Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File:                     iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier:          SBw3zua83XxwQs3eEpx2pKYkT2sphDk4eVbDw6nDv8Q=
Subject key identifier:   90:F9:86:12:C1:D5:E3:CA:F3:A3:F5:B1:04:D9:41:B1:8C:FE:CE:39
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer:       /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial:       01983C4E2EBD137DE66C97E2FBAD1F47B8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number:          0BEB
Signing time:             Thu 24 Jul 2025 12:00:13 +0000
Manifest this update:     Thu 24 Jul 2025 12:00:13 +0000
Manifest next update:     Fri 25 Jul 2025 12:00:13 +0000
Files and hashes:         1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=)
                          2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=)
                          3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=)
                          4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=)
                          5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: VDBn4PPPJKmJfbL5ID/dR8Sb5xZv5cMQjxbREW8/WK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:4e:2e:bd:13:7d:e6:6c:97:e2:fb:ad:1f:47:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
        Validity
            Not Before: Jul 24 12:00:13 2025 GMT
            Not After : Jul 25 12:00:13 2025 GMT
        Subject: CN=90f98612c1d5e3caf3a3f5b104d941b18cfece39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:02:1a:ab:61:9d:10:ca:8c:70:c7:9b:68:
                    ed:1e:7f:50:24:4d:54:2f:ff:9a:3f:3a:be:90:11:
                    cc:33:58:97:24:fa:16:99:7b:a8:d2:d2:6c:b9:2b:
                    1b:a8:d2:49:ff:9f:67:9c:53:a8:bf:95:c8:9b:31:
                    12:2a:ba:93:4c:15:91:d9:80:e9:fb:46:94:5a:de:
                    e5:23:e2:81:35:81:a9:8b:49:a1:20:a0:e7:1e:24:
                    ae:27:f4:d4:00:36:ab:f1:d2:2a:fb:76:00:ba:83:
                    b8:51:93:8e:5a:82:f7:7f:ff:c7:d0:f1:cc:c7:51:
                    e3:33:65:ec:b2:d5:aa:35:d3:ac:cd:37:2b:6a:b4:
                    4f:f5:5e:3c:06:a8:69:14:33:10:88:6c:18:fb:fc:
                    38:64:f3:a3:ed:a4:e9:c4:45:c0:91:16:0a:b9:3c:
                    bf:c2:b3:e1:00:73:b6:7c:31:80:21:79:54:3b:55:
                    73:ad:93:16:a2:18:f6:6d:a8:dd:95:d3:f5:9f:5d:
                    ac:5f:39:52:6b:c8:25:f6:82:af:38:44:dd:97:29:
                    13:a4:62:94:08:a4:2b:0d:dd:d0:e7:fc:c6:f2:b0:
                    d2:b4:a5:63:93:4e:c0:b6:25:58:27:8a:c3:b8:00:
                    1f:0b:70:c7:15:df:bd:85:d7:7d:90:1d:49:43:9e:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:86:12:C1:D5:E3:CA:F3:A3:F5:B1:04:D9:41:B1:8C:FE:CE:39
            X509v3 Authority Key Identifier:
                keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:e1:24:c4:52:3c:af:72:16:4d:45:30:1c:8a:86:72:1c:
         7c:72:1b:4d:85:4a:e2:50:90:a1:2c:17:17:5f:7e:04:9b:db:
         44:dd:06:33:20:da:fc:bd:2e:17:9e:ed:2b:df:04:b1:1e:30:
         2e:bd:96:34:f3:22:f5:dc:27:de:db:4c:9e:64:fb:ee:9d:18:
         62:53:ff:5c:f5:ed:2f:4a:f1:47:e3:f3:d4:e8:00:25:1a:cb:
         e7:54:b7:73:d6:8f:90:05:0f:00:8d:84:4e:88:59:dd:9e:e3:
         18:eb:cb:62:e3:a1:96:5a:a8:93:0f:86:26:f5:81:f6:f8:22:
         b8:68:04:89:fd:e0:d3:1c:7c:b1:c8:88:38:a7:34:e4:44:81:
         20:ba:b2:80:90:0e:42:17:f1:4a:07:d7:f2:96:9a:4d:23:b7:
         31:60:c4:a4:d5:4b:fe:3c:19:9c:89:ea:4d:39:3e:cf:0a:60:
         b0:ae:58:17:d3:05:9c:98:f8:ce:87:81:5b:68:b4:24:7c:50:
         53:29:46:65:2c:6a:01:60:03:11:3f:14:d2:f3:a2:0d:88:22:
         b7:2b:86:a1:78:9c:f9:1a:6a:8b:67:b1:a4:fa:ce:b2:f5:20:
         61:3b:db:e0:b6:c6:72:d1:69:21:d3:ca:42:2a:b9:62:b4:5c:
         af:fe:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:19:14 2025 by rpki-client