Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          h9RP7GIY28hbdj4tuQpM3KbXAI0rWBXsSHal6vyR0J8=
Subject key identifier:   EE:40:58:69:6A:AE:AA:BE:6C:BD:F0:A3:E9:E9:FB:61:54:52:59:81
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       01996359C271455B8844E886245C2714E715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          1692
Signing time:             Fri 19 Sep 2025 19:00:50 +0000
Manifest this update:     Fri 19 Sep 2025 19:00:50 +0000
Manifest next update:     Sat 20 Sep 2025 19:00:50 +0000
Files and hashes:         1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: IExVMUXiI4BloUuuXScJWwBlMdJ84FVzcMBvV8t7IxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:63:59:c2:71:45:5b:88:44:e8:86:24:5c:27:14:e7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Sep 19 19:00:50 2025 GMT
            Not After : Sep 20 19:00:50 2025 GMT
        Subject: CN=ee4058696aaeaabe6cbdf0a3e9e9fb6154525981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:f8:6b:bd:23:58:32:29:f2:dc:48:30:13:
                    f0:44:62:c9:23:af:0a:a5:5f:72:0e:e7:fe:56:f8:
                    1b:14:09:b4:0b:3d:f6:9e:b5:ab:79:17:2d:e5:50:
                    a3:26:d8:cb:e5:f1:19:75:ac:df:e0:4d:11:72:f6:
                    25:a1:57:b6:65:08:5b:97:2e:15:8e:dd:da:c4:e5:
                    f7:45:d2:f6:8b:8f:2a:7b:ed:cf:49:03:3c:34:23:
                    3c:eb:fa:38:2f:da:75:d2:f3:ad:a7:f4:5c:2f:9c:
                    4c:fa:39:c0:d6:6a:6a:fe:be:5e:ad:39:b3:3c:3c:
                    94:01:56:e8:71:a2:7b:cb:e2:92:12:4b:4d:63:da:
                    ff:ce:2c:16:d0:35:bb:3b:5d:16:a9:e8:45:c0:74:
                    2a:d3:5a:50:90:0e:bd:32:79:38:e5:8f:fc:58:d4:
                    1b:6a:f1:fe:f7:1e:c0:41:bf:4c:84:fe:2b:21:5e:
                    6b:f5:4c:28:f5:5b:1b:e4:63:85:26:27:4b:fb:87:
                    e4:3d:37:fe:e4:66:fd:c3:fd:dc:a8:75:b6:41:76:
                    f0:59:2b:e3:b0:a9:f0:af:2a:41:b1:27:e7:e8:cb:
                    98:f1:a2:b4:02:a6:a8:4a:24:1b:fa:2d:ef:30:8f:
                    1b:81:b4:3f:e4:c7:e4:71:c8:0d:e0:cd:a3:c3:13:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:40:58:69:6A:AE:AA:BE:6C:BD:F0:A3:E9:E9:FB:61:54:52:59:81
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:97:21:0c:24:44:16:27:72:8b:54:24:59:ad:ea:00:10:13:
         8a:24:25:b8:9c:18:d3:c7:a6:f7:03:fe:9d:2b:d5:1a:10:ec:
         0e:07:32:a3:35:03:2f:71:b1:62:0a:4a:49:e7:75:3d:d2:bc:
         86:45:ed:39:4e:8a:6f:78:51:a1:18:ef:32:ac:1f:cd:38:af:
         3d:0a:c3:da:5d:41:bd:82:82:90:04:b2:43:1c:84:d9:df:a9:
         85:e6:6e:a9:e0:36:e8:c6:b5:5d:14:1a:e6:00:5f:8d:f6:26:
         ed:34:4a:5d:0a:14:de:92:70:ef:42:7e:ed:d8:2a:64:c1:12:
         4b:a1:de:27:c1:ff:e4:1d:75:56:92:38:ff:b2:4e:8f:d1:7f:
         31:b1:2f:d9:f6:9f:69:85:59:be:6e:bb:25:1a:74:e5:a3:06:
         7b:ff:e3:e4:ca:bd:63:42:a2:95:64:7d:16:8b:a3:32:03:86:
         5a:8c:4e:21:55:36:4e:f1:70:d1:de:47:f0:e9:ff:4d:35:9f:
         fb:6f:a0:88:bb:d0:a0:07:89:d1:1d:53:45:b4:a9:a9:fe:78:
         ee:79:b3:49:c6:5e:d5:89:48:a5:b8:03:21:8b:29:91:d5:b3:
         18:5e:a2:fb:21:23:43:da:6a:fb:68:50:2a:e5:00:5d:c8:b6:
         6b:e0:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:37:11 2025 by rpki-client