
            Not After : Sep 11 14:01:37 2025 GMT
        Subject: CN=b79ce42e1452152159fa5886db303d40de6314d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:18:20:c2:da:1f:3e:ec:9a:4d:51:57:8c:
                    e7:cc:de:18:67:3d:74:fa:11:ec:23:5a:49:86:96:
                    37:41:8a:73:33:80:7d:56:05:cd:90:a4:6b:bf:91:
                    90:5d:71:b7:c1:40:8d:41:93:96:fc:20:09:a3:ac:
                    02:a4:71:bf:6c:a0:87:db:24:6e:f4:ea:c6:a1:02:
                    3a:e6:4e:66:19:e3:67:5a:53:51:07:67:d5:c9:cc:
                    d3:ab:51:94:11:34:9a:08:40:e3:05:52:7c:3f:f1:
                    74:16:6e:8f:0c:cc:04:33:5f:ad:a4:a0:f0:13:6f:
                    16:e4:df:d5:d4:78:a2:6a:81:64:ff:f1:41:69:77:
                    ca:48:0c:8f:cf:0e:37:b1:72:1c:3b:22:f5:88:9c:
                    05:02:4a:bd:1a:31:39:92:1b:4b:fc:e7:89:4c:5e:
                    46:18:c1:28:04:eb:4c:f3:2c:d8:fe:78:5b:cc:37:
                    21:cf:99:2b:14:80:03:9c:87:bb:26:ac:48:ec:ef:
                    4c:9d:15:02:9b:19:36:e3:43:b3:4b:84:c3:c2:06:
                    33:e4:ec:ba:94:5c:3b:0a:17:c8:03:6c:f9:b8:39:
                    69:56:58:08:45:ed:07:b3:c6:8d:c0:12:ad:66:37:
                    3a:7b:e3:5d:9b:91:48:f8:df:21:57:5f:68:1c:7b:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9C:E4:2E:14:52:15:21:59:FA:58:86:DB:30:3D:40:DE:63:14:D9
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:4b:9d:63:5a:6a:d0:06:d7:3a:1b:8b:ee:f9:9e:4c:64:
         a4:0d:04:9c:7e:b2:7c:30:dc:99:df:3c:e1:41:c7:99:f5:83:
         ec:55:c9:a8:6b:e6:a4:68:76:e2:68:29:fa:93:e3:75:82:fd:
         af:2d:d2:37:57:77:ab:4e:79:24:53:96:3f:e8:21:bf:d6:3f:
         7f:c9:d1:45:4c:4e:5b:65:92:f4:29:60:3d:ec:d8:93:82:ee:
         6e:d5:10:64:fe:2b:6d:a1:47:f0:35:0b:a2:99:00:36:93:57:
         dd:59:aa:39:11:ce:e7:3f:a4:8a:9f:59:b6:29:8f:92:54:01:
         a8:a4:0e:8e:c8:c5:e5:f8:8f:d2:c9:02:d7:e4:0e:b6:1d:14:
         8b:86:ac:57:c8:28:76:48:ea:b8:7a:76:87:79:be:d9:9b:cb:
         81:bf:1d:68:6c:36:69:2f:34:04:e8:1b:75:6e:fc:30:d3:e8:
         5f:b4:cb:89:a5:a6:92:9a:bf:a1:79:b4:85:d4:cb:65:c6:fb:
         be:90:07:77:8c:f1:b2:7b:79:ff:4f:89:df:2d:9f:18:9d:80:
         a0:f3:70:40:84:70:16:aa:97:a9:c0:05:d8:3a:9c:e7:b2:f5:
         da:54:9a:7f:90:2b:86:69:f0:ce:46:c2:a2:0d:29:0d:b4:35:
         95:8f:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:43:59 2025 by rpki-client