Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File:                     q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier:          PnJVF7LB7CaoYUDr9KAqhjm5OaDnM23pU7joQ1BH/rY=
Subject key identifier:   E2:D9:9B:CA:37:16:B9:00:6E:04:99:0A:C1:0C:96:E4:0D:89:45:29
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       0198D65F1C318241013F387BE50AEDEADF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:13 +0000
Files and hashes:         1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
                          2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: G2v9Ia3pGM79Ic92zfsCnS7qtGVgjPwz4Jq+wplf9Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:1c:31:82:41:01:3f:38:7b:e5:0a:ed:ea:df:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Aug 23 10:00:13 2025 GMT
            Not After : Aug 24 10:00:13 2025 GMT
        Subject: CN=e2d99bca3716b9006e04990ac10c96e40d894529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:91:81:65:f2:da:d6:1e:9e:5a:b6:a0:a4:
                    60:40:a9:6f:0e:75:1f:53:45:99:c0:52:8d:33:40:
                    19:a9:5c:29:03:7a:72:93:55:9b:34:cd:03:1a:b6:
                    cf:83:aa:39:42:ca:5c:ae:cf:69:ed:11:fe:6d:a5:
                    33:6c:44:4d:43:85:7f:b3:c9:e3:84:50:83:9e:e3:
                    05:3a:30:21:6d:24:cf:31:cd:f8:a2:c4:71:55:7a:
                    db:32:91:62:ac:54:21:d5:4d:21:43:ad:f3:aa:d5:
                    0a:c2:db:78:68:ca:9b:e3:61:1f:0c:95:84:7e:42:
                    24:bc:b9:23:7f:54:d9:41:c6:93:fd:07:5f:80:74:
                    5a:f8:f0:5d:dd:34:84:cc:b2:6e:03:1a:62:ba:87:
                    75:7f:9d:a4:bc:1f:a4:3c:43:02:2e:5e:5a:06:37:
                    4b:7c:9e:5a:f9:c1:0b:e6:64:3d:dc:68:b8:5d:22:
                    13:50:ea:57:0d:41:06:75:48:30:75:6f:08:83:44:
                    38:ef:b8:62:3c:c8:a4:a7:50:e8:81:08:62:f5:f6:
                    8c:20:3d:a8:c4:bc:3d:58:e2:a8:98:5b:94:13:4c:
                    78:e8:79:a8:4a:18:20:f2:fa:33:be:cc:18:04:95:
                    b1:46:8b:fe:61:f5:c6:c1:05:4f:43:13:06:80:08:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D9:9B:CA:37:16:B9:00:6E:04:99:0A:C1:0C:96:E4:0D:89:45:29
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:53:15:01:83:e4:32:6b:1e:db:c2:16:08:db:aa:87:67:0f:
         6e:ec:5d:59:c0:52:de:65:7e:20:50:03:e7:e3:7c:d4:b4:fe:
         e8:b8:b0:4c:47:3d:c6:a1:95:b7:2f:bf:fa:0a:67:66:d2:cc:
         6a:f7:66:5e:e4:25:e9:0e:39:78:db:d4:ef:cf:4a:9f:e1:67:
         0f:61:75:01:cb:1b:47:b7:ee:22:8f:ff:84:1e:3b:ec:b9:13:
         a9:78:ed:a6:e8:73:d8:1c:53:e4:48:1b:76:54:4e:dd:3e:98:
         1c:06:11:2d:4e:4e:9a:0e:b7:05:36:c2:cc:5e:75:ad:7a:fa:
         d0:33:7c:93:3e:16:6f:51:13:0e:93:c9:06:5d:ba:a6:3b:cb:
         43:bf:9e:c4:42:d5:42:b5:5f:28:fc:bd:01:39:15:8b:c2:5c:
         6e:1c:a6:ba:fa:f1:77:cc:83:58:3e:51:a3:16:e7:4d:6b:dc:
         b3:fe:9c:0a:f6:d0:f0:46:13:8b:78:41:d9:59:36:71:5f:cc:
         70:ad:37:8e:28:c6:76:34:30:81:e0:27:0d:60:76:fe:42:aa:
         11:ce:ee:10:61:d5:e3:97:d0:2a:33:1d:c9:19:09:49:fc:3a:
         37:1b:41:7f:16:eb:74:f7:ab:ca:28:e8:25:79:58:e9:d0:02:
         5e:d8:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:20 2025 by rpki-client