Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          YvG2XclIwj5NviDZJf8ObXG/Fjs4utG5sTLFQ+sUgRs=
Subject key identifier:   F2:F5:4F:23:C0:FC:D5:93:3E:D1:F6:E5:B9:69:59:34:D6:9C:6C:32
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       0198D47403DDCDD19DC7F0376CF18FCB3EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 01:03:49 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:49 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:49 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: 3STLJvotDR/Lf3+RViNvw/LdSLcbNetAWmDnM3KfCaM=)
                          2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:03:dd:cd:d1:9d:c7:f0:37:6c:f1:8f:cb:3e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Aug 23 01:03:49 2025 GMT
            Not After : Aug 24 01:03:49 2025 GMT
        Subject: CN=f2f54f23c0fcd5933ed1f6e5b9695934d69c6c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:cd:f7:bb:5b:78:3e:93:ca:60:b6:55:1b:
                    c8:d3:3e:7b:12:ee:2f:02:87:23:b8:33:96:2a:c3:
                    27:ec:c5:07:de:60:73:b8:1d:65:1f:d0:60:23:02:
                    6b:c5:aa:b5:13:5b:08:d8:b7:78:83:12:29:d8:96:
                    4a:8f:3a:07:3c:69:79:fb:29:33:29:58:5d:e5:66:
                    21:12:90:74:d6:6e:90:f4:2e:d7:70:5f:d7:ad:1d:
                    4b:bb:7a:58:46:c7:bf:87:cd:0a:c7:d1:b0:78:69:
                    1b:ea:96:16:2a:9f:2a:27:a0:69:85:cf:d3:f1:e2:
                    25:f2:d0:74:9d:bc:25:dd:5a:c6:92:04:60:05:85:
                    eb:e3:da:ad:1f:f7:be:28:81:13:f9:23:56:09:d7:
                    f2:08:ff:71:04:79:a5:dc:58:12:3b:cb:1a:a8:80:
                    d3:11:02:6e:72:ce:b1:16:d1:6a:3d:c9:b0:10:f7:
                    70:f3:45:af:fe:be:50:b5:87:e3:ba:70:1f:8e:70:
                    e6:8a:89:81:c4:ff:6f:5b:d0:62:a4:8d:b9:9a:8b:
                    ed:43:2a:54:eb:3f:2f:98:3e:ca:7f:31:ef:d5:41:
                    a9:7a:b9:d0:53:e5:1c:2c:61:80:93:97:fd:4a:3c:
                    a2:28:33:c8:34:d4:dd:a3:4f:8c:d8:9e:f1:d6:b1:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F5:4F:23:C0:FC:D5:93:3E:D1:F6:E5:B9:69:59:34:D6:9C:6C:32
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:ca:77:66:4a:6e:95:58:ec:37:39:47:6c:d6:d0:e8:30:
         9c:b6:9e:b5:7e:70:1f:43:1c:31:fb:a4:a0:a9:83:2d:01:c6:
         b7:d4:d1:45:7b:5f:37:ae:84:0a:62:5a:72:a3:0f:98:f7:7e:
         6b:54:a6:11:3b:95:1a:01:62:8c:47:23:5c:b7:02:f4:ec:e6:
         8a:7f:a8:69:e4:de:6a:d8:06:2b:17:78:26:2f:bb:e8:f4:d0:
         01:8f:48:8a:b0:36:02:7c:87:0b:ee:8e:f4:81:dd:82:6d:b5:
         0f:e8:1a:f8:a6:e6:9a:48:f8:c6:ed:73:d6:d6:3c:42:04:08:
         97:10:09:08:94:b5:5a:77:b4:a1:6a:32:d0:92:4d:cd:b8:5f:
         d6:d3:90:1f:37:9f:17:5b:12:54:31:1d:a2:81:3a:52:ff:96:
         92:d8:89:0a:80:99:e0:5a:83:88:f6:72:8f:0a:c9:8b:0f:d0:
         3c:8d:f6:ab:c5:f3:bd:ee:07:74:f0:b6:cd:2b:41:45:d7:43:
         dd:e5:8a:d6:12:9e:dc:93:d5:6f:b7:31:69:65:29:f5:be:84:
         0a:1d:83:d3:2c:f2:90:ce:4d:9f:0d:74:3c:d8:1f:7d:ba:75:
         21:09:c3:b2:c2:23:76:12:c5:b6:9c:ae:1e:9c:b8:58:a3:f8:
         f0:bf:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:01 2025 by rpki-client