Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          qvbd2K1XNlrMGAdPSMYm4Kj7BY845hrrMO/+pte4kls=
Subject key identifier:   C7:2D:FA:95:C7:70:95:27:FA:63:6D:0C:12:50:B8:1E:4E:48:CF:FE
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       01993537A4A5EE6CC2E07820FAA86E995F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          024B
Signing time:             Wed 10 Sep 2025 20:01:02 +0000
Manifest this update:     Wed 10 Sep 2025 20:01:02 +0000
Manifest next update:     Thu 11 Sep 2025 20:01:02 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: TFjDQeVdAQiB4oUKm1S+o7gg3hjYXoMMpZoj2H/1Dy8=)
                          2: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (hash: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=)
                          3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:a4:a5:ee:6c:c2:e0:78:20:fa:a8:6e:99:5f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Sep 10 20:01:02 2025 GMT
            Not After : Sep 11 20:01:02 2025 GMT
        Subject: CN=c72dfa95c7709527fa636d0c1250b81e4e48cffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:88:08:9e:ba:45:69:b4:03:99:98:cc:de:
                    fb:4a:8d:cd:6b:6c:f2:60:7a:45:e4:1c:01:37:d6:
                    b7:ee:9f:14:47:87:dc:52:ce:95:c3:76:1b:c7:66:
                    d0:a7:b8:2b:31:c5:85:b7:42:4e:e3:d8:79:8b:66:
                    24:74:b0:15:5a:ca:c7:54:a0:9a:ab:b2:2d:89:6d:
                    dc:f2:8d:52:cf:cd:0a:81:56:97:1c:de:a3:5e:ca:
                    1f:67:16:bc:e4:cb:7e:cc:7b:c3:b9:57:cf:0b:1e:
                    a6:0c:2a:05:a8:0f:e5:f0:8e:04:ad:33:5f:59:42:
                    31:2e:aa:04:7a:83:15:b9:4c:11:a6:67:c2:97:b5:
                    32:9c:77:51:94:e4:97:d5:de:b4:bc:19:5f:1e:60:
                    1e:6a:76:83:50:da:4c:6d:b9:32:b0:00:f3:d2:15:
                    38:f8:6b:c4:c0:4a:ee:b2:0c:8b:72:04:25:b8:b2:
                    f6:fb:87:a2:ca:2e:c5:08:0a:9e:10:df:93:e1:7a:
                    65:41:83:2b:21:dd:d3:20:3a:4d:f7:b6:d4:59:37:
                    a0:f5:67:d5:ca:0c:4a:65:99:4c:78:08:dd:85:b7:
                    57:69:7a:dc:a6:5d:81:b5:d8:da:87:8d:32:42:12:
                    bd:48:9a:01:e8:57:14:47:4e:79:ec:3f:4f:ec:87:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2D:FA:95:C7:70:95:27:FA:63:6D:0C:12:50:B8:1E:4E:48:CF:FE
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b2:ca:f2:8f:60:77:d7:6e:9c:58:b2:1f:b2:31:2c:1d:42:
         79:40:ba:fe:c2:a7:df:84:21:58:33:30:d1:3d:ba:39:f0:77:
         38:a1:f5:a9:63:c3:60:11:22:61:cf:34:a1:c4:f5:48:29:f9:
         5e:58:45:48:21:d0:7d:51:ed:6a:cc:e4:91:f1:11:d7:13:b3:
         1d:f5:d4:3d:f9:22:d3:f3:d5:9a:08:34:8f:79:10:ef:db:15:
         e0:64:73:e6:7d:39:fc:f5:e1:01:9b:72:c9:19:73:67:77:b2:
         8e:c9:98:52:04:02:a8:dc:11:1f:6d:1a:a8:9d:db:99:b9:68:
         f4:fe:8c:94:37:75:cf:33:8c:04:b3:67:44:b1:66:cd:ca:df:
         2a:18:33:eb:5e:a2:2f:21:82:85:75:5c:ef:05:45:69:d7:a7:
         bb:49:51:33:2d:f6:da:b1:bd:0a:39:e8:d0:4d:50:12:28:3a:
         6c:9b:51:65:b4:3b:83:f6:d1:70:c6:df:1a:bb:56:e8:58:3c:
         48:42:f1:7e:69:4e:c7:54:8a:24:f3:ad:77:a8:05:02:5e:b2:
         db:74:07:bf:9d:72:6a:d9:75:a4:94:02:8c:f9:d5:01:7c:d4:
         d9:12:52:ce:a0:94:a9:cb:cd:a3:97:96:f6:74:62:a3:0b:fe:
         09:67:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:12 2025 by rpki-client