Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          az88o+gQqWxqKUSPS3n5NXFbrc1jUP7JaXRyLuKPS4I=
Subject key identifier:   73:CC:0B:26:B1:9C:4A:B4:F0:B7:81:C3:9F:69:DD:B9:50:06:DC:52
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       0198D8846C765006D64606B2E704DF7CA8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 20:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:13 +0000
Files and hashes:         1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
                          2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
                          3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
                          4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
                          5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
                          6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
                          7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: Z5vLNyrdeUnLh4RbzHec1iEMwARq96zD2ejRbJLFL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:6c:76:50:06:d6:46:06:b2:e7:04:df:7c:a8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Aug 23 20:00:13 2025 GMT
            Not After : Aug 24 20:00:13 2025 GMT
        Subject: CN=73cc0b26b19c4ab4f0b781c39f69ddb95006dc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:bb:68:4b:36:c4:00:b9:73:61:94:7a:6d:
                    12:34:1b:af:db:ba:40:32:d4:75:6e:2e:05:32:2d:
                    fb:d3:7b:eb:f1:0b:64:9c:e4:20:8f:ab:51:17:dc:
                    43:41:a3:7b:06:f7:34:e9:fc:50:9a:f9:66:c8:9c:
                    8c:f4:ae:b8:c8:6a:d5:33:87:4d:42:db:5b:34:1d:
                    0a:7b:90:d3:bb:1b:a5:71:b8:6a:3c:bb:6d:04:2a:
                    30:8c:ae:dc:41:2d:a7:2e:b8:3c:68:d7:42:d5:9a:
                    bc:68:b5:2c:ae:3c:6c:c8:13:3e:48:04:57:6f:27:
                    0b:42:8f:54:b8:27:90:00:16:e7:74:87:3b:7f:e5:
                    83:36:25:3e:79:6e:c0:63:e7:e9:fc:fa:8f:da:dd:
                    08:6e:d7:5d:df:21:ce:30:e1:94:5a:9a:04:0a:51:
                    b5:19:5c:f3:f5:cb:61:e1:07:85:a5:4e:07:83:8c:
                    96:46:50:17:36:62:16:bc:54:d4:59:7b:31:d4:b6:
                    3e:94:87:8a:65:ca:6f:ef:69:7b:82:58:2c:e9:e8:
                    3b:a0:62:63:08:61:0e:af:a3:16:e4:fb:ca:49:ad:
                    4d:99:78:41:e3:81:e0:2d:a0:18:58:08:31:08:4a:
                    fc:62:61:75:6b:ea:9c:81:93:59:62:03:c0:42:c4:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:0B:26:B1:9C:4A:B4:F0:B7:81:C3:9F:69:DD:B9:50:06:DC:52
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:56:0a:f7:21:bd:33:bb:2d:5a:b8:a5:ae:9d:07:77:63:23:
         a1:b9:da:31:72:98:c7:88:be:ec:e3:0a:ca:6f:96:3e:fa:a7:
         7f:d8:f4:e8:6f:07:4c:15:62:f1:8c:40:52:5a:bf:94:67:bc:
         ee:dd:6e:ce:a6:1e:08:02:f9:b0:9c:99:41:e8:fd:13:79:da:
         18:b9:64:3f:11:99:08:69:f4:18:b9:ea:83:bc:a8:50:69:d1:
         84:cf:e0:21:a9:44:d8:58:f4:3b:ea:6d:ef:ee:1d:0a:bd:ce:
         81:ff:59:31:80:ee:a0:be:bc:f9:69:ec:de:5a:07:16:6f:28:
         52:08:23:10:e5:80:60:99:de:7a:d6:f0:70:d2:85:c3:c3:a4:
         a7:9b:e5:29:9e:98:b9:20:cb:c9:93:e4:57:1d:ee:f2:46:ce:
         cc:63:35:dc:70:da:ed:cc:51:ea:9a:82:26:56:85:f7:33:4e:
         52:77:0f:39:4a:d9:a6:b3:8b:c8:f6:15:2e:e2:52:e6:c3:eb:
         cd:6f:93:05:7d:0d:83:63:44:af:81:24:b8:3d:e3:e9:d7:4b:
         54:bc:60:f9:74:0d:c1:42:74:a0:f2:ae:f6:ff:9a:4a:90:09:
         6b:5d:e1:d1:4e:c2:77:ae:ff:83:10:a9:db:d2:4c:50:65:1d:
         05:33:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:28 2025 by rpki-client