Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File:                     mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier:          kslQtJ5X0HkOubX5U0MrnF81EG4LAj8WAzPhZu8JAgA=
Subject key identifier:   AA:D8:9F:BD:60:3B:24:A7:15:05:FB:BC:21:F4:57:46:33:E1:19:69
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer:       /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial:       0198D54E504E0480B53C4FFB021571F1B049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:16 +0000
Files and hashes:         1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
                          2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: 96pZtS/QkDMJ+FKi7Kj+XCinzsU56SIHdFb2JfmdolI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:50:4e:04:80:b5:3c:4f:fb:02:15:71:f1:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
        Validity
            Not Before: Aug 23 05:02:16 2025 GMT
            Not After : Aug 24 05:02:16 2025 GMT
        Subject: CN=aad89fbd603b24a71505fbbc21f4574633e11969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:0e:cd:d5:3f:09:7c:b3:8c:51:0e:e8:68:
                    f4:29:f6:97:05:08:2d:ee:f0:8e:29:90:27:b0:13:
                    37:6c:c7:95:66:19:14:6e:ef:02:68:cf:ab:5a:e0:
                    fe:3f:68:f7:88:23:b7:08:72:b3:03:a8:d4:1d:bf:
                    b9:92:31:04:ee:e9:34:dd:56:f5:4f:8b:22:58:f3:
                    dc:37:46:fe:d0:b6:d2:1c:bc:a3:41:76:05:74:83:
                    0c:5b:c8:ce:b9:18:ab:f7:ee:e5:72:1e:06:b5:b2:
                    35:d4:92:3d:cd:a7:5c:ea:ff:1a:92:94:bd:46:bf:
                    2e:c5:74:fa:3c:73:1b:87:12:fa:b3:fa:4e:cd:77:
                    96:a5:4c:4a:d0:9d:62:12:04:3c:68:a3:20:b6:16:
                    cd:86:67:1d:8e:5d:67:3e:18:3f:20:c4:8c:6c:93:
                    97:95:d8:9b:d5:8f:51:94:1f:56:d3:08:c1:1e:55:
                    97:c8:09:15:ea:08:a8:b6:c8:44:30:0d:ad:fa:5f:
                    14:b0:b9:44:cb:32:1a:20:43:c0:5f:43:8b:7b:99:
                    f4:30:a9:27:b4:8b:53:99:c9:28:b4:03:df:7b:4f:
                    f2:f5:ca:60:61:4a:27:a7:97:9c:f3:7e:39:ee:2d:
                    4f:42:44:5f:54:62:ae:d4:f3:56:aa:d1:d9:8b:84:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:9F:BD:60:3B:24:A7:15:05:FB:BC:21:F4:57:46:33:E1:19:69
            X509v3 Authority Key Identifier:
                keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:61:53:66:98:41:cd:e9:28:ba:a2:da:57:20:ef:f2:4a:f8:
         05:bb:75:c0:f6:57:5c:06:89:47:be:5a:e6:f0:82:62:b3:4b:
         c3:d0:44:4d:3c:e2:f9:9e:a0:81:7b:d9:19:7e:07:41:5d:94:
         b2:7b:d9:77:76:b7:8d:24:f2:33:9f:d5:50:b6:d6:89:08:e2:
         c4:e0:9a:01:2e:2e:7a:ec:c5:c8:90:61:02:2d:83:6c:7b:61:
         b3:7d:18:83:95:85:2f:b0:cb:4d:7c:74:e9:ce:67:90:fd:41:
         f5:71:09:b7:c5:4b:9a:31:d3:69:e8:17:b1:bd:e9:0a:0a:86:
         6a:1a:6d:d8:d9:4e:57:fd:f9:1b:00:41:cb:76:33:09:dd:35:
         7f:8a:21:8d:9e:b3:de:41:d5:44:47:35:93:bc:d9:1d:35:31:
         82:5c:63:a6:d6:ec:67:b4:aa:ae:86:03:51:ca:41:e6:8a:fc:
         28:bc:b2:2b:36:a9:43:c3:fd:9e:55:22:b0:7e:56:fc:bb:82:
         bf:86:a6:2f:3b:15:8c:f9:80:75:35:a4:a0:4b:2e:02:f2:ea:
         fd:bb:80:40:da:54:8d:88:86:4b:c0:1b:8f:5e:00:0c:fd:7d:
         6f:fa:24:4a:45:a3:7b:81:0b:18:ea:87:5a:87:6c:ae:1b:dc:
         20:cb:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:58:01 2025 by rpki-client