Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File:                     SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier:          /LWyOmQAZ2xDUPl5ATvT72iqRaWOEmiocyeXPM38w/E=
Subject key identifier:   70:35:7B:F1:95:00:7A:2C:6F:86:75:F1:25:19:B6:04:93:A1:C1:89
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer:       /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial:       0199356E65A5D2CFCFA8455087E8A0F8DF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number:          065A
Signing time:             Wed 10 Sep 2025 21:00:51 +0000
Manifest this update:     Wed 10 Sep 2025 21:00:51 +0000
Manifest next update:     Thu 11 Sep 2025 21:00:51 +0000
Files and hashes:         1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
                          2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: igkBQiJ2rx6leZIFgTNziwNZfF7FvIrRnpsTE2mKohU=)
                          3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
                          4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6e:65:a5:d2:cf:cf:a8:45:50:87:e8:a0:f8:df:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
        Validity
            Not Before: Sep 10 21:00:51 2025 GMT
            Not After : Sep 11 21:00:51 2025 GMT
        Subject: CN=70357bf195007a2c6f8675f12519b60493a1c189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:e2:16:02:87:80:ff:58:29:ae:a4:80:1c:
                    f1:07:fe:12:4b:52:25:2c:cc:17:2e:ad:dc:40:82:
                    58:ab:47:9c:9c:d5:a7:31:fc:20:d1:07:49:d8:f1:
                    d4:b5:5c:bd:4e:9e:0f:b8:6e:90:09:dc:c6:58:1b:
                    5a:76:05:01:c6:c4:96:4d:50:b1:87:8f:4d:bc:2a:
                    4a:55:0e:19:c7:10:47:75:48:5f:d9:a7:b8:d7:30:
                    7d:0c:6f:cc:ba:66:13:16:29:70:24:dc:96:bd:dc:
                    ba:62:77:1a:ba:42:d2:4f:37:c1:9f:04:e1:9a:06:
                    f0:72:ff:3e:04:ee:51:92:bd:ad:d1:6a:c2:31:71:
                    74:12:3a:46:ef:5e:60:03:f8:ae:d1:54:60:d4:ec:
                    26:cf:55:d9:cb:df:7e:38:5b:7d:f9:4d:57:90:9a:
                    34:ba:bb:4c:10:f2:52:26:0c:e3:05:13:b9:a5:03:
                    a5:b7:10:43:7e:44:28:a2:a0:50:d8:67:a8:83:cd:
                    28:44:1a:be:0e:40:20:18:f5:11:c7:6d:c0:91:cb:
                    1b:1a:f8:d4:b1:6f:77:d8:6c:64:56:f6:8e:ff:51:
                    3b:cd:a7:85:79:cc:77:3c:cd:33:94:95:72:35:4c:
                    85:d8:9f:87:8a:ed:23:ea:ea:a8:89:87:10:3f:34:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:7B:F1:95:00:7A:2C:6F:86:75:F1:25:19:B6:04:93:A1:C1:89
            X509v3 Authority Key Identifier:
                keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:eb:7a:e7:16:88:0b:ae:bc:22:20:5d:ff:19:2d:05:87:
         03:a0:a4:6d:44:ef:6c:ee:fb:c9:8b:1e:5b:0a:82:aa:20:c4:
         1c:0d:1f:12:9c:22:77:3f:59:e4:ba:d6:61:3c:7d:1b:88:6e:
         85:34:a9:9a:c5:26:58:01:0e:2b:24:2a:05:1f:d7:68:47:54:
         6d:b3:bd:d2:fa:6a:5d:db:67:42:3c:c1:67:86:c2:ec:e7:d6:
         a6:88:71:b2:c3:0f:fe:2c:db:89:fe:03:18:92:a8:14:3b:19:
         63:26:c6:d7:49:cf:6e:eb:90:60:aa:c4:22:f7:c1:f1:a6:9c:
         43:89:ac:88:b1:d8:ad:63:98:a3:8d:45:5e:53:e5:0d:3e:3e:
         fb:1f:7d:12:c8:9c:5b:3f:dc:93:bb:65:5b:64:e8:50:2e:5e:
         5d:8e:6b:98:4f:c5:3c:e6:6c:c7:95:c1:7e:af:76:1d:48:ef:
         ee:cb:b5:79:37:1b:46:a7:2d:12:72:c7:b8:0e:de:a5:2b:d1:
         2a:b5:36:f7:e9:ba:9b:01:48:14:b8:da:5a:06:61:c6:d1:f3:
         ee:0a:53:aa:18:7f:8f:38:b1:a9:78:ca:af:22:d0:31:78:12:
         2b:cf:5c:66:e2:47:05:42:75:a6:e1:0f:b2:34:a4:4d:4b:a4:
         08:06:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:04 2025 by rpki-client