Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          Ucn1rvEXWrv1PMMUEwvJqKxlloENV+6rhzzLfssA1v0=
Subject key identifier:   73:B1:4F:E4:30:90:C6:09:32:18:B5:1D:3A:C4:AC:FB:4D:6B:DE:89
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       0199353745585619FACEE21D4D1F42F26EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          16A0
Signing time:             Wed 10 Sep 2025 20:00:38 +0000
Manifest this update:     Wed 10 Sep 2025 20:00:38 +0000
Manifest next update:     Thu 11 Sep 2025 20:00:38 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: qXQN7TjPw9WBWGdMY7iP16lPPS7NM/0QYkBJ3r6yEt0=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
                          6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:45:58:56:19:fa:ce:e2:1d:4d:1f:42:f2:6e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Sep 10 20:00:38 2025 GMT
            Not After : Sep 11 20:00:38 2025 GMT
        Subject: CN=73b14fe43090c6093218b51d3ac4acfb4d6bde89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:a0:8e:8a:a2:77:7d:47:f9:63:db:7f:1e:
                    15:b7:8f:1a:11:4a:5f:a3:8c:48:b8:42:6f:78:5a:
                    bd:29:7f:25:76:4a:16:2f:b5:b9:43:62:41:0e:e0:
                    17:bb:ad:b7:ee:b8:0c:f9:d8:9d:bb:45:e2:f7:03:
                    7f:d1:28:b7:e2:43:2d:96:c3:87:87:93:1e:42:fa:
                    8c:bd:a8:99:25:8b:6d:17:22:50:4a:21:59:85:ff:
                    9b:08:b5:79:5d:31:99:37:44:82:36:1a:88:c7:45:
                    a1:88:1d:de:3c:8b:ba:df:46:e7:37:72:b7:49:00:
                    fd:fe:b3:f3:4d:cd:0f:81:fb:35:df:c4:25:71:cd:
                    5d:b3:56:c1:6f:46:a6:f8:15:2d:8a:15:f9:ac:bc:
                    49:fe:ff:db:4f:fc:a1:37:d8:41:23:ac:5a:17:b6:
                    6f:01:8c:3e:1e:ae:18:9e:22:62:6f:9a:c2:51:b2:
                    c9:0c:cf:ed:18:8e:10:cc:20:99:fb:7a:49:bb:c8:
                    4d:92:4b:20:85:77:a1:7c:60:dd:75:39:9e:97:2e:
                    00:9d:fe:34:ed:0d:11:8f:3d:cd:71:4d:e8:7c:78:
                    76:d6:cc:71:1e:01:99:00:11:ba:a8:4f:f0:e9:02:
                    2f:81:84:eb:5b:a5:8a:e0:28:6e:98:f5:ee:a9:3b:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:4F:E4:30:90:C6:09:32:18:B5:1D:3A:C4:AC:FB:4D:6B:DE:89
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:5b:b1:75:06:ac:27:26:62:ef:4a:b1:97:38:70:5a:69:
         7e:a9:e7:66:16:1a:0e:39:76:73:46:d2:f5:ea:34:d5:58:d3:
         5c:09:30:29:c1:bc:61:bc:fa:b1:00:a4:99:40:c5:32:76:9b:
         93:1f:3d:36:81:29:e5:49:29:0e:b5:48:bd:e1:5d:cd:19:52:
         60:03:88:09:6a:de:14:1d:4a:c3:bb:d6:28:f9:e3:48:73:bb:
         14:43:6f:f7:42:ef:9f:55:08:f3:62:4d:80:33:f6:87:b5:2c:
         be:02:2d:df:7f:bc:46:5d:b1:e3:e2:92:08:42:c9:f1:3f:e5:
         61:80:b3:78:01:1d:86:dd:82:6a:dd:f0:e0:24:f5:5f:eb:44:
         eb:58:ac:00:06:20:6f:ce:85:b0:5f:75:ec:ca:a4:6f:26:e4:
         38:22:a2:df:35:15:3e:77:05:78:35:f6:45:ca:c2:38:aa:4c:
         e1:04:4b:b3:07:9f:42:40:2b:e4:39:12:8d:35:ea:d3:f5:63:
         e7:40:9e:f2:29:01:25:91:d1:d4:e1:b3:26:37:af:22:2b:d6:
         56:54:9a:67:d3:a3:a3:7d:8a:49:97:10:db:d0:75:3d:dd:a9:
         4d:8a:5a:44:97:b1:11:d9:c0:56:e8:8e:db:48:a6:18:1c:cc:
         8a:3d:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:34:21 2025 by rpki-client