Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File:                     jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier:          Hb9ipFlRCQ/rSQdGo/2F/LoX/vr0aa+xyXrfX9MWqhc=
Subject key identifier:   54:4B:B3:C2:30:C2:F9:D4:00:18:BD:53:AC:F4:E5:45:6E:30:3B:AE
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer:       /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial:       01992BC654B2E8D8F9B3BE0ADF69419E5671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number:          03FC
Signing time:             Tue 09 Sep 2025 00:00:42 +0000
Manifest this update:     Tue 09 Sep 2025 00:00:42 +0000
Manifest next update:     Wed 10 Sep 2025 00:00:42 +0000
Files and hashes:         1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=)
                          2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: H/M1T0MKm9mDTkoneRgOuyonL7UhpFruQSD/3OI8wWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:c6:54:b2:e8:d8:f9:b3:be:0a:df:69:41:9e:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
        Validity
            Not Before: Sep  9 00:00:42 2025 GMT
            Not After : Sep 10 00:00:42 2025 GMT
        Subject: CN=544bb3c230c2f9d40018bd53acf4e5456e303bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:53:58:be:32:1f:7d:d4:97:f1:d8:f5:81:
                    14:57:a4:5f:18:43:6f:15:4a:42:9f:f5:2d:51:5e:
                    a3:70:29:46:ef:38:19:29:99:7f:29:61:bf:5c:39:
                    f7:f3:00:af:3b:83:5f:31:34:e5:eb:af:54:b3:1d:
                    8e:d1:b6:ad:3d:e5:f8:87:9a:99:2c:f1:8d:a8:51:
                    6b:d7:87:f1:99:4c:ed:ba:fe:ae:c8:32:ea:ab:53:
                    9e:89:61:04:94:d1:c2:46:0a:43:f4:27:f7:2d:ce:
                    d3:a2:0e:0a:30:98:78:0c:62:eb:ba:51:af:d1:66:
                    3c:bb:69:7f:67:ed:55:3d:b3:f8:85:e4:a5:3a:17:
                    2e:d5:58:e7:21:bc:87:8f:9c:99:f4:2f:b6:de:83:
                    a6:af:01:26:86:79:9d:a3:56:58:2d:ae:ab:12:07:
                    ba:f8:f3:82:71:66:de:e4:a2:46:26:41:4a:cb:ca:
                    3e:33:f7:15:8a:5d:91:b5:0e:ef:90:91:00:cc:7d:
                    57:0c:2e:d4:9b:55:d7:7c:28:76:8b:6c:a0:66:8e:
                    d5:1a:0e:a8:57:c2:f8:ba:c1:31:ff:b5:83:da:0a:
                    fc:17:35:27:76:3e:d2:ea:34:46:69:04:00:1c:3f:
                    f3:59:1c:b9:2c:07:34:1f:23:50:e9:9a:ef:ad:e5:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:B3:C2:30:C2:F9:D4:00:18:BD:53:AC:F4:E5:45:6E:30:3B:AE
            X509v3 Authority Key Identifier:
                keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:64:3b:f9:f0:7c:03:5f:70:1f:49:44:b2:06:e7:db:de:
         66:83:16:d3:0e:d3:f5:65:d0:07:35:83:41:28:30:42:f5:d8:
         c2:df:66:39:0e:9f:b4:05:c9:43:73:00:06:3d:b9:9c:72:19:
         6c:8b:a8:52:49:0b:93:42:e2:86:10:3f:cd:40:6c:01:e4:48:
         b1:04:d6:a9:11:34:0f:36:a9:a8:a8:70:d3:48:41:a0:a1:27:
         52:46:e5:8e:4b:ef:56:9d:63:8c:ee:63:f5:60:ba:27:47:5a:
         3a:a9:89:b8:1b:6f:fd:25:07:75:90:cd:ea:36:6f:8f:07:69:
         d9:f4:b0:f6:c2:bc:e8:d0:f3:eb:ee:75:6c:99:b6:7e:30:cc:
         29:53:ab:5d:dc:94:65:bf:a5:d4:fb:e7:a0:29:54:f9:1f:ea:
         c7:3c:e2:11:f5:74:51:29:6b:7d:f2:65:8f:2c:95:09:f4:b9:
         75:1a:85:6b:fa:ea:af:8d:8b:ee:8f:c4:84:86:6f:4a:f6:fd:
         8c:16:74:bc:66:af:46:05:61:fa:fd:53:13:b0:98:61:a8:cc:
         17:33:7f:0d:09:27:26:22:ee:1c:2a:c8:45:9d:ff:1a:52:1c:
         b8:f4:0d:eb:48:15:ce:3b:c7:db:ab:f1:a9:e5:eb:cb:02:24:
         da:15:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:57:40 2025 by rpki-client