Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File:                     mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier:          imEy3IQiwswAL2tCVHckhLZlou6m538x4ijVbAvOvPs=
Subject key identifier:   31:75:A2:B0:F0:2D:19:6C:47:BF:97:CC:08:7E:86:D3:0D:B3:17:48
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer:       /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial:       0198D6610DF4B7AA3C2D1D8ED7C76588DEAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:21 +0000
Files and hashes:         1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: rFhmwOcEixFr9vz/0tgw5WocrBw+u94GkmVKv9AEhZQ=)
                          2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:0d:f4:b7:aa:3c:2d:1d:8e:d7:c7:65:88:de:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
        Validity
            Not Before: Aug 23 10:02:21 2025 GMT
            Not After : Aug 24 10:02:21 2025 GMT
        Subject: CN=3175a2b0f02d196c47bf97cc087e86d30db31748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:f3:e6:58:45:4f:29:63:1f:9a:98:f3:05:
                    9e:e1:72:75:7d:ac:f7:25:21:5c:b2:e5:47:2d:d5:
                    b3:f8:96:be:f8:a3:3f:fa:74:10:57:fb:bf:d2:b7:
                    79:01:bd:2b:f9:a7:30:c0:6b:b0:16:39:b8:84:97:
                    79:50:e1:2d:1c:a8:46:e6:2e:47:ed:fd:d0:59:14:
                    75:5a:0f:b7:7a:7a:e7:72:1d:76:75:a8:22:ca:61:
                    a6:c2:76:40:89:78:bd:fd:7d:d5:bd:f8:ff:52:87:
                    03:3e:14:b7:97:49:f2:6c:da:41:b7:b9:3e:8d:ee:
                    8a:0f:a7:12:49:d9:11:47:d8:7e:8c:46:e2:ab:4d:
                    c8:ee:91:33:e5:97:c0:28:5a:2a:81:ba:c9:ba:90:
                    9c:5d:36:1f:cb:63:98:14:19:36:81:6e:7d:82:10:
                    6e:6f:31:32:ba:d1:2d:19:73:8e:37:88:c9:cb:20:
                    97:be:1e:b1:e1:87:f6:2d:0a:c8:23:5c:f2:da:8a:
                    54:ab:63:2c:6a:e9:ba:a2:bc:0b:3e:a0:80:8f:88:
                    37:30:7d:2f:8b:53:44:63:fb:40:3c:67:2e:ef:01:
                    66:16:92:be:16:92:99:53:35:22:cb:53:49:ef:b3:
                    81:42:5b:0e:d5:5c:ba:04:d1:c0:ab:43:47:55:b2:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:75:A2:B0:F0:2D:19:6C:47:BF:97:CC:08:7E:86:D3:0D:B3:17:48
            X509v3 Authority Key Identifier:
                keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:4c:34:bf:80:f5:6d:3d:43:8f:62:ff:e7:ba:bd:ae:18:
         4d:61:89:59:6b:f2:b1:b3:86:52:a2:85:2f:19:35:17:7a:92:
         19:0b:07:7f:6a:8b:7a:cc:34:be:af:d1:30:df:87:d6:8b:00:
         b7:b1:12:8e:f9:7e:4b:fc:a8:4c:2e:b8:de:78:5a:e8:76:78:
         f1:94:0e:6a:13:70:67:e3:50:7b:51:19:37:68:4c:e2:c9:3f:
         40:cb:fe:05:a6:35:bd:58:8c:d0:ec:21:44:07:9e:5c:31:f5:
         cb:98:da:6e:87:20:ae:92:63:dd:72:da:74:b4:71:e6:fa:57:
         b1:f7:4e:4f:ee:bc:23:c6:4e:c5:b9:4d:82:62:56:67:34:a1:
         c7:ea:0a:1c:a8:cd:b9:3b:41:d5:7e:13:b5:e4:89:cb:48:76:
         dd:9c:95:42:11:1d:9b:72:5a:70:d8:69:d2:7c:85:9f:7e:86:
         15:66:95:b1:63:3f:72:4a:54:e3:40:d0:93:94:47:e2:fd:90:
         37:84:2b:8e:aa:e4:ca:89:a6:cb:37:fb:bd:7d:d8:b6:91:d8:
         17:16:2a:9a:4c:fb:8c:21:07:9c:70:0d:81:55:8d:81:7c:55:
         75:51:35:c0:fa:3b:74:63:2a:65:1f:dc:9a:f8:1c:39:37:47:
         2e:fd:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:22 2025 by rpki-client