Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File:                     cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier:          x+Nq3MPimHPcXNs11FAfgcTlQ+MLwH0yH425yfK+CCU=
Subject key identifier:   8D:A1:01:67:3A:A7:19:61:8E:7E:4D:B8:A5:9F:D2:97:79:D9:EF:41
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer:       /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial:       0198D6CD5E49407BE425D1EAE26EF097AA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 12:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:39 +0000
Files and hashes:         1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
                          2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
                          3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
                          4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: cCDTEplN68puFdGXst5gcK3sLZx084tWETzl61u6qdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:5e:49:40:7b:e4:25:d1:ea:e2:6e:f0:97:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d64134faa746293c0384edac0371950f3b224
        Validity
            Not Before: Aug 23 12:00:39 2025 GMT
            Not After : Aug 24 12:00:39 2025 GMT
        Subject: CN=8da101673aa719618e7e4db8a59fd29779d9ef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:15:66:0d:d4:64:28:04:7f:1f:ff:21:9e:
                    6a:1b:e4:21:fb:dc:16:fa:24:11:05:48:2b:ba:c0:
                    87:66:a3:d6:5d:1d:1b:a3:0c:6a:60:ed:87:0f:0d:
                    08:34:4a:76:df:70:85:b2:85:27:cd:1f:cd:99:bd:
                    f6:fe:0d:e5:3f:ba:ed:5b:84:ff:9a:53:83:e6:50:
                    89:bf:4f:8e:4b:dc:ce:65:c7:43:d6:04:73:29:7e:
                    b9:b3:12:ac:ec:8d:1b:8b:7c:74:7c:af:5a:3e:9a:
                    40:c7:f0:11:1e:bd:43:24:c1:01:e0:1b:33:5f:e6:
                    bd:30:a0:f0:b3:e1:62:73:f1:8f:90:66:38:f7:42:
                    fd:36:01:48:7c:dc:49:3f:03:1c:1c:20:0b:1a:a6:
                    2a:17:44:4f:05:be:cb:a3:98:84:6a:e9:be:15:10:
                    39:6e:7e:36:76:66:c0:69:39:e9:35:0d:13:46:01:
                    37:a5:e6:5b:32:02:fc:2e:13:7d:ec:93:8f:4f:0a:
                    5d:85:b1:ed:eb:c4:2b:92:03:4d:06:95:43:96:ab:
                    b3:0b:89:45:40:90:16:db:49:e3:88:0b:b9:f9:34:
                    7a:d6:9b:9a:a8:2e:e7:73:a3:8e:22:6c:0a:ee:38:
                    c7:ef:5e:4e:60:7d:1d:a1:aa:dd:68:5c:07:68:d6:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:01:67:3A:A7:19:61:8E:7E:4D:B8:A5:9F:D2:97:79:D9:EF:41
            X509v3 Authority Key Identifier:
                keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2c:44:d4:ad:ef:9b:b4:b9:1a:58:a7:40:c7:c6:1d:09:4f:
         29:02:15:04:4a:43:0e:b3:35:af:26:ed:8b:f6:59:21:f5:84:
         b5:12:96:88:bb:b7:69:34:40:ef:84:5e:cc:eb:3a:c9:69:be:
         41:6a:29:cb:3f:9b:94:a0:f6:f3:de:1b:73:fb:94:aa:a1:b7:
         1b:fb:50:1e:d0:d4:a9:5d:11:42:d4:f9:49:9e:ff:99:3a:77:
         c1:e1:58:59:89:83:ca:15:32:c7:df:a7:ab:7c:58:88:6f:ef:
         ce:b1:0a:13:f2:b5:0b:6c:f5:30:d6:f3:b3:15:f4:59:1f:bf:
         1e:b1:85:0e:d9:40:bb:de:91:2f:6f:95:a6:62:1e:ff:e1:f9:
         9c:16:b0:40:a5:d3:a2:12:ea:4d:29:0a:67:88:9c:7d:e9:f6:
         70:bd:49:06:a3:cf:5e:3f:63:94:51:6c:6c:c8:7d:9f:f6:ae:
         f7:6f:6d:74:39:73:cc:1b:be:66:bd:10:c3:50:9c:cd:8c:3c:
         b6:a6:85:63:22:f3:68:55:a0:f4:53:02:91:95:10:28:e8:3f:
         ca:d7:9f:fa:3d:94:58:a0:9b:ba:02:36:14:67:16:17:aa:6f:
         7d:5e:c7:56:19:78:c2:37:e9:6b:03:34:1f:66:44:2a:82:4e:
         d8:b7:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:32 2025 by rpki-client