Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File:                     RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier:          nX48VPjdKCtxHKKcDL05bdZDSiH+QtcnBlhHZUGZD9c=
Subject key identifier:   11:99:93:A4:BC:57:53:AA:98:EE:24:28:95:46:2B:A2:4D:57:1E:FF
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer:       /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial:       0198D660DDBCB592F0F57439391F044F05BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:09 +0000
Files and hashes:         1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: gs2HJrZe2mYn+vTqirQKBbrO6UuoEkijvTGGduIafEo=)
                          2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:dd:bc:b5:92:f0:f5:74:39:39:1f:04:4f:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
        Validity
            Not Before: Aug 23 10:02:09 2025 GMT
            Not After : Aug 24 10:02:09 2025 GMT
        Subject: CN=119993a4bc5753aa98ee242895462ba24d571eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:34:02:c7:25:18:c6:6a:cd:b8:08:6d:9d:
                    28:e1:d1:8b:bc:48:ec:a3:f1:82:23:bf:fd:55:97:
                    5d:d9:14:50:4f:d0:82:fd:94:27:41:d2:f7:46:6f:
                    9f:2f:5a:0f:df:a8:0a:c2:8d:3f:2d:7d:f2:0b:fa:
                    b5:b2:d9:45:e8:37:5e:0b:2f:52:af:a0:a1:7f:73:
                    ee:b4:0f:59:81:2c:74:97:46:d0:6b:47:f8:7b:e5:
                    ea:ac:65:4e:8f:30:ba:27:56:bc:79:72:99:e1:ae:
                    d9:e9:77:0a:a2:e7:fd:79:83:cd:15:e6:ef:53:8a:
                    b8:29:6f:90:f7:ef:f5:1e:1c:6e:55:ac:c0:0f:70:
                    f2:29:da:b0:d2:90:79:64:6f:e1:9e:45:da:10:ec:
                    78:5c:7b:a9:01:f3:56:0f:ba:c7:78:d6:24:5a:51:
                    8d:5c:da:44:33:71:5a:4b:78:06:af:ce:3e:88:61:
                    c2:3f:b8:63:dd:6f:82:06:ad:e2:8b:87:1a:22:39:
                    7b:16:93:35:70:51:e5:c6:a0:75:e3:9c:ae:05:f7:
                    56:b8:4f:85:64:33:23:e4:de:fc:80:b2:59:7e:fe:
                    3b:3b:7e:62:2c:50:00:7f:02:fa:c9:1a:a7:00:b2:
                    0a:e7:24:14:55:2a:e9:8b:23:77:77:3e:32:b5:05:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:93:A4:BC:57:53:AA:98:EE:24:28:95:46:2B:A2:4D:57:1E:FF
            X509v3 Authority Key Identifier:
                keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:13:4d:91:bd:27:9f:f8:e6:87:9c:87:2d:24:53:75:c3:
         1d:16:5f:a7:73:dc:96:82:d0:92:f7:5c:5b:4f:b7:48:82:48:
         76:af:a7:f2:2f:12:b5:62:3c:2b:65:7c:8c:17:1d:0d:13:f5:
         d7:ae:28:52:14:db:09:46:8f:25:f2:5e:31:6f:9c:cb:8a:ed:
         0e:cd:6b:e1:5c:14:ea:13:e5:5b:96:f4:18:7d:46:7d:4c:92:
         46:96:99:d3:0c:43:99:d4:e5:af:fe:46:48:63:89:03:be:9a:
         92:6b:28:7d:33:3c:48:ac:8f:c8:d6:31:08:e8:ab:62:44:41:
         9f:fc:4d:a1:80:92:9c:fd:aa:c0:f7:8d:91:24:2f:f6:84:32:
         99:ea:8f:cc:5f:e9:4e:bd:b7:c8:ef:d6:c6:b5:3e:39:fb:9b:
         bb:11:8f:c2:30:c6:9c:27:86:18:2f:6b:7d:95:71:a0:8a:99:
         9e:19:0d:54:7b:a6:1c:dd:8e:b4:20:38:8f:c6:1a:f3:d5:14:
         52:bc:b0:40:04:29:37:53:c0:73:b2:8c:c7:20:a0:98:51:32:
         c2:e4:46:14:08:16:f8:35:0a:9f:cd:40:62:85:20:11:88:88:
         60:3c:20:b0:cb:5b:35:4e:b2:a0:91:36:06:45:82:01:d0:d5:
         a7:f1:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:37 2025 by rpki-client