Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          cA4/bTeiYvcsS3vTzq9LHiHdncAwbcwi/VZsfWZ2SD0=
Subject key identifier:   8C:04:39:88:F2:B3:8C:8E:E5:D4:05:BA:A2:8D:EE:E1:2A:8F:CA:92
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       01984B8A90AEAB3EE9A9AD17860B63C4ABF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          1314
Signing time:             Sun 27 Jul 2025 11:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:28 +0000
Files and hashes:         1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
                          2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
                          3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
                          4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
                          5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
                          6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: IPz9uTpvzMc+EyXv/J+liR/Zp7Ck2mNzLJrWmjs4lhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:90:ae:ab:3e:e9:a9:ad:17:86:0b:63:c4:ab:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Jul 27 11:00:28 2025 GMT
            Not After : Jul 28 11:00:28 2025 GMT
        Subject: CN=8c043988f2b38c8ee5d405baa28deee12a8fca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:3a:61:45:e0:6f:ba:95:ff:27:c7:79:87:
                    03:3b:af:92:94:a5:5e:80:3e:95:45:77:16:a8:7b:
                    02:5b:44:35:fc:3c:d1:b6:c6:f1:67:64:d5:41:0e:
                    9a:4d:b8:4d:c9:96:2a:38:f3:43:55:21:e4:98:21:
                    b9:dc:85:d1:5d:b0:8a:94:b1:d6:3b:17:bd:b2:1d:
                    3b:7d:ae:d2:a9:9c:e8:85:ec:91:b8:26:1d:e7:2f:
                    24:76:d5:b5:75:8f:dd:09:a6:1f:5f:26:81:41:da:
                    b7:6f:0c:d8:8f:2a:bd:85:4d:23:b2:56:ea:80:5e:
                    bc:32:02:7d:36:06:30:2c:96:44:26:45:df:6a:ee:
                    df:4f:a6:fe:88:e5:1c:f8:01:35:ef:58:82:67:d0:
                    15:42:cb:0c:2d:bf:3b:4c:52:31:dd:71:d7:56:f6:
                    1a:c4:c8:32:c4:ca:bd:f4:ab:c7:8e:a2:e4:92:db:
                    0b:b4:80:d4:0f:01:76:b6:3c:c1:02:ef:0b:f0:55:
                    f4:ba:da:d9:31:72:da:2d:5f:93:04:b9:7c:9c:81:
                    af:f8:10:ef:43:fb:60:69:e7:a2:10:7b:fb:36:27:
                    a9:f6:ad:d3:86:fb:82:6f:a1:5d:eb:8a:57:b4:83:
                    68:d6:3d:41:58:5c:92:ef:82:6c:aa:ad:12:15:e9:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:39:88:F2:B3:8C:8E:E5:D4:05:BA:A2:8D:EE:E1:2A:8F:CA:92
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:5c:85:cc:70:09:24:d7:90:57:84:6d:7a:ae:d5:ee:9c:
         57:70:05:b1:20:dc:78:64:cd:de:54:08:da:04:1b:92:99:74:
         fb:16:ec:16:5a:9a:b0:17:27:0b:de:8d:e2:e2:64:9b:96:e1:
         a5:ed:8a:1b:ad:98:f8:c6:bd:ba:01:25:fd:47:bb:94:1c:e5:
         c3:eb:64:1e:d5:ac:85:be:64:a4:eb:89:8b:a3:26:0e:6d:85:
         f2:b9:35:11:ed:45:9d:97:bc:1f:c5:75:98:de:32:a8:3a:3a:
         52:9e:6c:b8:16:8d:8d:88:d4:83:e3:a0:86:d7:f9:e1:3d:90:
         a9:95:16:ba:3f:bf:71:2f:3d:72:e0:21:c5:51:8f:c3:4f:5f:
         2f:73:c4:5a:b6:4d:f5:c3:d4:3d:2d:e3:83:87:25:54:62:ba:
         5c:05:15:1b:a2:ae:d2:9b:fe:a0:e6:99:da:98:a6:68:42:dd:
         fa:c9:b5:de:f6:ed:69:0f:9f:cc:bf:ba:72:86:94:d6:ee:48:
         0d:4b:35:70:70:a1:e7:ba:62:9f:10:42:f7:a2:7d:8e:d9:1b:
         91:f0:25:b8:14:69:54:c0:18:b5:54:5d:24:c1:75:32:93:ff:
         69:7d:57:2f:a9:3b:89:7e:23:2d:68:33:e0:74:89:d2:4b:61:
         8f:64:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:47:20 2025 by rpki-client