Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File:                     loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier:          7ghw4vSQBok5dr0KDdtAgafRUw/zaFy4Q82Bf4QIETk=
Subject key identifier:   E4:FD:5C:2A:5B:EB:4C:98:03:83:2B:DD:D1:8B:78:FF:59:E4:FD:86
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer:       /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial:       01992EC75E6581F45D94D5EE9E738BE494FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number:          0119
Signing time:             Tue 09 Sep 2025 14:00:41 +0000
Manifest this update:     Tue 09 Sep 2025 14:00:41 +0000
Manifest next update:     Wed 10 Sep 2025 14:00:41 +0000
Files and hashes:         1: F7JL5bHYyLaweW8pONIwm4V1Ta8.roa (hash: 9Al0+nQsmlduPmazSDY0bBkTJLPuHl1nJV+djdoKlfw=)
                          2: aOIjfYULj8ZZW-4gX-UQwdrDQ9U.roa (hash: 0raPVOn63vL6rgNpBZdFkEjdsenkXzmQ/PYsO0nF2sE=)
                          3: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: hF9k5mXQ70ggU1pYMoLeUzTmbcF5AIUNXa5lhpF8OJE=)
                          4: qxk1xepxwGG51OB8xsnLC_37Uaw.roa (hash: ypZE1fVxTf8ts+4DLxa1x+J1+KV7fqtGzn+ax6Dq94A=)
                          5: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (hash: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:c7:5e:65:81:f4:5d:94:d5:ee:9e:73:8b:e4:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
        Validity
            Not Before: Sep  9 14:00:41 2025 GMT
            Not After : Sep 10 14:00:41 2025 GMT
        Subject: CN=e4fd5c2a5beb4c9803832bddd18b78ff59e4fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:ea:23:9c:3a:57:40:77:ad:89:ed:29:02:
                    6b:1a:ee:dd:f5:e2:55:65:5c:eb:18:2a:c4:9b:65:
                    ec:92:08:ea:9c:4a:c2:e2:00:8d:ab:82:4d:77:ac:
                    de:44:8f:d6:25:73:86:c7:99:2c:d9:14:0f:3f:ba:
                    a7:cf:99:2d:7d:25:e3:28:19:06:40:50:0e:74:66:
                    4c:3b:95:7a:99:2b:a7:1b:e6:a3:4f:07:fb:77:57:
                    15:ca:8e:bb:2c:e6:95:c0:34:1f:0f:7a:3f:c8:ec:
                    97:47:94:34:4c:fe:de:87:26:51:a0:70:9c:64:a4:
                    3e:1e:c8:f7:da:c1:43:5a:29:43:87:93:c7:9c:60:
                    dd:19:e3:64:04:33:66:5b:05:b0:f1:d4:45:a7:79:
                    a2:4c:1b:62:16:8e:94:b1:27:7d:70:7b:b1:46:85:
                    b2:f1:d0:ed:28:76:0a:15:7c:c7:22:0d:96:f6:86:
                    f6:d2:3b:83:d1:1a:4c:77:b5:72:02:30:99:bc:a0:
                    f2:dc:2e:9f:a1:d5:d3:bb:6a:a3:f1:69:22:c4:1e:
                    ca:72:a4:d8:ef:cc:0e:6b:46:25:5a:76:ae:c7:07:
                    e4:34:93:00:76:05:0b:5f:c0:ed:81:c7:7c:26:67:
                    08:92:af:b8:42:b8:c2:e3:d9:c5:da:2d:30:f5:73:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:5C:2A:5B:EB:4C:98:03:83:2B:DD:D1:8B:78:FF:59:E4:FD:86
            X509v3 Authority Key Identifier:
                keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:be:75:d3:be:47:ca:92:ca:ba:25:ea:ad:1d:04:92:75:1b:
         dd:ab:d6:82:a2:16:a7:63:31:51:a9:b7:5a:4c:13:53:76:c5:
         3d:10:42:39:54:49:13:a5:73:3d:85:01:cb:e3:a2:67:33:8a:
         e7:3b:9c:28:e9:19:fe:18:e3:a8:44:60:a0:18:dc:e0:95:78:
         2c:1c:bc:dc:e4:bb:3c:5b:4e:57:e4:76:d8:2e:a7:cb:70:49:
         76:20:00:cc:ee:e4:a6:c1:f4:f1:e6:7f:52:f1:bd:38:5e:62:
         f3:18:42:31:16:74:e2:48:d2:94:7a:56:5d:ed:08:ea:dc:01:
         1d:4d:42:68:1e:a2:19:96:96:79:0a:05:3e:89:e2:a3:8b:d3:
         20:56:35:75:de:41:9d:5a:19:6d:fc:7b:b5:b2:5a:1d:50:9e:
         ea:2c:b2:20:53:2d:0f:70:da:7e:cd:fc:06:81:57:69:25:8c:
         8f:98:c7:3f:73:7c:fd:af:74:b0:e9:d0:a4:57:94:6c:73:2c:
         7d:9e:cc:c8:d8:e0:65:89:30:32:01:fa:88:36:49:88:a3:61:
         a2:8a:1e:ab:82:d5:a6:4b:5e:48:c0:e6:4e:98:f4:7c:ce:fe:
         92:95:38:96:9d:89:49:91:fb:0f:0d:96:3a:f7:4e:11:83:6a:
         9d:e6:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:12:38 2025 by rpki-client