Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          YJJ3Gjvdl9jLNCTOkiBJgmwmyVgFhLrFUF+4xus1bqs=
Subject key identifier:   4F:D2:DD:F1:90:EB:24:67:F5:D6:B5:59:5C:FC:AC:32:49:DD:49:55
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       0198D6980F3C92416F94871427F5BC5044CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 11:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:26 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: 0TlutDarVYE9QcVlz4/Aun2sPHFpXyEv0by0jPGUU+E=)
                          2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:0f:3c:92:41:6f:94:87:14:27:f5:bc:50:44:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: Aug 23 11:02:26 2025 GMT
            Not After : Aug 24 11:02:26 2025 GMT
        Subject: CN=4fd2ddf190eb2467f5d6b5595cfcac3249dd4955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:5d:58:dd:d2:fd:e1:4e:72:67:72:f4:bc:
                    d1:33:ab:bc:2b:bf:e9:29:53:e6:15:d8:c7:7d:29:
                    a4:f6:55:17:96:1e:df:2c:70:0a:c5:88:82:92:89:
                    ee:73:28:cf:cb:cf:f3:d6:0b:f3:e9:37:bc:cd:a3:
                    c8:89:11:89:23:0f:bb:3c:3d:66:bb:8f:d5:8e:50:
                    54:c4:d6:48:fe:57:27:da:cf:bf:98:44:09:c0:dd:
                    d7:2d:bf:1d:72:aa:53:a8:5a:3c:db:c5:53:ab:40:
                    c5:38:3e:e9:37:3d:e3:8a:e8:0b:3d:1e:46:59:bc:
                    17:35:30:4b:80:7a:90:46:0f:de:95:b7:a9:f7:7e:
                    df:99:90:74:74:9e:90:19:1b:4a:22:b5:4f:f7:5a:
                    de:19:93:4d:d6:80:8e:4a:25:fc:1e:c3:b2:fb:8b:
                    d9:99:1e:7e:6e:9f:10:de:6d:b1:78:b5:28:2a:93:
                    57:cd:e1:2d:60:48:50:51:51:e2:68:6c:98:78:0e:
                    4b:79:b0:23:7a:94:04:b9:69:23:6c:7b:bd:99:6c:
                    20:56:6b:f9:1a:ce:68:1c:bc:73:13:58:16:5e:45:
                    2a:d2:2e:dd:0d:d2:0d:ef:85:89:a6:7f:ed:29:1e:
                    c8:c3:11:5c:38:2f:04:4a:ec:32:ae:db:08:fd:9c:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:DD:F1:90:EB:24:67:F5:D6:B5:59:5C:FC:AC:32:49:DD:49:55
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:18:9d:cf:74:08:5b:af:17:c2:d0:ee:c4:0b:5e:cb:7c:
         2c:4c:1f:07:6e:66:a5:6e:c6:3f:3d:ca:68:b9:b1:0b:37:11:
         71:34:e3:0c:3d:74:7b:e8:40:a9:2d:a1:b6:e9:5d:89:ee:dc:
         2c:1d:86:8d:73:67:a9:4b:f6:5f:3c:c7:22:f0:05:1c:5d:ec:
         e3:18:88:81:3f:76:08:f3:d6:af:df:82:a3:73:b5:48:ff:58:
         b9:32:05:3d:aa:be:04:54:d6:66:46:2d:8e:4e:7c:72:f6:a1:
         a2:c4:30:f1:b9:d4:d0:6c:59:11:dc:bc:49:3c:15:9f:81:24:
         97:89:04:b5:6c:8f:59:54:45:a0:d6:9f:c5:d2:1c:e1:68:43:
         2e:6e:90:77:9a:1f:27:35:a8:08:12:1f:58:83:de:26:64:d9:
         c7:b8:55:3e:4f:e7:64:c8:22:cd:e3:2f:bd:e6:4e:ce:80:a3:
         1a:01:c9:ed:7d:0d:cf:1e:0a:55:4e:0b:14:02:e7:29:93:67:
         e8:4c:6c:ba:96:f2:f0:65:ef:c3:2a:ba:ac:34:c8:42:5f:8c:
         fe:1a:8c:af:21:cf:92:b8:70:9e:4d:9d:34:5d:41:43:0b:1a:
         a5:b1:d6:07:4c:3c:5d:3f:a9:2a:36:08:cb:9b:92:06:73:5d:
         64:b1:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:17 2025 by rpki-client