Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File:                     x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier:          xRRMyxWvMNkkx0zGC8jM5YaYCWMDQgnrbx6noass4ds=
Subject key identifier:   E4:77:32:CF:69:A9:91:21:7F:26:08:FC:03:D4:FB:15:CD:BD:71:7D
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer:       /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial:       0199228C477578EA6BF05AC5A10BE8C6458C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number:          0C99
Signing time:             Sun 07 Sep 2025 05:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:42 +0000
Files and hashes:         1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
                          2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: wPZwcxFM5vYKCd76rnxOwYoXNHLztFvMoB0jwtuNWsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:47:75:78:ea:6b:f0:5a:c5:a1:0b:e8:c6:45:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
        Validity
            Not Before: Sep  7 05:00:42 2025 GMT
            Not After : Sep  8 05:00:42 2025 GMT
        Subject: CN=e47732cf69a991217f2608fc03d4fb15cdbd717d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:2a:de:9c:de:40:58:9f:a3:a7:3c:9c:4e:
                    52:a5:e8:17:14:0f:8f:ad:10:12:8a:21:ba:8d:45:
                    f8:66:90:c0:34:e6:e8:78:7f:41:05:c1:b4:11:22:
                    f0:71:57:b4:6d:10:d5:48:c8:c6:9e:1a:e8:f4:73:
                    4f:80:3b:7d:eb:bc:45:3d:4f:9a:7e:5d:75:61:65:
                    34:b7:4a:3d:f9:5e:26:36:23:c0:de:f0:ec:31:ca:
                    6f:d8:31:f9:2d:e1:a2:fe:27:c4:7f:e7:8e:c3:17:
                    7c:8f:f0:76:73:9c:66:39:75:00:2d:53:58:17:fc:
                    33:ba:ff:df:49:86:bd:99:07:b5:ac:31:be:b4:2c:
                    1a:68:1c:84:1b:ec:e0:20:21:28:d5:75:e6:c6:3b:
                    ef:a8:c2:bc:43:f6:89:ba:26:68:df:2c:3e:63:2c:
                    94:b2:4c:33:ab:ba:d8:81:e7:72:17:28:f6:b6:b9:
                    6c:7d:af:48:25:ec:b6:f2:d2:61:1c:d9:2f:dc:6f:
                    b7:b2:d7:4a:dd:8f:c9:e9:ff:77:f5:89:68:d0:52:
                    4c:97:bc:ae:82:c4:b9:aa:2f:b4:bc:06:04:e7:4a:
                    df:24:46:c1:75:e7:75:7f:fb:df:04:75:6d:45:16:
                    39:21:07:af:a7:94:36:18:c1:15:9a:b8:95:29:dc:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:77:32:CF:69:A9:91:21:7F:26:08:FC:03:D4:FB:15:CD:BD:71:7D
            X509v3 Authority Key Identifier:
                keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ff:0d:0c:28:38:ba:42:06:d1:d9:f6:96:83:d8:59:ef:4d:
         5a:56:8f:de:08:90:db:ed:8c:7f:03:6f:c2:06:d9:71:0f:d0:
         d3:aa:63:c1:b0:8d:e2:24:6b:a3:79:3d:3e:e3:29:63:ae:1b:
         66:ac:87:23:ba:7f:44:6c:23:74:5c:ad:29:81:53:44:17:86:
         15:42:30:d0:70:3b:c0:24:a6:44:0c:b2:71:af:a8:e0:bc:96:
         4b:9f:89:09:47:e9:02:38:58:00:9e:83:7d:e5:87:7c:84:7c:
         e6:33:fa:c7:d7:3a:78:9c:fc:52:e1:dc:1e:40:52:00:dc:55:
         e5:9e:ab:ae:4d:d5:89:44:10:77:b3:1e:3b:d0:0d:05:3c:35:
         72:4a:14:e4:1c:83:7a:7f:5b:10:03:21:84:d5:95:5f:09:33:
         71:4b:bb:fb:66:8e:f0:49:13:a0:90:b6:bf:de:65:15:c5:c1:
         5a:2f:27:46:c8:10:d1:c7:5f:84:4b:d7:13:03:2c:8c:4f:09:
         47:2c:fc:0a:02:5a:1b:f4:8b:1e:a5:84:ba:a5:e2:cf:87:7f:
         59:45:9e:11:b0:c0:a2:de:ab:84:4e:ee:d8:9a:49:49:86:df:
         e9:ef:e5:b1:fc:6f:0a:d0:58:0e:bb:4e:01:a3:ca:ff:f6:1d:
         44:8c:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:04 2025 by rpki-client