Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File:                     5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier:          jIVFE6AlLNp8pmd8MdZBnFoaydhIhPbsmKdf5j7uXTc=
Subject key identifier:   E3:B5:34:64:39:CA:25:DE:FB:2E:83:49:8B:B9:E5:F0:F6:23:AF:AC
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       01992F6C62DB230270F13BCBDC5BC796377A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number:          0FCF
Signing time:             Tue 09 Sep 2025 17:00:56 +0000
Manifest this update:     Tue 09 Sep 2025 17:00:56 +0000
Manifest next update:     Wed 10 Sep 2025 17:00:56 +0000
Files and hashes:         1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
                          2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
                          3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: 1i3HUvZ0Z9KXFgdBbFrvpc8f7FQoYMyK+DkW4dU8IpY=)
                          4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
                          5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
                          6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=)
                          7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
                          8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=)
                          9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
                          10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:6c:62:db:23:02:70:f1:3b:cb:dc:5b:c7:96:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Sep  9 17:00:56 2025 GMT
            Not After : Sep 10 17:00:56 2025 GMT
        Subject: CN=e3b5346439ca25defb2e83498bb9e5f0f623afac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:aa:97:f1:4b:92:2b:0e:69:8a:a4:cd:20:
                    ac:8d:4b:75:02:cd:30:58:30:b6:df:0e:fe:39:68:
                    a9:5c:93:fc:da:21:04:cf:fe:28:8f:9f:5e:98:d9:
                    41:7d:6d:7d:80:ec:df:78:14:de:d7:5c:a7:81:a5:
                    b9:36:36:dc:d9:c8:c4:4a:7c:a0:34:cb:dc:68:ce:
                    ca:7a:65:ca:28:6c:75:dc:87:02:b3:97:55:9d:f2:
                    99:bf:f5:47:be:d5:af:cc:62:aa:37:84:aa:2c:16:
                    bb:5a:95:6c:a7:f0:1a:7d:96:75:6b:d0:ae:31:54:
                    72:02:f1:2a:49:c1:28:45:27:b5:1e:40:2f:07:bd:
                    95:91:85:01:f8:fe:57:e5:bb:b9:b4:5a:64:63:fb:
                    e8:f0:d7:81:ac:a0:ce:da:a4:c4:d2:2a:7f:52:8e:
                    b9:b0:60:46:b3:06:89:3e:c1:8e:e1:cc:a5:2d:98:
                    08:5d:1b:0a:9f:64:5b:14:ee:cd:f9:6a:51:d6:6e:
                    81:f6:63:12:88:50:e2:e4:b3:98:5d:40:96:3a:d4:
                    6d:e6:4b:5a:de:e2:85:bc:62:5a:a8:4a:05:65:94:
                    76:3e:06:05:c3:2d:73:3d:b8:8e:28:07:75:87:5b:
                    90:7d:e9:09:80:15:56:2a:57:59:ff:77:09:b8:bd:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:34:64:39:CA:25:DE:FB:2E:83:49:8B:B9:E5:F0:F6:23:AF:AC
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:1c:8b:45:a4:88:1b:4c:67:fd:ff:6b:1a:fc:a8:fa:3e:
         37:e0:3f:80:b6:d8:c8:02:73:37:1a:74:cd:55:53:8b:51:b3:
         b0:85:5d:08:c3:4f:a4:db:48:90:f8:8e:bc:42:f2:68:e8:89:
         c9:2d:ac:f3:9e:f3:24:0b:d9:c3:5f:49:91:89:60:a3:3e:f0:
         23:29:58:d8:5b:c6:43:2c:67:8e:f2:c4:c5:23:b7:ee:ce:7d:
         ad:c6:8b:49:34:b7:33:93:b4:a3:12:36:94:c6:06:98:87:9e:
         16:a4:44:71:a1:dd:f7:5a:b0:62:15:86:e0:ef:53:75:74:be:
         df:f4:aa:84:d6:0d:19:fc:d8:2e:72:97:97:c7:27:54:98:86:
         e5:52:0b:8d:05:bf:15:e6:bb:0e:a0:70:a3:7d:2d:04:18:3e:
         94:a6:a4:e3:60:de:88:74:14:2a:0a:71:42:2e:ba:f5:52:8a:
         03:f4:f4:2f:19:c3:d0:b7:e9:f5:4f:d3:2c:7b:4b:be:55:a5:
         8d:b8:3b:3a:9a:16:42:d2:fa:4d:f2:c5:8a:ed:43:6a:51:fc:
         e0:df:cb:3e:88:80:8b:12:c9:ca:9c:c9:ac:17:f8:d1:3a:3f:
         71:ef:4b:11:a9:77:7a:34:6b:80:c8:5c:9d:92:7a:c0:8a:56:
         36:b3:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:28:23 2025 by rpki-client