Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          7ZUzxgY8r1qDHTI8V7VuJ9GD85N+e6xqacaEX0bI+hQ=
Subject key identifier:   AA:27:32:5A:39:12:4C:90:B9:11:A7:CE:9F:1B:B4:5D:EB:3F:62:10
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       0199326D2B5467B7F510877671AC79B47A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          0FEE
Signing time:             Wed 10 Sep 2025 07:00:39 +0000
Manifest this update:     Wed 10 Sep 2025 07:00:39 +0000
Manifest next update:     Thu 11 Sep 2025 07:00:39 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: PoKYQwPnJKAeSS9rmMi8Sz8hLIDENBhw7+A7btiprno=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:6d:2b:54:67:b7:f5:10:87:76:71:ac:79:b4:7a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Sep 10 07:00:39 2025 GMT
            Not After : Sep 11 07:00:39 2025 GMT
        Subject: CN=aa27325a39124c90b911a7ce9f1bb45deb3f6210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:e3:77:f8:e4:5f:55:34:85:eb:bb:3c:c7:
                    d4:67:e7:c5:d9:26:55:1f:5f:9a:9f:9d:97:3e:ac:
                    23:a7:a9:83:f6:29:8e:76:30:03:f1:3e:29:61:e4:
                    c7:fc:c5:de:9c:cd:b3:b7:89:45:7a:2f:70:4f:10:
                    d9:45:e4:76:f9:5d:0c:f4:26:12:b2:9d:82:e9:0a:
                    3d:b4:d9:b5:92:bd:0d:c8:3d:54:3a:fb:d8:3a:03:
                    18:c7:52:70:56:db:f2:3e:27:ef:d2:65:f4:73:a3:
                    9b:29:4e:38:c4:81:17:54:1a:14:dc:8b:ec:61:6c:
                    1e:61:cd:e5:50:ab:ef:a8:2e:57:b1:2e:de:b5:ad:
                    27:2a:cc:d5:cc:3d:33:90:d9:e3:70:2a:7a:a5:5e:
                    9d:c9:32:08:be:56:ed:eb:5a:d2:61:4e:ef:09:ac:
                    79:37:9d:c0:d6:5f:f5:f0:b6:82:e6:86:17:1a:63:
                    16:d2:d9:06:3c:ce:2f:b7:56:29:02:46:93:08:cf:
                    9a:ac:f5:64:b4:86:7f:5c:f3:59:36:01:40:81:07:
                    76:f8:b2:6b:63:1c:6e:b3:83:4e:d7:8e:d9:e6:d5:
                    3a:41:e8:89:29:0a:c4:98:db:62:d9:35:7a:1f:ea:
                    26:09:87:bc:b1:9d:7b:66:50:71:2e:f3:27:12:66:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:32:5A:39:12:4C:90:B9:11:A7:CE:9F:1B:B4:5D:EB:3F:62:10
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:17:46:ee:e4:a1:2d:4d:01:07:f5:7f:95:dd:3f:ef:17:
         c0:85:32:30:97:6f:2d:2b:0f:51:ad:7c:7e:7d:4b:62:10:90:
         6b:3e:ea:b5:70:07:a5:69:e8:04:ff:d1:0d:e3:26:00:c1:17:
         6f:c8:14:f8:22:be:fc:05:23:17:74:01:23:2f:90:8b:25:29:
         97:8f:01:14:4a:0c:db:8b:46:33:44:80:2b:c4:2a:34:e0:58:
         97:62:9a:cd:88:0c:80:75:95:e4:3e:bd:6a:b5:a1:3c:37:14:
         ce:fe:7e:4f:46:56:6f:1d:4f:c8:9e:7a:b2:77:42:d4:64:c4:
         29:fe:18:ff:91:47:fa:f4:33:db:a4:bc:f3:dc:e6:19:35:87:
         c5:b4:b1:e4:35:46:b6:8e:9d:f2:c0:68:01:1f:26:8d:f2:3b:
         51:b9:77:c2:63:99:3f:d1:dd:56:1e:50:56:d7:36:20:06:47:
         08:98:8b:82:2d:b4:be:30:48:3d:96:a2:92:d0:42:26:81:9c:
         87:54:68:5f:f1:c0:86:b0:41:75:99:d8:f1:ab:c8:b1:88:b0:
         1e:9c:ac:6e:a9:22:c1:a2:ee:fc:cb:69:f3:81:9e:fe:f1:ab:
         07:a9:0e:9b:cf:f4:3a:a8:5e:d0:d3:dd:c6:ce:8c:74:18:90:
         65:bc:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:03:27 2025 by rpki-client