Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          DQmSTRNoAdf5Ljarg6qEcWq7fXatyoDTU4aymot2jNE=
Subject key identifier:   34:5F:4A:0B:60:C7:D9:D9:2C:58:6C:46:13:6F:10:F4:79:10:8F:CB
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       0198D7A8D4B3F94BD3509A869A8F4DB674F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          1658
Signing time:             Sat 23 Aug 2025 16:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:22 +0000
Files and hashes:         1: 2ykyLUV8HJgn1salik1J3kOQxCQ.roa (hash: nDi3j9QWu/wqTdD6MOvj0Loav1zxTXnuS+2Or/nURsA=)
                          2: DF0LylBO293Rh5P_Xm-081JdxGQ.roa (hash: 405nlMqZVIUCURUtBGFImyyIgI7CPbrFiQZ6G44Cxus=)
                          3: Ki9qT7YB3e7mHbagrKcYG0NRPww.roa (hash: AoqiULKaxv21ka5UL631Ur1kFJT7xzfFRxQNsWV/3BE=)
                          4: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: 9i2pGsAAGl23iZrH1gKd4okoV2fcuLZiReDMkvc9bds=)
                          5: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=)
                          6: syjiQ17dBmmkBrrPm3qMJQlfeQw.roa (hash: xvm/Qu4QjTYO005UFyYbS5lkq4TgWn4H6EMhyBLhJuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:d4:b3:f9:4b:d3:50:9a:86:9a:8f:4d:b6:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Aug 23 16:00:22 2025 GMT
            Not After : Aug 24 16:00:22 2025 GMT
        Subject: CN=345f4a0b60c7d9d92c586c46136f10f479108fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:a9:30:a4:30:d8:48:08:d8:7b:ee:95:eb:
                    ff:7e:83:f3:dc:82:8a:a8:2f:74:55:48:46:4a:f3:
                    87:f0:4d:2a:99:b6:f5:ac:ce:e0:c8:cf:70:61:5e:
                    f3:09:55:53:cb:e7:29:bf:78:46:e3:fc:05:f2:e8:
                    8a:74:35:e5:56:cd:67:01:e9:80:c8:40:8e:27:51:
                    45:d6:9b:0c:0f:02:17:2b:2b:f7:de:d5:d6:35:87:
                    5d:d7:ba:59:83:ef:52:0e:51:45:54:27:5a:93:94:
                    da:fb:37:33:85:e8:8b:d6:32:dd:3f:9b:64:f5:14:
                    ca:7b:a6:f6:3a:3c:91:fe:d5:c8:30:73:be:a0:a7:
                    ff:96:dd:10:b6:99:5e:c7:ae:54:bb:ae:6d:dd:af:
                    8e:f2:07:e6:f9:cc:ff:e6:3b:ea:48:d6:89:6e:a4:
                    dd:d1:0e:a9:61:2e:b4:db:a4:74:aa:99:89:73:2b:
                    b3:c1:aa:fe:f8:31:3f:7e:7d:ce:84:a1:2a:dd:c1:
                    ee:cf:5b:e9:e1:a1:e5:00:25:10:f5:7c:4b:18:80:
                    cf:45:6e:5f:c0:16:1e:24:d5:01:a0:63:42:a0:a9:
                    d4:3d:fd:13:c2:dd:7a:66:a5:c1:28:bd:81:c2:f7:
                    b3:bd:38:2f:11:2f:72:50:bf:7c:4a:53:72:4c:32:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5F:4A:0B:60:C7:D9:D9:2C:58:6C:46:13:6F:10:F4:79:10:8F:CB
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:70:b8:ff:ae:c4:4d:15:80:0b:ea:9a:02:c4:71:f4:64:6d:
         e6:05:dd:5d:d0:96:a5:06:da:eb:2b:c2:08:27:87:0a:d0:09:
         1a:36:86:75:76:56:d1:25:e3:6c:1d:7b:e3:91:10:c4:09:b4:
         44:0f:6b:1b:97:1b:c8:4e:2f:36:42:af:8f:73:1d:1c:6f:25:
         6d:1a:b0:c7:38:14:a3:c9:53:ea:91:17:14:d2:00:79:b9:a6:
         67:9d:e3:c5:ab:3d:b7:53:f2:b8:75:e2:9b:de:6a:c1:b9:83:
         c6:86:cf:b7:70:ce:1f:1e:33:97:83:56:88:59:62:f6:ad:d1:
         46:0d:35:49:bc:99:22:95:c2:48:73:64:44:4b:08:0a:b4:4d:
         03:42:f5:8b:b9:f1:f9:3a:e6:11:f4:7f:b6:5e:67:97:7a:ee:
         f5:e7:90:20:9e:92:92:dc:fc:a7:96:3f:77:36:27:e0:6c:49:
         0c:e7:6b:9b:9c:c1:d8:1e:13:71:86:4b:ac:c7:09:78:50:14:
         11:6f:52:dc:ba:a6:06:50:68:6a:d8:7c:d2:d1:75:98:b1:66:
         97:57:ee:7e:e6:15:bc:25:e8:e4:b0:e8:44:16:7f:d7:9a:be:
         d1:35:cc:7f:20:a3:35:79:93:67:87:7a:20:67:ac:5f:47:00:
         74:ef:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:49:49 2025 by rpki-client