Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          rKRsOIA6SsIap7PcM8T62YN4/Iis1fZ2YZeSmDFMmtE=
Subject key identifier:   2A:F6:E0:32:B8:AC:1D:18:BF:81:DF:0A:71:25:9A:EB:50:C0:B1:55
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       01995BA1113AF27E61D2BF384E28F234A848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0D25
Signing time:             Thu 18 Sep 2025 07:01:46 +0000
Manifest this update:     Thu 18 Sep 2025 07:01:46 +0000
Manifest next update:     Fri 19 Sep 2025 07:01:46 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: NasgJ+rJiUjIugJ+MtMrYLAABAhir4WSV+UzSmqkyqE=)
                          2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
                          3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
                          4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5b:a1:11:3a:f2:7e:61:d2:bf:38:4e:28:f2:34:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Sep 18 07:01:46 2025 GMT
            Not After : Sep 19 07:01:46 2025 GMT
        Subject: CN=2af6e032b8ac1d18bf81df0a71259aeb50c0b155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:d7:d7:10:5f:45:e8:96:af:68:21:61:47:
                    ba:87:e4:33:7e:90:a8:31:59:24:9e:1c:25:da:f8:
                    44:6a:14:8d:89:f5:17:fb:95:97:1a:e3:cf:b2:8e:
                    64:9f:51:e3:40:bc:b2:de:95:e5:16:f5:3a:1f:9c:
                    8a:c9:b0:ac:9c:d7:41:61:76:69:70:71:bb:4e:39:
                    00:a2:4b:3b:8d:7a:f6:13:9b:3c:b8:10:34:c0:a9:
                    af:16:cb:ea:fc:15:7c:78:c1:28:c2:d7:10:54:54:
                    3c:b5:96:11:09:a8:48:28:0f:b9:9f:34:ed:a8:09:
                    a7:34:f7:dd:45:d6:85:76:76:a6:26:58:a3:59:c0:
                    a6:6a:0f:2d:be:59:19:d6:2b:dc:92:b7:08:f7:d3:
                    59:04:74:02:f5:c4:95:40:e5:2b:3e:a8:25:03:dd:
                    6a:11:92:09:4d:34:08:d4:50:f9:fb:51:3c:39:5c:
                    17:ed:02:98:db:fa:23:57:32:eb:58:ad:0f:66:c2:
                    16:4c:63:bf:5b:a1:55:48:d7:72:d3:c4:ac:85:03:
                    29:67:7c:cc:99:b2:de:39:e8:c0:ae:45:fe:f6:bf:
                    3a:b3:85:58:ad:4a:f8:2f:50:8b:36:9e:51:10:3b:
                    cb:24:5b:ff:03:f9:a7:1f:b7:56:87:df:11:0d:48:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:E0:32:B8:AC:1D:18:BF:81:DF:0A:71:25:9A:EB:50:C0:B1:55
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:2d:82:2f:b2:31:c6:01:80:6a:a5:4c:fe:9b:49:12:da:
         73:39:2b:71:ed:78:12:78:84:c9:d5:2c:0c:dd:ab:74:98:09:
         88:97:29:59:71:5f:ae:e2:ab:20:5d:22:d4:6b:6f:c7:88:ea:
         ca:02:a5:41:25:80:6d:cc:36:4f:72:88:8a:bc:2a:58:d7:8d:
         f8:c8:ad:96:4e:d8:7b:ff:3b:a5:3d:8f:e6:66:bd:23:da:1f:
         18:7f:11:55:a7:0c:ed:30:24:d7:10:c7:86:48:c0:91:6c:31:
         ca:02:9e:d4:6f:fe:6f:64:20:9a:0a:74:f7:a5:4e:64:76:17:
         fa:c6:7c:c4:59:8c:34:e4:7a:bb:4d:6e:af:05:63:7c:ed:94:
         31:88:a2:e7:70:a9:bf:df:40:f8:55:03:6a:00:31:b3:3f:34:
         9c:b8:0b:2c:f0:54:82:b8:17:7d:0a:eb:1a:1d:13:e4:ec:d4:
         b1:ed:fd:30:a5:a1:d4:fd:ba:87:8d:91:ed:43:dc:f7:dc:fe:
         cd:dd:2a:bc:a9:22:d2:a1:fe:f6:84:03:bf:ad:7f:9b:0e:4e:
         ee:b8:b5:f3:3b:1b:64:6f:45:9d:f0:ee:2c:8d:8f:7a:1b:c3:
         5b:5e:0c:bc:12:70:b4:72:68:8d:16:0c:d1:40:ea:46:41:ef:
         8e:1a:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:23:43 2025 by rpki-client