Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          HZInJCZZ3ltjNvwnZmOQHIEylBfzErLDLRjrmoWHXmw=
Subject key identifier:   73:55:88:A5:E4:E5:94:9F:17:5D:05:FA:83:0B:38:4D:EE:45:54:C6
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       0199315AF101EA81394E718DA6BC0AA6BDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          0D9C
Signing time:             Wed 10 Sep 2025 02:01:07 +0000
Manifest this update:     Wed 10 Sep 2025 02:01:07 +0000
Manifest next update:     Thu 11 Sep 2025 02:01:07 +0000
Files and hashes:         1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=)
                          2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=)
                          3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=)
                          4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: NewzR2iy/EvHGmFGGf0Kn8Q3tp677tJyNg9WTbTXwaQ=)
                          5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:5a:f1:01:ea:81:39:4e:71:8d:a6:bc:0a:a6:bd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: Sep 10 02:01:07 2025 GMT
            Not After : Sep 11 02:01:07 2025 GMT
        Subject: CN=735588a5e4e5949f175d05fa830b384dee4554c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:dc:61:57:06:2c:f2:35:f9:22:0f:16:a2:
                    d0:4b:e4:43:60:31:21:cb:59:96:95:5b:32:b6:19:
                    05:46:6d:52:de:1b:94:21:87:8a:f5:56:65:af:8b:
                    aa:0a:a4:d4:17:c2:20:20:c7:30:77:ca:5e:d7:96:
                    81:e7:5b:cd:08:78:4e:49:1c:61:d5:d1:ca:c1:58:
                    3d:be:bc:b6:2c:eb:28:bd:19:d3:79:ea:20:e2:3c:
                    c6:22:f0:b1:86:3c:70:0b:ad:1b:35:a0:59:6e:35:
                    5d:db:97:01:2f:12:64:1d:59:80:da:30:4b:26:e2:
                    38:47:a4:67:cf:0d:63:7f:6c:21:6c:cb:84:95:10:
                    ad:7b:27:4d:fa:1d:76:29:5a:71:64:cd:a5:24:4f:
                    70:58:a0:10:d2:db:2a:8f:a0:55:aa:d0:94:ce:ef:
                    1d:20:c7:4d:bc:78:6b:d0:79:92:d1:c7:5b:03:5d:
                    87:0f:db:16:8f:7c:59:3e:25:d9:f3:51:8e:07:7e:
                    ed:85:61:b6:b0:c2:bf:0e:8b:13:e7:2a:a9:cd:ba:
                    5a:dc:a4:fc:04:fa:5c:84:96:7e:9f:fe:9d:8e:cd:
                    fa:9e:c7:ff:45:6b:1e:99:bb:65:f2:23:ea:28:5d:
                    69:80:52:e4:d7:c5:ea:9a:33:ae:12:c4:7c:db:5f:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:55:88:A5:E4:E5:94:9F:17:5D:05:FA:83:0B:38:4D:EE:45:54:C6
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:66:d1:0a:c4:56:14:a6:84:a3:06:7a:14:b2:ad:c2:ae:
         ff:39:c4:0e:f5:07:51:ec:8f:aa:51:b6:83:df:24:67:92:79:
         bb:8e:f7:25:a7:bf:61:01:1f:ba:ec:9e:ab:7b:7d:c1:bf:7e:
         0a:bc:f3:56:57:cf:10:4a:c4:c3:53:99:3c:ce:d1:cb:eb:49:
         9c:51:81:b5:eb:82:5c:26:44:e5:b9:26:d3:e2:08:0b:26:f6:
         08:a1:00:d8:c7:ba:26:c5:f2:ee:05:d9:0e:b2:ac:30:5c:5e:
         f5:28:8a:4d:46:ca:df:4a:93:ba:8c:46:1a:95:30:ed:6d:aa:
         8a:a4:74:23:86:4f:3d:59:0b:51:33:95:f7:6f:9c:c4:fa:21:
         b6:bb:70:64:f6:7d:25:0a:fc:59:52:d8:a7:ad:f2:52:bc:99:
         8c:03:34:08:5a:7a:b9:96:c8:3c:5c:b0:58:82:94:08:ac:05:
         db:0d:17:0e:d2:81:bc:fa:53:ae:8d:d7:1a:38:9d:98:8e:d1:
         20:ee:93:a2:56:e8:ec:29:62:de:e7:e0:84:29:1c:7d:1b:9c:
         02:68:b3:f7:69:31:63:1d:75:f3:89:a4:f1:b8:32:0d:57:9c:
         45:eb:58:c7:e0:33:71:ee:0b:15:00:e9:98:75:bd:26:60:3d:
         1f:d8:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:31:51 2025 by rpki-client