Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File:                     pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier:          C618wT9VCd/3NV5iPv/enMLuKn9SsaaY9Q+qbd5UqKo=
Subject key identifier:   2A:EA:B8:64:D1:7E:A4:27:61:AC:53:36:D4:89:46:E7:05:54:E5:EF
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer:       /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial:       0199345C0E4F5B8B81A5649A7669EF8D6801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number:          0ABF
Signing time:             Wed 10 Sep 2025 16:01:12 +0000
Manifest this update:     Wed 10 Sep 2025 16:01:12 +0000
Manifest next update:     Thu 11 Sep 2025 16:01:12 +0000
Files and hashes:         1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=)
                          2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=)
                          3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=)
                          4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: OcXGsJ7BxfRA/Ph0KWSdNjK+LWZ9A+7A/vnMXxbMEV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:5c:0e:4f:5b:8b:81:a5:64:9a:76:69:ef:8d:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
        Validity
            Not Before: Sep 10 16:01:12 2025 GMT
            Not After : Sep 11 16:01:12 2025 GMT
        Subject: CN=2aeab864d17ea42761ac5336d48946e70554e5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:4e:49:84:cd:c7:81:87:5b:9a:cb:22:e8:
                    50:b3:3b:dd:64:4e:ed:19:0e:87:62:b5:cb:bb:ec:
                    be:9d:16:79:07:71:7d:c1:f9:60:a4:d8:87:2f:f9:
                    9f:fe:c5:39:7a:8c:91:7c:52:a0:ac:9b:7f:da:ff:
                    99:af:2a:91:b3:cc:60:37:94:fd:c1:a3:a3:93:54:
                    f8:29:56:12:11:32:87:d1:1e:44:cf:2c:1c:52:3c:
                    e0:53:5e:b7:89:81:96:2d:68:c4:ac:3f:72:08:ee:
                    d0:e5:9a:50:ab:a5:eb:cf:fc:ea:8d:a3:e2:45:1d:
                    14:15:7f:de:11:51:cf:2b:0e:18:42:dc:7a:86:24:
                    9f:c0:22:db:97:0c:82:78:14:46:35:1a:6b:ae:91:
                    86:c9:16:63:35:16:b8:c0:f0:7b:d9:05:2b:30:87:
                    fc:27:d5:15:14:83:04:12:f3:98:e8:78:6a:73:3a:
                    7a:72:a5:25:f2:f8:c3:ee:b4:4c:9d:6a:27:2d:37:
                    69:7f:73:99:26:15:07:9f:fa:05:61:2d:9f:cd:ec:
                    89:e3:4f:56:ea:88:f0:86:70:3a:92:ba:37:74:d9:
                    cd:0a:d4:61:72:38:42:4d:2d:66:f1:d3:24:9d:26:
                    30:c4:a0:3a:d4:77:a6:9f:7d:b3:e4:cc:1a:30:36:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EA:B8:64:D1:7E:A4:27:61:AC:53:36:D4:89:46:E7:05:54:E5:EF
            X509v3 Authority Key Identifier:
                keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:ca:bf:8a:ef:08:3e:3d:fc:7b:25:d7:04:93:fe:86:01:
         83:53:8a:ee:6d:3e:e1:60:c7:6b:dd:5b:89:11:6e:92:b8:81:
         20:8a:16:14:bb:c5:71:2c:88:4b:13:ca:ef:0a:0d:ac:b7:96:
         86:fa:a1:78:5a:4b:35:3a:5c:65:37:a0:40:e6:09:4b:f9:04:
         85:65:e6:f8:37:da:94:b8:46:e2:da:4a:bf:e7:26:0f:36:d4:
         70:c4:5e:2f:4c:38:dc:0d:a6:3d:72:b5:d4:4e:64:38:ed:a5:
         00:46:34:dc:25:f7:72:9d:c1:d4:4b:32:cf:28:2b:55:61:79:
         ca:82:54:3e:75:a3:6e:1f:2e:59:94:1b:b0:66:0e:3c:73:fd:
         21:39:84:8f:70:71:8f:54:7d:52:b2:68:2f:7b:ec:1a:3c:57:
         28:45:2c:bc:48:cb:23:4b:1f:77:f1:68:d3:51:00:a2:3a:e7:
         23:82:04:fb:22:e7:53:22:19:49:fd:a5:45:e6:c6:c2:78:55:
         f0:1e:44:45:20:15:fb:ad:ca:85:8b:9d:89:b8:66:14:2c:00:
         30:02:0e:5a:74:70:af:a9:99:0d:1e:41:62:3b:00:73:52:c9:
         e7:7e:19:73:67:97:b4:c2:bd:d7:73:93:f1:6b:a5:b8:2b:82:
         81:32:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:33:58 2025 by rpki-client