Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File:                     98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier:          KE2AIn7bL09pc4R6MVx3BPQsrzuSUh5FaquxNtoGhsI=
Subject key identifier:   07:EE:B9:96:21:15:18:DF:27:48:9B:13:46:7B:58:24:8C:ED:87:95
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer:       /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial:       0199221F33995650316DF8A723239FE53D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number:          055F
Signing time:             Sun 07 Sep 2025 03:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:34 +0000
Files and hashes:         1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
                          2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: 5U9lP7J5vZXSx2y6zrjigfOthj8xWQK+Wc+JsBUepG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:33:99:56:50:31:6d:f8:a7:23:23:9f:e5:3d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
        Validity
            Not Before: Sep  7 03:01:34 2025 GMT
            Not After : Sep  8 03:01:34 2025 GMT
        Subject: CN=07eeb996211518df27489b13467b58248ced8795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:1f:83:8f:c3:5f:5a:c3:4f:c0:80:b9:d1:
                    71:4e:fd:82:10:09:dc:23:f6:3f:7d:cc:90:7c:65:
                    7b:ac:a5:54:07:7b:e8:c7:2a:cc:c7:90:cf:94:9c:
                    09:6c:cf:0f:b6:0a:f4:f4:e7:3b:15:c2:63:ab:c8:
                    96:41:81:86:9c:27:32:38:a0:87:96:fa:ef:08:f7:
                    69:ab:3e:07:4d:bb:6e:14:c7:fc:94:fc:ca:76:d1:
                    6d:61:bd:1e:b8:17:2a:97:61:f0:1f:fc:58:72:64:
                    47:80:f1:3d:d0:9b:d6:2e:3e:9e:92:e2:94:bc:d9:
                    a9:27:ab:50:cb:c9:28:79:cb:c8:20:a1:1a:48:c8:
                    0d:34:f4:f0:73:3a:8c:07:98:aa:03:55:9d:d0:b4:
                    7a:1e:4c:f9:9d:74:d5:d6:6c:b8:ad:86:9b:09:25:
                    4d:c5:34:8a:24:0e:28:29:9b:bf:a5:86:a6:a5:cb:
                    3a:89:b7:45:65:0f:9e:ba:8d:b0:21:be:31:91:1f:
                    e4:30:9f:b0:a0:50:31:4e:db:9c:0c:d2:be:cd:7e:
                    04:7c:fc:05:d4:e5:d2:a9:f8:33:d0:c4:37:db:f9:
                    36:6f:f0:2e:67:36:12:b3:89:14:cc:f7:98:07:64:
                    f0:99:1d:25:1c:2c:b1:25:9d:72:74:25:d1:0f:37:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:B9:96:21:15:18:DF:27:48:9B:13:46:7B:58:24:8C:ED:87:95
            X509v3 Authority Key Identifier:
                keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:d8:0c:56:00:61:f2:d0:25:ac:b0:58:19:99:f9:dc:1d:
         13:2d:45:15:a1:1c:59:b6:3f:62:01:4b:9d:a8:44:03:70:ef:
         38:bb:af:bb:73:94:2a:0e:dc:99:af:ad:8e:ed:20:89:1c:a5:
         26:c9:04:e1:17:b7:06:ac:17:78:2a:fc:04:6b:f9:a0:16:c2:
         4b:6d:e6:fa:6d:d6:12:7b:67:2c:4d:c5:ac:04:ae:ef:94:64:
         c9:bb:74:41:41:aa:ad:ef:04:a3:be:d4:20:28:f0:ae:3a:9c:
         e8:7e:83:cf:56:39:94:15:91:43:73:b9:b5:76:9b:2f:96:1c:
         b4:bd:e9:83:e9:f2:50:7c:f4:32:c1:64:d8:d9:e0:bf:3c:f0:
         01:3f:cb:0e:86:81:37:4e:d7:53:c8:a1:bd:51:d5:39:0d:ee:
         42:80:12:2e:dd:5c:51:43:30:ce:d0:90:ff:a8:9d:c8:f1:56:
         3e:03:9c:b5:da:1a:7b:20:a0:da:ad:f8:6a:69:08:90:88:63:
         ad:dc:98:01:a0:49:f0:96:d4:da:bd:87:5f:4e:4c:c6:f9:84:
         e5:85:0c:1f:d5:99:42:74:a6:f5:6c:a1:31:ee:23:58:3d:00:
         1f:d0:fa:c5:3b:64:8f:74:74:1f:d2:5d:9d:28:c4:57:b5:4a:
         08:01:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:13 2025 by rpki-client