Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File:                     1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier:          hY3UPE0sw5X26oWA4iGUKNNN8uVc9GDHSUdD4XpfINo=
Subject key identifier:   96:8F:45:73:6C:5F:71:77:42:BD:CC:BA:34:3E:06:79:80:10:EF:53
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer:       /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial:       0198D6CD827963F0E521E8E1637FDEA9EE98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 12:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:49 +0000
Files and hashes:         1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: LG/vQZeWuVnfwWA5haJlHmcKswVKCFaFnt1k/jb2qUg=)
                          2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:82:79:63:f0:e5:21:e8:e1:63:7f:de:a9:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
        Validity
            Not Before: Aug 23 12:00:49 2025 GMT
            Not After : Aug 24 12:00:49 2025 GMT
        Subject: CN=968f45736c5f717742bdccba343e06798010ef53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:61:58:78:04:99:c1:93:79:a3:ba:95:b2:
                    45:a6:96:86:8e:6e:46:6e:c9:3f:7b:db:e0:b9:37:
                    df:4a:05:ba:02:9c:ab:b5:7c:e4:d7:24:44:ae:3f:
                    91:81:d3:10:9a:5b:83:c2:15:9b:34:5d:37:9c:b1:
                    f0:5f:50:69:04:26:a0:ca:1c:ee:df:5e:ce:a0:ae:
                    b7:c5:65:3a:f1:cc:c8:33:d9:72:24:86:d1:45:7e:
                    c4:9f:05:bb:e5:78:bf:cb:b6:b4:6f:ac:5b:02:8d:
                    2c:3d:d3:46:f6:d9:7b:02:96:14:c2:e5:43:79:4e:
                    b7:17:9a:61:b4:e5:d3:e7:32:c9:00:48:e5:48:3f:
                    b9:7b:b2:da:c6:e4:ff:dc:f1:ff:03:6f:14:0d:55:
                    2e:1c:83:ff:4b:e7:d4:ab:ff:a9:61:bd:57:55:d4:
                    ec:b4:84:1d:f0:a1:4d:ab:fb:10:97:64:d9:0b:7f:
                    37:f2:2f:0d:b0:42:24:48:79:60:57:ae:aa:cf:90:
                    58:35:f7:da:31:14:5c:94:cb:ca:f0:b0:42:e1:6c:
                    42:13:71:df:56:a5:8a:99:88:6e:f0:42:25:5b:1c:
                    c2:40:64:36:6a:51:d2:fb:1a:0c:fc:57:9b:29:9a:
                    27:f1:27:70:d0:c1:a8:05:32:5f:55:9c:19:db:af:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8F:45:73:6C:5F:71:77:42:BD:CC:BA:34:3E:06:79:80:10:EF:53
            X509v3 Authority Key Identifier:
                keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:ee:22:02:32:e9:cc:ee:be:bd:44:27:41:bf:f1:aa:51:
         85:2b:82:44:0f:cb:2e:55:73:3e:59:1d:74:7b:ad:5a:19:6b:
         a4:6a:03:dd:c4:92:ac:67:85:2d:53:dc:9d:f9:75:a0:5a:fe:
         20:64:b4:bb:7c:46:0d:22:2e:89:a6:46:28:0d:34:d1:cb:89:
         fb:a3:02:5c:db:94:1e:6a:82:f0:67:3e:af:3e:c4:ae:c4:1b:
         1f:be:e8:68:5f:0a:e2:27:4e:34:e5:6b:77:77:11:7a:ae:ea:
         88:fb:89:03:14:bd:37:f4:54:29:67:a1:c6:7b:1d:a1:2e:36:
         07:56:eb:68:a9:6e:2b:33:0a:39:90:a6:78:eb:b4:fd:9d:d6:
         29:54:5d:65:50:42:b2:7a:91:24:28:b8:fc:a1:1f:0f:4e:81:
         8f:a5:22:ff:ec:f0:5e:18:5f:74:b4:9a:81:23:e3:75:59:8d:
         a1:9b:05:39:39:b2:22:2c:d7:83:1a:fe:b0:df:86:c0:84:fb:
         98:fa:ed:96:b5:51:59:95:ee:56:20:43:98:9b:0f:da:96:d2:
         5c:44:ab:b4:a2:57:9e:1e:8e:5d:21:b1:ec:c5:c1:0a:b8:5b:
         21:8e:93:68:a9:4d:09:20:e8:e1:e3:29:9c:6f:d0:24:d0:d4:
         a2:42:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:16 2025 by rpki-client