Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          gOYmrRyz0Pij9pb7FQcxDcpKgySe1zzU1gqYZa3IS54=
Subject key identifier:   61:2B:24:93:BA:3E:D5:6E:16:7C:1C:99:34:D3:31:E6:61:EF:7B:86
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       0198D4E0959A2D4A83D77EC914F3DC5EA739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:24 +0000
Files and hashes:         1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
                          2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: F+xjVjOOlGluHxjhfMSgP7jZH7pQhHcU2Atk6YXLiPU=)
                          3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
                          4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:95:9a:2d:4a:83:d7:7e:c9:14:f3:dc:5e:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: Aug 23 03:02:24 2025 GMT
            Not After : Aug 24 03:02:24 2025 GMT
        Subject: CN=612b2493ba3ed56e167c1c9934d331e661ef7b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:10:64:f3:96:15:7c:e4:16:14:af:0b:ed:
                    3a:1f:0a:45:3f:19:02:1f:be:ca:26:2d:5a:b7:a3:
                    f6:84:ed:57:c1:8a:23:d6:81:57:8a:11:3e:4b:e4:
                    33:a4:81:75:54:d3:59:59:b8:d9:76:74:29:27:2c:
                    86:78:b2:0a:eb:bb:2e:28:5f:9b:96:d3:91:da:09:
                    19:86:3a:bd:0c:ee:a5:29:af:ff:b8:99:13:06:90:
                    a8:81:0e:37:ec:f5:94:2d:ff:67:6a:41:35:7e:1e:
                    9c:d4:6f:1c:9f:3a:36:95:45:e1:98:12:18:c6:f8:
                    89:1b:a4:5d:c6:ce:66:fc:1d:2c:fd:84:8c:a4:f3:
                    a9:c3:7e:19:58:ee:c8:db:c1:ce:ac:12:0c:5e:5e:
                    b0:24:76:27:2c:d5:b4:3f:dd:78:1d:18:78:52:b4:
                    1f:5f:aa:04:6c:ea:2a:3c:09:28:bf:a4:c7:c8:6d:
                    2c:38:14:85:41:92:99:4e:11:2a:45:ba:95:e6:0c:
                    23:ee:c4:88:77:d3:2e:55:38:f3:80:8f:a3:dd:40:
                    12:26:37:f7:97:62:1c:77:11:81:d5:12:09:11:1f:
                    92:ab:2e:0b:1b:d8:02:55:78:66:b5:14:cb:6a:4b:
                    ea:ff:7c:c9:c9:09:f7:3a:6e:ba:57:2c:c4:00:3b:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:24:93:BA:3E:D5:6E:16:7C:1C:99:34:D3:31:E6:61:EF:7B:86
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:64:02:d8:45:90:78:1c:0d:98:88:bd:6b:78:b9:b1:23:
         ae:e6:59:10:ff:38:88:46:fc:52:bd:0d:b0:bb:59:64:1a:58:
         9b:53:8d:20:65:6c:87:75:9c:00:0a:1f:7f:26:48:04:b4:2c:
         f6:84:d9:d4:4f:33:16:73:64:76:37:a1:bf:cb:7e:9e:d9:98:
         ef:0d:32:35:58:3d:0c:4d:9c:0f:76:79:0d:3e:35:43:b9:59:
         13:cb:22:f5:8e:a0:a0:53:a4:0f:fa:77:1c:e8:d6:84:7e:40:
         13:c7:84:26:a5:89:37:75:3b:12:4c:f4:59:0c:f4:02:0c:a8:
         f4:d3:70:ac:fd:8d:f6:5e:93:ab:3b:b9:f8:a6:80:38:c6:e4:
         19:df:a3:32:b5:d1:4f:f0:96:10:b4:8f:ed:04:d7:5b:90:f0:
         06:6d:ef:4b:38:bb:c4:c0:df:6b:30:fb:ab:ea:dc:7f:86:75:
         95:67:6e:b2:32:5b:b3:b3:14:4f:f7:e4:8d:e1:02:94:5e:0d:
         93:c4:2c:3a:81:6e:b4:f8:62:72:93:da:ea:be:77:b4:a5:b1:
         e0:1b:4b:d4:17:21:33:f0:f4:48:42:6c:cd:a8:48:55:9b:87:
         57:55:f1:e6:95:e2:d1:e0:2d:08:24:e9:58:04:0a:67:61:9a:
         d5:71:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:36 2025 by rpki-client