Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          4bbdpEHXpAI6JrIkpPyhwZYbQ6XQbK5DIV7xFBHzn3M=
Subject key identifier:   16:33:1C:4C:4A:F5:AA:38:FE:05:39:4F:8E:66:88:0C:9C:C2:DB:42
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       01993123B480B4B72379BEC3D24279CA7AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          1685
Signing time:             Wed 10 Sep 2025 01:00:47 +0000
Manifest this update:     Wed 10 Sep 2025 01:00:47 +0000
Manifest next update:     Thu 11 Sep 2025 01:00:47 +0000
Files and hashes:         1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: iFsEekg1MvrNQleh8uIqdi25xRUd8+mua9KJZK7aBF8=)
                          3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
                          4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
                          5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:23:b4:80:b4:b7:23:79:be:c3:d2:42:79:ca:7a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Sep 10 01:00:47 2025 GMT
            Not After : Sep 11 01:00:47 2025 GMT
        Subject: CN=16331c4c4af5aa38fe05394f8e66880c9cc2db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:31:1c:ac:c2:48:df:fd:82:5b:c8:9e:af:
                    94:f9:f2:f9:3c:a0:78:7b:3f:31:5d:91:3e:f8:57:
                    0b:42:69:b6:57:0c:18:6d:88:71:47:6e:7f:3e:fc:
                    f3:e4:9a:c0:66:86:26:13:2d:7f:7f:4e:83:4e:9f:
                    42:60:28:8b:b7:c5:1d:58:71:f3:57:29:d4:f3:cc:
                    88:7f:42:48:37:05:fc:bb:a0:b0:56:8d:1b:dd:29:
                    9b:ff:73:da:59:a9:8f:b7:b8:db:e8:36:c9:8c:63:
                    23:c7:02:ce:33:0d:04:61:dd:ff:03:96:e2:7b:44:
                    9f:56:7e:69:d0:00:4a:6f:60:67:44:65:b4:cf:ce:
                    59:42:7b:77:04:c1:b6:e0:f2:25:4c:77:04:fb:c7:
                    bc:05:dd:0c:d7:55:50:b2:d2:33:b6:c1:23:43:3c:
                    b5:79:81:60:d8:45:d3:30:99:51:f9:90:15:4e:88:
                    59:f3:f5:2c:41:c8:87:07:9b:04:c8:8d:b7:28:5c:
                    66:f5:68:f9:6d:99:55:a5:e6:59:a8:af:9c:1f:43:
                    f3:cc:32:57:7e:4b:cb:ec:d6:9b:5f:ec:a5:15:de:
                    f0:1f:21:3b:ef:36:0c:d4:79:9f:79:b5:40:98:9d:
                    05:4b:63:28:41:2a:65:81:ff:cc:f9:cd:a6:59:bb:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:1C:4C:4A:F5:AA:38:FE:05:39:4F:8E:66:88:0C:9C:C2:DB:42
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:d3:92:18:e7:ef:5c:a9:c4:ce:cd:08:6a:88:fc:4a:84:
         b9:e7:2b:63:82:dc:d9:38:03:44:08:ae:e6:52:8d:5f:77:81:
         ed:03:55:f6:28:12:dc:f0:26:1c:09:be:8e:4b:b9:43:d3:53:
         23:87:e8:be:c8:e7:aa:c0:5a:ce:d9:50:e3:9f:62:25:75:92:
         3e:87:55:69:3d:27:b9:f3:4c:77:cd:a7:d0:41:23:f8:e2:b2:
         02:f4:dc:b7:49:66:d5:3a:98:90:09:6b:37:35:54:65:f8:ee:
         b1:53:da:b3:7b:22:97:f8:48:61:7f:69:83:4c:d2:6c:02:82:
         09:bc:1e:1b:f4:cc:e7:4c:11:0f:72:9b:39:2a:28:aa:cb:72:
         ae:0a:3f:99:bd:15:47:49:60:c2:83:c9:f4:da:80:57:99:e7:
         af:1d:3a:08:26:fd:69:84:72:fb:81:71:f9:c0:6f:ba:88:92:
         7c:60:2b:51:83:ca:46:06:16:bd:6f:09:a7:b8:9f:3d:f0:5c:
         34:a8:cf:e4:f1:6d:51:a6:a2:30:57:19:18:51:53:1e:b4:10:
         6c:1c:13:60:35:66:a3:2c:86:6a:99:c2:0f:c8:be:27:32:9d:
         53:3b:2d:08:7f:91:6e:dd:05:3a:69:6b:e4:07:ad:6a:ec:8f:
         92:de:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:14:41 2025 by rpki-client