Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File:                     _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier:          l53CZLDFvJE5xnXSmLNzV38TejlTprsJZN5B+vSYIyA=
Subject key identifier:   35:89:88:50:84:FD:F7:62:12:47:17:8C:9E:21:29:A5:AC:81:E3:E1
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer:       /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial:       01994F9BC4147322B717EDB2D200B9AC402E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number:          0A2A
Signing time:             Mon 15 Sep 2025 23:00:32 +0000
Manifest this update:     Mon 15 Sep 2025 23:00:32 +0000
Manifest next update:     Tue 16 Sep 2025 23:00:32 +0000
Files and hashes:         1: 59SaltDz-0o_TQoBEKFXLERY6y8.roa (hash: 8OZsJspR0zg99vIUKnzi0iZkH7/6VtXXwr7pGOuqCK0=)
                          2: E__vFrmTsxyOGMhhVRbUyFs6fE4.roa (hash: f5Wu8Iuw9y3vTxcVmuh7meVQB42MGArKR0E5sohYz4c=)
                          3: TrgvhdTHQM75gjmPCWy-go1xZ7g.roa (hash: J0ss3iNRgQuDXDO+ZUHpxFg7+eVayUQpwRLYiauVRcM=)
                          4: X0-3PAazjse0hHhiAz0y98y6xD0.roa (hash: AtkwB+eyCo+X4Q8oeouklk8Nhb4ehYTOanEpZg+NyIY=)
                          5: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: mFBk01QzeVMNmj8uvnMdBkQ034u4VdSYLDdg9pFKvuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4f:9b:c4:14:73:22:b7:17:ed:b2:d2:00:b9:ac:40:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
        Validity
            Not Before: Sep 15 23:00:32 2025 GMT
            Not After : Sep 16 23:00:32 2025 GMT
        Subject: CN=3589885084fdf7621247178c9e2129a5ac81e3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:40:0b:05:c4:41:de:96:88:60:5b:ac:26:
                    65:45:fa:61:60:30:cc:c5:c2:23:57:24:f2:3a:5c:
                    da:5d:d2:01:f3:c4:cb:71:85:2b:0e:9c:a5:30:eb:
                    a4:44:a6:42:d3:ae:dc:8c:0b:46:01:9e:54:2e:d5:
                    3a:4c:07:c6:cc:d8:0e:fc:4c:14:03:51:10:45:f8:
                    f1:41:92:d7:d7:e4:17:da:3a:80:be:53:46:f5:3a:
                    28:46:91:39:07:91:b9:6c:e5:50:9d:0e:53:2c:d9:
                    2c:5c:a0:62:aa:3a:87:79:32:0a:4f:1c:dd:6b:36:
                    4d:80:8f:8b:56:f9:c6:d8:a5:98:7b:c2:e9:b5:33:
                    9c:c6:e4:1b:1a:b6:35:42:36:19:b0:27:01:90:2c:
                    5b:f4:71:11:4d:87:95:36:eb:a8:9d:a8:55:92:73:
                    e8:88:b2:c0:12:7b:46:65:ec:23:c4:73:9f:e3:f4:
                    e0:76:e8:b0:bc:43:20:ec:87:a0:aa:78:cf:5c:a4:
                    3a:ef:f0:51:f1:0b:f7:fa:a0:be:0f:0a:e7:34:a1:
                    5f:d9:59:15:78:46:22:aa:e2:6e:d6:fb:54:75:ac:
                    ef:3d:95:40:c2:5c:33:b2:fa:78:a8:45:b7:1b:c0:
                    62:78:ff:ae:79:d1:06:19:70:40:96:f3:4a:fa:2a:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:88:50:84:FD:F7:62:12:47:17:8C:9E:21:29:A5:AC:81:E3:E1
            X509v3 Authority Key Identifier:
                keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:2a:a0:a9:d2:2f:0f:0e:c6:02:90:ba:35:07:11:ca:0c:
         98:62:ec:cd:cf:23:e3:03:1d:7e:4b:ee:fe:c0:b0:6b:0b:9c:
         67:d7:b7:b6:82:fe:1d:bc:c9:a7:12:87:30:2d:11:08:6a:43:
         4d:0b:16:96:81:b4:48:af:47:59:27:4d:c8:ae:83:39:50:d6:
         12:0a:5d:46:7e:c8:88:a7:ea:99:49:78:b5:b7:e9:c1:70:a7:
         e1:18:38:0d:5e:fe:63:52:0b:ed:6e:40:e3:6e:c9:6a:46:96:
         da:48:30:ba:74:c6:83:29:ed:aa:87:79:67:ac:09:2f:4e:f4:
         90:9f:1b:e4:5b:34:b7:f5:9e:10:7d:1f:59:29:fc:54:12:d6:
         87:96:a9:40:ee:d1:81:e4:6a:2c:90:33:eb:fe:60:06:a8:47:
         a9:53:27:f3:99:ab:8c:95:89:ef:2c:7a:48:7d:48:5b:ff:a9:
         59:20:37:1a:e5:11:ee:cb:22:ed:1e:6b:7b:71:86:76:1c:60:
         4c:95:e1:f7:e8:53:5a:a0:55:af:07:70:26:e2:07:f8:30:3f:
         b7:65:f5:e9:2a:27:ae:48:6f:30:3c:34:5b:b8:f5:d7:1e:58:
         87:72:cb:cd:60:41:3c:56:84:53:f2:a3:1d:e3:34:4b:ad:be:
         54:5a:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:45:28 2025 by rpki-client