Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File:                     1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier:          l700smGRCUXxMRnkSN9xTwcjXdfoPO9xXmvxAF5aTOk=
Subject key identifier:   46:6B:7E:93:E8:9D:DB:AE:4F:96:5B:3C:F4:BE:BD:2A:0E:46:6B:C1
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer:       /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial:       0198CA25CD96BC7452AFE245559854AC9B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number:          14
Signing time:             Thu 21 Aug 2025 01:02:11 +0000
Manifest this update:     Thu 21 Aug 2025 01:02:11 +0000
Manifest next update:     Fri 22 Aug 2025 01:02:11 +0000
Files and hashes:         1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: sY/N0qGuWRqxG1q+Wq141hMvcqs/GmLaP4sbtefTOFo=)
                          2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:25:cd:96:bc:74:52:af:e2:45:55:98:54:ac:9b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
        Validity
            Not Before: Aug 21 01:02:11 2025 GMT
            Not After : Aug 22 01:02:11 2025 GMT
        Subject: CN=466b7e93e89ddbae4f965b3cf4bebd2a0e466bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:98:27:ed:15:23:e0:64:1f:e4:c9:a8:31:
                    fc:fc:0a:b0:8e:e0:41:02:03:e8:67:14:80:ee:b0:
                    ab:20:7a:dd:37:22:f2:27:18:1d:af:b1:c2:8f:a1:
                    42:88:70:c6:25:69:28:26:99:69:37:9c:6d:e1:08:
                    f1:9e:c7:f8:47:c3:af:2b:0a:20:0a:8b:fc:ea:5b:
                    d8:df:0f:78:c6:f3:43:00:2e:1f:06:dd:06:bb:ba:
                    4d:a6:d9:8a:f9:91:8d:05:af:7e:90:e1:55:b2:4b:
                    0c:8b:6d:99:6d:2f:3a:74:74:3f:5c:67:60:52:3d:
                    b4:79:cb:6a:6a:12:3e:fd:e7:43:7a:00:7d:4f:b9:
                    cc:9d:f8:52:d6:22:a1:d0:7e:50:f5:74:5e:71:99:
                    e1:57:31:f9:21:c8:75:f6:11:ff:44:09:4a:36:45:
                    93:de:5f:0c:df:6f:6b:dd:4e:2c:61:3c:0f:cb:fa:
                    0a:6f:00:22:4c:2f:3e:2a:8c:aa:cf:af:e1:9d:19:
                    c6:ad:9c:5b:59:5f:c0:32:3f:22:71:6b:41:e7:f0:
                    f8:42:6a:0b:75:2e:51:85:93:9c:86:19:93:24:ec:
                    a9:30:5d:ac:44:bc:d3:7e:69:c3:63:0e:ba:d0:8d:
                    0e:ad:1a:96:34:f1:0e:60:91:e1:57:2e:66:c8:cb:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6B:7E:93:E8:9D:DB:AE:4F:96:5B:3C:F4:BE:BD:2A:0E:46:6B:C1
            X509v3 Authority Key Identifier:
                keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:a1:c4:58:59:6f:b5:0a:22:b8:9e:e3:87:3d:3a:ff:8f:
         2c:4c:ee:ef:de:8a:da:33:53:d3:2a:00:72:de:1e:e4:7f:49:
         28:61:6c:67:02:b5:d1:82:9c:98:fd:67:de:67:9b:3d:ba:d9:
         15:4f:fc:72:d3:cf:14:88:1b:1a:03:d4:ed:d8:f6:83:05:a0:
         d3:93:22:9d:0b:e4:14:64:2b:08:a9:12:49:12:4d:4d:36:97:
         81:ae:cc:a8:48:05:1a:84:3e:f6:26:fd:79:50:3c:62:69:a4:
         e8:cd:ff:52:c7:cf:9b:a1:58:c9:d8:73:c0:85:d0:fc:df:db:
         58:58:dd:5e:86:57:29:bf:d6:7d:74:59:25:95:f0:bb:57:a4:
         c7:d4:ea:e9:9e:61:cc:02:d8:9c:06:03:4f:01:22:7f:be:24:
         a9:90:52:bf:89:81:27:a8:4c:c5:a9:9c:1b:b6:ae:e3:bc:62:
         67:af:28:fe:e9:40:e3:a5:42:0b:e1:ac:9a:6d:81:1f:c8:f4:
         00:ba:a0:d6:89:5f:bb:6a:87:17:6c:f2:95:d8:1f:c4:16:71:
         a8:49:4a:11:64:88:5b:56:66:10:1f:d8:9c:ac:7e:c7:81:03:
         59:17:96:94:1a:57:1e:37:f8:94:2d:0f:14:cc:c9:22:9d:e3:
         6f:d4:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:17:34 2025 by rpki-client