Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          X4NCyElUVq/OhnpFslu7sY3U3u4BOB+TeccivuNH8NQ=
Subject key identifier:   7A:59:4A:F8:09:2B:40:4F:DC:38:CD:13:F7:E1:96:52:40:C9:80:CE
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01992F36BE216388B301ED8CD90F13015C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          10FA
Signing time:             Tue 09 Sep 2025 16:02:20 +0000
Manifest this update:     Tue 09 Sep 2025 16:02:20 +0000
Manifest next update:     Wed 10 Sep 2025 16:02:20 +0000
Files and hashes:         1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=)
                          2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: ZpKGH8lE0qBgy2prVNPxJR+/Xx476zckGRhJiTJiOFM=)
                          4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:36:be:21:63:88:b3:01:ed:8c:d9:0f:13:01:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Sep  9 16:02:20 2025 GMT
            Not After : Sep 10 16:02:20 2025 GMT
        Subject: CN=7a594af8092b404fdc38cd13f7e1965240c980ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:a7:cc:e6:9a:80:e0:1f:7a:df:fa:45:fb:
                    a1:e0:2a:43:f9:99:a6:e2:7d:97:64:ff:e2:ae:32:
                    23:06:b3:04:7f:d4:03:16:ba:d1:69:ae:88:a8:f2:
                    3e:31:aa:6f:46:d2:52:10:d2:83:65:52:ce:10:09:
                    26:42:aa:8a:36:d8:34:c4:b8:0e:e6:7b:49:e9:74:
                    76:ab:ad:a8:e9:0c:2c:53:54:84:a3:8c:91:40:df:
                    20:27:70:5a:39:38:c2:10:52:2a:9d:76:89:1b:81:
                    cb:ad:2a:12:de:96:00:7e:c2:a0:54:f9:0a:ae:18:
                    e3:c1:43:27:57:c0:9f:8c:4e:f8:4a:fe:8d:5b:b6:
                    1d:6d:3b:69:66:48:1b:dd:c2:07:f8:45:d4:a7:49:
                    3a:54:d5:3a:ba:7d:a8:25:a4:2b:46:75:74:4f:6c:
                    fe:31:83:e6:bc:c4:c5:1a:7e:c2:96:2f:29:e6:da:
                    8c:be:8a:11:bc:12:07:45:43:29:72:a5:01:d4:31:
                    61:a2:18:bd:0c:50:b9:33:64:08:4a:1c:99:4c:cd:
                    94:7c:ac:2c:94:91:d9:9c:5d:d2:9d:9c:1e:a3:d9:
                    41:97:58:f3:bf:a5:85:c3:49:35:dd:ce:c9:28:94:
                    01:4d:a6:4e:6c:46:4d:7f:d8:45:4e:77:98:48:02:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:4A:F8:09:2B:40:4F:DC:38:CD:13:F7:E1:96:52:40:C9:80:CE
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:06:3b:dd:ba:c9:0b:c9:d9:ab:d8:44:62:10:9d:57:6d:fb:
         a0:07:72:26:39:56:7b:3e:d0:47:7c:48:c9:dc:44:5d:d3:90:
         b1:2f:40:f5:32:37:47:f6:13:94:a5:9a:86:c0:a1:2a:5f:47:
         27:eb:dd:22:ae:e8:ad:24:36:3a:1e:46:78:62:30:ae:40:af:
         b8:0f:e1:50:7b:4e:3b:d7:f2:f2:ab:25:55:a1:45:0b:09:fd:
         58:48:27:41:8a:ad:38:ad:38:56:48:49:31:c0:e7:0a:53:08:
         f3:be:dc:81:0b:6f:bb:4d:33:4d:23:3f:58:d1:1f:a2:76:28:
         a3:6d:3b:59:be:45:b9:a6:29:7b:58:1f:76:63:b8:c2:03:a9:
         0c:08:71:33:68:05:17:23:57:8b:d7:ca:2d:04:33:af:ca:a6:
         93:ac:7a:ec:10:c3:0c:4a:dc:81:ca:e5:6a:19:44:b3:b2:55:
         f6:09:ed:60:28:e5:af:6c:2e:91:e2:3d:42:a7:14:5c:80:71:
         0f:f2:4a:5c:91:c8:d6:6c:3c:4d:11:19:b5:af:2d:e5:8e:bc:
         fe:97:2f:7f:81:df:4f:23:af:d5:10:4e:3a:54:d0:3d:15:02:
         14:f5:b4:95:a2:f8:6b:8b:b3:1e:8d:e8:c2:8c:5c:ca:80:9c:
         d1:65:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:00:00 2025 by rpki-client