Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File:                     KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier:          OlCHHUYP5g4Z8LLmOXWnFlPVp3lEOrzhV9grvTWWu2c=
Subject key identifier:   79:7F:EE:36:7C:FC:70:1F:DC:6F:3F:57:F9:56:9A:02:2C:FA:6C:8E
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer:       /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial:       0198D66139848DBAE2323A8DE3ED4F3BB2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:32 +0000
Files and hashes:         1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
                          2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: u4ajipRwV72NBxxcaY17o9zFoHGujb4Q9iOcIHnZex8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:39:84:8d:ba:e2:32:3a:8d:e3:ed:4f:3b:b2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
        Validity
            Not Before: Aug 23 10:02:32 2025 GMT
            Not After : Aug 24 10:02:32 2025 GMT
        Subject: CN=797fee367cfc701fdc6f3f57f9569a022cfa6c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:fb:5d:73:35:01:fa:b2:06:da:2a:65:0d:
                    e5:fc:ba:6b:76:42:95:25:a5:2a:dc:0a:d3:af:38:
                    d5:82:c5:50:9a:10:df:55:f2:58:fb:74:36:09:f4:
                    50:61:54:86:44:ea:13:9a:e7:2a:6d:ba:c1:e1:94:
                    a8:b9:f2:78:35:a3:22:2a:51:0d:3f:55:7d:1b:4b:
                    fd:23:77:6a:ed:16:7a:c8:bb:05:fd:fe:70:d9:6f:
                    15:bf:cf:a4:40:68:42:ab:4b:cd:5b:f4:b5:41:8f:
                    de:bb:5d:71:c2:f2:f9:8c:05:c0:31:aa:04:3b:18:
                    58:6e:db:6f:ae:e9:0f:ea:dc:c3:51:eb:e7:64:9d:
                    0f:8b:5b:b5:30:a8:ec:b5:18:38:d3:1e:aa:60:be:
                    13:22:cd:da:bf:49:b6:9e:b1:75:65:0b:e2:c1:37:
                    f3:4f:83:7d:b6:73:72:94:dd:08:01:ef:9a:d9:cb:
                    6c:ab:6f:53:21:73:69:25:df:9a:3b:e4:e7:98:37:
                    96:b9:e1:ff:cb:8f:4f:31:67:93:1b:81:eb:1e:3e:
                    4f:0d:3b:c5:8f:bf:0c:b2:b9:4f:d8:c5:03:19:a6:
                    76:7a:11:14:52:4e:1c:0a:39:04:90:fc:32:e3:d5:
                    c7:30:de:d1:1a:2e:ba:b5:1c:06:ec:a4:8c:e7:b4:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:EE:36:7C:FC:70:1F:DC:6F:3F:57:F9:56:9A:02:2C:FA:6C:8E
            X509v3 Authority Key Identifier:
                keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:8a:58:e1:4c:04:26:95:7e:c8:bc:aa:db:e5:1f:1f:7b:
         57:69:90:0f:c7:e2:6b:a7:e1:54:ae:5d:ea:3b:ac:09:c6:77:
         ac:d6:fc:f1:69:9a:4b:69:3b:a1:70:d7:a1:da:2e:52:56:94:
         d0:68:94:43:e0:b7:da:69:9d:a7:3a:c1:be:dd:94:05:a8:36:
         5a:96:c6:64:c9:5d:bb:ab:00:27:37:ca:f6:88:45:79:4b:48:
         9c:11:c7:7d:e3:5c:ad:57:91:1b:f8:c9:c1:a4:6c:dd:9d:39:
         99:32:7a:ee:e1:86:de:32:0c:17:99:b2:c6:a4:c6:2b:ce:9a:
         d3:91:33:5d:56:fb:0f:3b:d7:c2:0d:0d:ac:9a:83:c7:80:91:
         2b:b5:33:6f:19:92:f3:61:fa:6b:aa:6c:cc:e5:a9:c8:42:08:
         50:18:59:c1:94:09:f8:25:52:04:9e:66:bc:49:50:65:01:13:
         28:c6:d0:3d:ab:3c:1b:d5:fe:2b:e8:0f:bf:58:2e:90:e2:61:
         2b:43:7d:a0:5d:2e:92:2e:df:50:95:03:83:f1:ae:98:d8:77:
         ed:d8:37:25:a8:fa:33:36:ef:5e:e1:c0:d9:8a:5a:73:8e:67:
         6c:20:16:af:f9:34:37:0a:6d:e1:96:27:59:a2:63:f0:5f:96:
         6e:34:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:55 2025 by rpki-client