Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          DrXm1Vg+RpaEilzmXJGEapOxc3rDlXEG0A+RGmnhMbM=
Subject key identifier:   0E:1D:B1:EC:E7:52:3D:A8:6A:A4:D0:26:98:1B:60:1C:4A:7D:79:29
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       0198D6982C2DEE6806B011E3E7F40A88CFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 11:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:33 +0000
Files and hashes:         1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
                          2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
                          3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: Y5uPpBcLP1AsqhC7cxBU4IdjPW4pR8Dho6OYlqmskXg=)
                          4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
                          5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2c:2d:ee:68:06:b0:11:e3:e7:f4:0a:88:cf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Aug 23 11:02:33 2025 GMT
            Not After : Aug 24 11:02:33 2025 GMT
        Subject: CN=0e1db1ece7523da86aa4d026981b601c4a7d7929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:6d:82:0b:a7:12:f4:5d:92:41:60:01:6e:
                    22:85:2f:46:05:9f:c6:72:5e:83:61:ee:e7:fb:05:
                    c7:68:9f:25:11:de:21:75:2e:d6:39:0c:94:c4:c1:
                    21:a0:e3:43:33:d7:de:eb:31:33:1c:f6:a2:8c:8c:
                    ec:df:0d:40:70:bf:ce:50:ba:1e:b6:a7:d8:64:0f:
                    b8:36:94:df:a0:82:03:14:4c:e3:bd:60:c5:79:89:
                    4b:05:02:41:ad:a8:ac:79:b6:b6:1c:e3:43:3d:d8:
                    96:1e:9e:53:02:1a:79:9e:61:70:d0:3b:b9:88:fd:
                    fd:69:6d:16:d9:f3:8f:57:3d:f5:cb:40:6c:54:0e:
                    f6:1c:23:5c:48:89:b5:5c:da:a1:26:30:7c:e5:65:
                    dc:ee:a1:d7:47:0a:c6:5c:32:e7:ce:3d:75:f3:76:
                    93:0b:43:0a:c0:82:6b:a7:1b:5b:12:e2:ee:f7:5d:
                    92:67:52:ec:fc:97:0b:ca:c8:80:81:33:e4:0a:b2:
                    53:1e:5a:fb:45:6a:f9:12:6c:bb:58:0d:e5:b8:ff:
                    18:b1:b0:e5:2c:99:28:ac:07:e2:63:09:af:e2:e6:
                    25:ad:7c:cd:ca:d7:c0:04:3e:e8:75:43:a7:09:a5:
                    5d:cc:91:ab:90:37:0f:e2:98:07:95:81:16:fd:40:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:B1:EC:E7:52:3D:A8:6A:A4:D0:26:98:1B:60:1C:4A:7D:79:29
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:38:1d:45:03:cb:32:61:fd:65:5b:e7:0f:e2:12:7c:0a:7f:
         d8:06:34:05:f3:7a:75:ce:61:a7:9b:0f:00:7f:39:69:96:b3:
         eb:3c:5c:0d:55:20:cb:bd:48:86:90:ec:d1:47:85:e6:46:4d:
         44:cd:c4:0b:2c:b4:46:ed:bd:f6:64:fa:89:0b:81:92:15:43:
         e1:89:da:71:94:72:9a:6a:cf:3f:cc:d1:62:04:51:2c:a6:99:
         47:52:4a:5d:7c:e6:24:20:62:80:07:6e:59:bf:83:ad:f1:8f:
         3a:a4:eb:e2:38:ca:33:3a:c6:20:a4:e6:83:47:3b:f8:62:56:
         79:e3:59:f2:67:1d:90:ba:91:76:b6:1f:23:43:5c:e6:f9:7f:
         91:75:40:7f:00:aa:23:0b:7f:55:28:2f:07:b9:9c:2b:9a:14:
         f7:fc:31:62:74:fd:19:d3:ed:9e:f0:60:7c:0e:6f:08:87:90:
         ae:08:d7:d3:6f:99:f7:12:39:6e:40:4a:2c:1f:09:15:e4:7b:
         7e:43:00:37:16:2a:7f:15:c8:84:e4:cd:96:6b:3e:a4:cf:bb:
         1c:c4:21:cb:18:2e:f8:33:0f:ee:ea:24:a3:f6:a1:1b:ce:d7:
         f3:e7:f6:2e:93:d1:3a:7e:76:be:4f:3a:47:58:7b:c9:43:e3:
         21:39:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:24 2025 by rpki-client