Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          PcZsS4NX4hgrrVuwtE8anqdY2SJWQ0yVoYGv58puTWE=
Subject key identifier:   C8:9A:C7:AF:0E:FC:B4:14:77:B3:F8:94:14:C4:01:62:09:91:F0:35
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019932DB7821EE01D9C1408AA7A07380D056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          1683
Signing time:             Wed 10 Sep 2025 09:01:07 +0000
Manifest this update:     Wed 10 Sep 2025 09:01:07 +0000
Manifest next update:     Thu 11 Sep 2025 09:01:07 +0000
Files and hashes:         1: PAOEGXpGQsJvw33MiKgLxU-N9pw.roa (hash: SIleoKFm0+RmqPPjQ8NBeYamDKWHFmuPAgbu+GZPgRQ=)
                          2: ePEY-OvNb5lRfmn8bdNkVwoufIc.roa (hash: waMVDfU557kvvA8oYsX2Z8+jr8xTt0T1pl/hE8kaxzI=)
                          3: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: +WwqU2+FLCMcBRleqxO5oaRghovmFcyXA2c7TY8KMUc=)
                          4: rTKSwyD4bSu0V_OTB6JmkjQohdI.roa (hash: F3/bo+ceS2+kTH3oRunm6ME2Zkm2RRhJyAWZ0mxY7dQ=)
                          5: sZhd0PoWKQb_t3dDn3jTQ-3HgM0.roa (hash: U9YTpBnSvYsfK4xAqu4ZCzzOhEdFcLlSb9+Ct8I8V4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:db:78:21:ee:01:d9:c1:40:8a:a7:a0:73:80:d0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Sep 10 09:01:07 2025 GMT
            Not After : Sep 11 09:01:07 2025 GMT
        Subject: CN=c89ac7af0efcb41477b3f89414c401620991f035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:28:d4:47:93:1a:b0:b3:03:55:60:43:3b:
                    ad:50:1b:d8:f9:5c:16:fc:f1:a9:d7:ea:1d:37:76:
                    aa:7d:f6:ca:3a:95:62:d3:73:a2:95:f1:88:39:4c:
                    b3:b2:de:97:6f:b3:e4:8a:b4:db:bf:27:b9:d2:99:
                    69:34:52:99:77:1f:60:55:bd:3f:dd:fc:78:56:1f:
                    5c:aa:29:e6:c6:58:cb:54:89:56:d1:9a:d9:08:09:
                    3c:46:67:44:57:19:0e:f5:1f:08:ce:3e:82:d5:87:
                    33:d1:07:ed:94:02:3c:d7:05:df:77:e2:83:ce:e9:
                    8d:d1:05:ce:a6:70:2d:af:b4:78:db:0e:3d:5c:16:
                    79:b1:78:35:37:41:31:a3:d7:19:4f:8d:9a:40:9e:
                    56:d4:cf:2a:6c:2f:a3:94:c0:d9:9c:18:32:4b:5d:
                    30:bc:67:8e:9e:f1:77:41:ce:50:d2:92:c7:2a:9e:
                    e4:08:dc:69:58:58:ae:e9:e5:d2:94:18:ca:63:fc:
                    ee:92:46:aa:8d:b0:cd:ed:27:7f:51:15:3c:e5:8f:
                    34:9c:3d:f0:d2:a0:c4:c4:f3:b8:46:57:3a:49:d1:
                    e5:2c:ed:53:5d:c3:e5:2d:59:7d:cf:9d:b9:4d:a5:
                    be:72:f2:84:39:13:4b:0e:70:80:e2:d7:1e:41:97:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9A:C7:AF:0E:FC:B4:14:77:B3:F8:94:14:C4:01:62:09:91:F0:35
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:56:fe:fa:a8:75:ab:a7:75:2f:b9:83:c0:ec:ff:f5:a9:
         b6:cc:70:dd:b7:36:14:77:84:90:a6:78:80:9b:9d:de:28:1e:
         56:58:14:e5:24:b2:6e:ac:24:1d:3d:be:f0:61:1e:ca:35:ac:
         7d:14:f0:62:ff:ff:00:94:fd:90:92:cb:f3:38:6b:af:29:17:
         36:80:e8:d4:a1:71:85:5a:13:9d:ae:e9:bb:81:d1:50:b5:50:
         d6:35:3b:f3:d7:51:92:1a:87:49:6b:6f:48:87:4d:d7:65:b9:
         10:b3:71:3c:21:be:77:44:95:b6:25:86:78:2b:38:af:c9:e0:
         83:90:8f:a9:53:71:f7:8a:6d:85:7b:96:36:63:c2:a6:b4:b1:
         98:58:c5:45:fb:a8:0e:d6:a3:09:4d:9f:ee:d0:7f:72:f0:1d:
         c1:58:54:6e:9c:01:ca:bd:84:9c:2e:91:aa:74:df:a0:fa:81:
         0c:02:9a:cf:64:ae:a6:6c:45:02:ee:a0:07:0b:51:4b:8a:ce:
         7c:b5:2e:48:d8:bb:28:c9:c8:97:3a:cc:78:07:d3:69:96:51:
         86:6c:8d:9a:c2:5c:db:bc:15:07:4a:42:f6:24:10:31:30:60:
         b0:f1:ee:8f:0a:b6:5e:61:1a:65:62:27:74:13:34:88:e9:3d:
         8f:4c:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:41 2025 by rpki-client