Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File:                     V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier:          JS8hqANELZnpjQJXYx90BO27rljV3CPgzv42+EjfQDs=
Subject key identifier:   43:BC:4D:01:5C:A3:C9:D7:7B:C9:71:F8:32:D9:36:6F:0E:79:C0:E6
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer:       /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial:       0198D4A7D4C92B24D3E82F7D4C520CAB3F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 02:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:25 +0000
Files and hashes:         1: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (hash: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=)
                          2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: 8TtyYkhj9zkvVwiNRY7PRoAv5K3xSKhxkxKh8JtaOsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d4:c9:2b:24:d3:e8:2f:7d:4c:52:0c:ab:3f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
        Validity
            Not Before: Aug 23 02:00:25 2025 GMT
            Not After : Aug 24 02:00:25 2025 GMT
        Subject: CN=43bc4d015ca3c9d77bc971f832d9366f0e79c0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:68:06:34:1d:6b:79:08:71:e4:f9:d4:ab:
                    62:4f:7f:b9:79:ed:58:d1:9a:fa:42:4e:0f:e0:16:
                    ed:bf:de:04:85:87:3a:0f:ac:4c:c0:d3:44:ef:41:
                    80:f9:aa:95:e0:52:1d:d1:1d:2d:33:87:8c:53:bb:
                    d6:f5:7f:ed:c4:26:85:3f:01:e3:96:00:99:96:e8:
                    90:33:ca:e7:34:04:45:cd:01:4e:2b:3d:a9:b2:7c:
                    8d:ad:d7:4d:07:dd:89:13:c9:87:9f:12:6c:f9:e7:
                    6b:3e:36:88:a7:ed:9f:4e:23:05:fa:00:98:5c:7b:
                    6d:61:b9:91:99:7d:23:3e:90:21:63:38:de:4d:62:
                    b4:c7:25:5e:0a:0d:ed:e4:63:73:d6:72:2f:f3:24:
                    6b:82:c9:f3:32:05:58:a8:5c:fb:d2:9f:3b:ab:6b:
                    96:3a:fe:ea:cc:ff:7a:f8:90:9a:bc:28:0a:0b:70:
                    96:c4:fb:15:ac:25:99:ef:ac:83:26:8c:bb:e6:6c:
                    b5:42:92:13:c6:b3:cc:6b:49:59:19:87:06:c2:8b:
                    56:ba:a4:e7:d1:c4:19:1e:40:a4:9b:e2:52:1a:86:
                    16:42:59:5f:a5:09:18:bb:dd:c5:35:f1:e6:f6:bf:
                    04:37:d7:1e:4b:a7:d8:6a:48:ad:9d:6a:b8:3b:8e:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BC:4D:01:5C:A3:C9:D7:7B:C9:71:F8:32:D9:36:6F:0E:79:C0:E6
            X509v3 Authority Key Identifier:
                keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:a7:6e:62:87:ec:85:93:36:2f:e1:95:40:17:c4:08:e9:
         c0:6f:2c:11:39:74:73:1e:31:5d:7c:f4:27:e0:0a:9d:bf:ab:
         67:50:4d:52:3b:93:06:33:c4:bb:a9:3b:70:52:da:25:5e:45:
         cc:a7:8b:f6:99:f7:8b:03:a3:bb:38:e1:f6:8d:c1:75:5f:be:
         f4:7d:de:54:ed:95:50:ca:1c:4f:ae:d7:39:8d:c7:81:23:3d:
         fa:3a:4d:c0:6d:6c:39:f2:a9:af:b6:d8:5f:f6:d2:53:92:44:
         b4:8d:96:db:b9:26:70:50:9f:5e:35:5a:6f:34:6b:3e:60:5c:
         0e:fc:07:ea:34:44:a9:d1:0c:51:94:cd:bb:03:21:46:8e:c9:
         5c:37:6c:24:34:70:37:eb:4e:2a:e6:b7:ef:cd:40:73:e4:8b:
         99:a2:3e:8a:13:93:2f:63:10:d0:97:60:dc:1d:fa:86:ec:e8:
         9a:fe:56:ff:41:66:30:dd:ff:a0:c4:40:f8:5e:93:c2:bf:53:
         c0:18:e0:ca:c3:03:78:38:19:18:d7:48:ae:34:1b:d3:15:24:
         40:07:a9:5c:52:85:6b:c4:cd:62:55:e6:94:bb:a9:16:76:98:
         31:b3:4c:43:a0:26:95:88:34:1b:f6:25:d6:66:64:03:db:ae:
         58:48:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:45 2025 by rpki-client