Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          cycnQqU3IVv6ltTnh6lVx6NYHsE29QpeAUwW6Q1WEWE=
Subject key identifier:   9C:DE:BE:64:D1:23:41:77:32:15:5E:20:AB:BB:2F:70:B1:68:0B:F4
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       019862126C10B716907ED65CCA36C3AD8034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          110D
Signing time:             Thu 31 Jul 2025 20:00:31 +0000
Manifest this update:     Thu 31 Jul 2025 20:00:31 +0000
Manifest next update:     Fri 01 Aug 2025 20:00:31 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: ARCDt/wM21rkTmEyIciYE3Pl+wIhfiZYw4r7aLGVMrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 Aug 2025 16:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:62:12:6c:10:b7:16:90:7e:d6:5c:ca:36:c3:ad:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Jul 31 20:00:31 2025 GMT
            Not After : Aug  1 20:00:31 2025 GMT
        Subject: CN=9cdebe64d123417732155e20abbb2f70b1680bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:c3:43:98:17:85:4e:de:30:88:1f:f1:bc:
                    9d:de:44:72:71:d1:7c:36:2a:c0:78:91:9c:77:2e:
                    8a:fb:b0:f5:f6:89:36:66:d5:63:e4:d4:27:77:31:
                    7d:f4:78:73:97:03:1e:a9:65:dd:ea:a5:13:c3:3d:
                    d9:77:75:f9:dc:3b:37:3f:cf:e8:fd:ed:d8:ea:ef:
                    f6:e0:84:6d:31:26:45:b6:67:28:c1:8d:69:30:da:
                    66:12:1f:9c:d4:48:98:5b:d6:20:2b:ad:89:dc:9d:
                    ce:87:9e:bf:cf:78:18:7d:90:b5:39:26:cb:ff:ef:
                    b3:72:ff:b6:74:eb:25:1a:2a:02:b3:a3:cc:e9:a0:
                    51:f9:16:5b:4c:ff:ec:86:e6:e6:43:33:4b:63:0d:
                    14:22:18:1c:38:72:2b:23:7a:13:bd:45:08:67:0d:
                    79:47:60:44:33:32:1b:e4:5f:e1:dc:63:59:52:14:
                    c7:bf:a6:f4:31:6d:dc:81:eb:16:79:94:67:dd:f6:
                    23:22:01:95:c4:5d:e3:47:72:1b:57:7b:3f:37:28:
                    b4:22:8d:81:31:ae:d7:87:e8:bd:47:80:e4:97:65:
                    a5:03:fa:60:8b:7e:2c:80:13:ad:19:8c:09:79:d0:
                    7d:49:90:ef:36:1c:3e:ef:34:14:44:ee:8c:09:00:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DE:BE:64:D1:23:41:77:32:15:5E:20:AB:BB:2F:70:B1:68:0B:F4
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:19:61:26:b4:89:b2:4a:33:6b:12:fd:08:18:8a:9b:45:
         51:d6:25:94:02:16:95:b2:b2:da:18:53:a9:83:bd:f8:08:4c:
         5a:1e:6a:3b:d8:1f:1d:92:9a:75:fc:7a:a8:ca:52:d9:fa:c6:
         45:da:17:d5:3e:f4:42:1a:08:21:3f:8e:a1:ef:5a:89:0f:ed:
         49:85:f4:23:6e:40:37:0f:70:e1:38:b0:bb:1b:76:b8:bb:85:
         0f:57:24:2f:58:a7:f2:a4:42:e3:11:b0:79:c3:08:bd:e4:d8:
         04:4a:e6:47:4f:a7:76:b2:3b:ff:2f:4e:a3:01:b6:d6:2e:83:
         82:41:2f:62:3c:46:2d:a5:d6:52:87:2c:3a:15:df:c1:16:f7:
         76:bf:ee:e9:e7:8a:b4:57:1c:36:69:e6:2d:af:27:c7:ec:00:
         64:45:08:7c:7d:74:21:fc:10:a9:a4:4c:76:42:13:e8:06:9d:
         2e:c3:10:7b:51:65:cd:60:fd:80:46:1a:02:fc:7e:39:aa:8f:
         00:60:ac:b6:e9:4a:ea:db:f3:d3:34:69:3a:8e:88:de:17:25:
         2c:2b:ee:77:13:4d:ef:a8:56:a1:12:14:10:d1:eb:62:7a:b6:
         5c:d4:a7:70:b7:da:07:ce:e7:6a:01:73:70:00:3f:37:86:32:
         ef:12:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 22:29:45 2025 by rpki-client