Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File:                     QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier:          RpJVEPR/pRgfDG9o+cZ9YahBBBqo7pw9gcmrPBO/Wsw=
Subject key identifier:   BB:BE:76:EB:F7:58:48:A3:EA:70:CE:61:89:F7:01:11:D7:04:33:A5
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer:       /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial:       0198D4E0B7CD0589E0E8EAFF4FB521DC6E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:33 +0000
Files and hashes:         1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
                          2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: myKZg9QICAVqjKlfbXzEDdY0WBz/Rcm6pV9x3F2xW6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b7:cd:05:89:e0:e8:ea:ff:4f:b5:21:dc:6e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
        Validity
            Not Before: Aug 23 03:02:33 2025 GMT
            Not After : Aug 24 03:02:33 2025 GMT
        Subject: CN=bbbe76ebf75848a3ea70ce6189f70111d70433a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:05:5a:ad:53:ae:be:ee:e0:e1:9f:8b:14:
                    e9:c7:b3:9a:d0:d6:b9:d3:cc:0f:2d:17:49:6a:af:
                    b7:53:62:3a:43:56:11:b6:f9:f0:eb:38:ee:2b:86:
                    24:5b:45:27:c3:4b:42:be:55:e5:5c:f2:8c:8c:98:
                    92:df:aa:de:76:dd:5a:0d:f4:e6:f0:64:9c:ca:ba:
                    71:11:ec:72:f2:dd:be:a3:f3:30:0f:b9:4c:b2:d5:
                    fe:5a:79:4c:da:94:c8:70:5a:45:f8:de:47:7e:f3:
                    da:1b:c9:84:f2:eb:ce:51:78:a4:92:40:c2:d9:8a:
                    1b:dd:d5:81:19:93:b0:51:d8:07:33:46:c5:3d:1f:
                    34:d7:4b:3e:78:11:05:e0:94:56:27:24:37:8c:31:
                    f5:d7:27:f4:c8:06:27:7d:f4:12:7d:0f:58:19:f7:
                    b0:b3:65:bf:5c:25:b8:0c:59:2a:1f:ee:48:ff:83:
                    c6:be:11:8b:3f:cb:12:47:ad:4a:6b:a6:62:bc:db:
                    2d:53:73:78:5f:f8:19:f5:d2:a3:02:0c:4f:d4:70:
                    0a:a5:c0:aa:44:9e:85:a1:dc:ec:21:cc:1e:b8:40:
                    3a:01:2e:7c:6b:9d:32:fd:de:74:b1:e1:c2:44:6b:
                    75:bf:44:ca:a2:b8:60:d0:50:07:32:95:01:b2:77:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BE:76:EB:F7:58:48:A3:EA:70:CE:61:89:F7:01:11:D7:04:33:A5
            X509v3 Authority Key Identifier:
                keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:74:5e:72:22:c7:09:f3:6d:23:4c:0c:be:37:7c:d9:84:
         a3:33:ff:e3:1a:ae:a0:81:c2:86:57:c6:4d:71:d1:a6:05:f7:
         aa:69:3b:d8:c3:84:47:8c:4d:f1:c8:98:ab:a4:57:8e:04:91:
         85:ed:be:d9:d8:23:d5:25:28:f2:6e:04:6d:9b:53:12:1a:ac:
         04:ca:34:f2:d8:30:9d:d4:bd:60:61:c3:d8:a1:41:c8:78:0b:
         3e:bc:6f:0e:ee:58:c7:ee:0e:53:dd:aa:f7:d1:c6:b0:74:e0:
         7d:f9:a5:6a:bb:5d:fa:a7:1c:6f:87:43:0a:4c:45:77:e8:4c:
         c0:0b:42:74:16:2c:07:97:2b:c7:97:f5:e4:db:53:70:70:6e:
         43:0e:b9:f5:a7:e0:c6:e8:4e:c1:d3:b8:c5:42:9f:3c:ab:ae:
         2a:bc:ca:ad:af:42:d2:50:0b:a0:8b:17:96:9a:5d:16:03:13:
         b2:b6:02:9d:58:63:f1:71:5e:30:41:f2:f5:c9:cc:f1:2d:95:
         ab:c8:b0:a0:b8:bf:62:4f:6b:8d:ae:cf:f9:46:eb:09:54:04:
         e4:31:58:8a:fe:67:84:85:28:d5:3c:ec:9f:fd:5a:d8:d6:61:
         5e:fd:40:1b:a7:be:0f:06:c7:ce:b7:6f:df:08:43:88:8c:a0:
         73:dd:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:40 2025 by rpki-client