Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File:                     jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier:          C3Jenz6jr5sqd+WMpAmQIT9mDkcF5w4ZyhIPMUMPib0=
Subject key identifier:   18:D0:13:2B:86:EC:EC:B7:E7:27:0D:AC:BC:EB:16:DA:3B:13:28:6B
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer:       /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial:       0198D5BC3748F50467B1FE951B0E8201A7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number:          161D
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
                          2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: 13HexDBh5UM3PrSRFn7HjZY0GP89wTngpWDrsK3AoTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:37:48:f5:04:67:b1:fe:95:1b:0e:82:01:a7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=18d0132b86ececb7e7270dacbceb16da3b13286b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:41:9a:31:36:a5:23:73:b1:0d:ab:71:c0:
                    fb:8a:bb:5c:4c:07:db:d3:f5:0b:07:4a:7c:9f:d1:
                    f8:60:67:f7:d0:4b:72:17:a3:b9:14:59:55:c5:9f:
                    86:35:f1:49:4e:0e:47:b5:54:2f:44:2a:99:11:c6:
                    41:9d:bd:ec:ad:e3:a3:53:99:4a:6e:56:7d:d6:68:
                    3d:71:4c:f5:0c:cb:1a:64:44:96:75:04:62:d7:68:
                    a3:11:f1:63:04:77:99:cf:6b:b0:89:2e:8a:a8:e4:
                    31:44:4e:fe:fd:01:1c:f0:a4:28:f9:1f:54:db:c7:
                    94:59:45:dc:49:e0:ba:dc:90:6b:2d:61:de:b6:a3:
                    de:c7:c1:16:d8:b1:43:56:24:5a:fa:e3:82:eb:c1:
                    8d:d2:9f:23:44:26:ca:f0:e2:23:00:ac:21:66:a0:
                    06:ab:54:37:2f:95:06:73:58:41:77:20:ce:ec:43:
                    44:5c:d3:07:02:c0:70:3d:5d:c8:d4:d7:dd:92:b9:
                    b9:ac:45:43:7e:4a:97:4f:60:8f:fb:d1:11:40:03:
                    bd:db:fc:3e:fa:c8:00:ce:8c:f6:15:d4:b4:a0:3b:
                    b9:89:74:ba:41:28:4b:ab:f6:ef:e0:31:f1:e4:df:
                    64:e1:d7:73:ae:5a:12:09:ed:de:c4:b3:32:c0:04:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:13:2B:86:EC:EC:B7:E7:27:0D:AC:BC:EB:16:DA:3B:13:28:6B
            X509v3 Authority Key Identifier:
                keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:93:68:7e:f9:86:a1:fe:de:3a:da:aa:3f:22:e2:2a:52:
         b4:89:a6:91:90:6f:38:9a:04:12:5c:87:40:1e:f3:f1:b3:bb:
         34:0c:c5:b3:0e:29:90:85:ec:6f:83:86:75:0c:4b:b2:ae:33:
         0d:48:d2:b0:c8:a0:8e:d5:66:68:5c:4e:c1:d0:f7:8a:43:4b:
         97:e3:75:e1:07:56:6f:0a:05:e1:c6:9a:d2:27:4b:c6:31:34:
         e0:15:0e:c8:ee:a3:7e:0a:7a:f3:f6:fc:ef:4a:78:38:10:0d:
         3c:a0:9f:44:7f:6b:69:7b:80:60:a9:17:b0:a8:46:19:c3:3f:
         8b:7c:66:42:6f:c9:7a:9f:0f:7e:5a:7b:0b:db:d6:fa:fc:c6:
         17:d8:70:55:66:69:a5:be:66:a3:26:b0:ea:e1:a5:88:d8:96:
         c7:99:15:4d:84:d5:33:31:9f:19:07:6d:22:48:64:60:97:51:
         91:9a:2f:20:2d:12:aa:74:58:86:50:ed:26:3e:82:5f:34:fb:
         e7:30:a5:69:d5:2e:f0:15:2c:80:62:23:b3:8a:91:ad:c9:7b:
         55:aa:3b:9e:69:96:c4:7e:d5:9d:02:f0:83:12:2a:95:26:c6:
         24:ff:14:67:fa:a8:bb:d5:17:24:01:24:3e:4b:ad:42:78:34:
         1a:41:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:29 2025 by rpki-client