Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File:                     cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier:          lqBNHdvGc53vw/oDVFZjheBcX+0S0bMIWVaWRAWMpVs=
Subject key identifier:   EB:2F:32:7B:17:D0:B1:6A:C8:CE:17:46:4D:59:74:0D:28:D3:EB:A5
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer:       /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial:       0198D583F6088B52325DDE3F4BF3D13E826F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 06:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:51 +0000
Files and hashes:         1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
                          2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: ecZ9Ja1tyW07htlZVqgdw4x2+gvarBqWP4JxiQ60xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f6:08:8b:52:32:5d:de:3f:4b:f3:d1:3e:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
        Validity
            Not Before: Aug 23 06:00:51 2025 GMT
            Not After : Aug 24 06:00:51 2025 GMT
        Subject: CN=eb2f327b17d0b16ac8ce17464d59740d28d3eba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:e6:3b:36:bb:67:42:cc:8c:f4:68:b4:67:
                    a9:4d:48:86:70:2c:d0:5b:48:62:9d:0b:41:21:86:
                    5b:0f:4e:d3:ab:47:af:86:c5:38:bf:d2:f5:7b:da:
                    21:10:75:bc:e2:4c:f9:2c:1e:aa:c2:d9:46:09:c7:
                    33:08:f1:2e:13:2a:08:45:43:83:7d:ab:bd:b2:c2:
                    23:4c:05:97:5c:fe:07:17:df:3f:9c:64:5d:35:f7:
                    36:09:f4:2c:84:97:6d:e7:aa:25:b5:ea:d5:19:aa:
                    49:f0:90:a2:0d:0b:2a:ac:f1:ff:dd:99:6f:97:6a:
                    12:05:e4:31:8a:e6:f2:d3:11:d7:6d:18:e8:2a:5f:
                    53:e4:81:14:46:02:b1:ed:e1:5c:de:bf:6b:13:af:
                    2b:da:07:f6:fe:6e:12:cc:f4:23:8d:a6:e0:77:d0:
                    7b:5e:36:70:24:8b:a4:39:c3:90:6c:2b:86:60:38:
                    c1:83:6f:35:8a:93:07:87:64:37:b0:42:90:da:b7:
                    07:4c:c0:58:d7:70:7d:eb:f6:37:be:ad:e0:cf:e0:
                    a1:f6:ac:16:21:97:3b:77:9d:f8:ab:2e:28:80:6a:
                    d0:df:89:1c:60:77:0d:cb:ef:2c:b7:c6:c5:67:0e:
                    8e:21:74:09:77:00:22:bd:64:aa:45:29:f0:79:5a:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:32:7B:17:D0:B1:6A:C8:CE:17:46:4D:59:74:0D:28:D3:EB:A5
            X509v3 Authority Key Identifier:
                keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:71:2b:4e:0c:53:e0:07:05:9a:2f:e6:81:76:0c:4e:bb:cb:
         c4:7c:a5:58:bc:06:fa:8c:1b:52:ca:a5:f0:36:ba:cc:80:26:
         28:f1:24:f2:5f:2e:43:20:f2:a9:27:2d:b5:58:8d:32:c3:5c:
         26:24:f3:68:7e:38:c5:ff:32:a5:97:94:d6:75:50:6b:54:d9:
         1c:ca:18:67:89:99:55:61:9f:9d:56:fc:cb:58:1a:92:2f:a2:
         c4:6f:2b:e2:57:86:3f:74:c8:49:0e:88:17:e6:b5:d8:b3:2e:
         8c:45:69:99:48:90:fb:f1:56:c6:a5:fa:47:70:85:5c:2d:e5:
         07:9c:4d:1c:95:2b:f2:a6:61:42:3d:9d:63:ad:52:27:c9:83:
         e4:f4:05:ca:d9:09:8a:7e:b5:f4:56:15:7d:f7:e5:62:a4:eb:
         86:50:a0:5b:dd:e5:5b:fe:d0:bd:75:a2:2a:99:eb:f7:59:2f:
         74:6a:5f:8a:39:a6:6c:4f:c3:30:e1:e4:fe:8e:ef:e1:b1:ff:
         34:b1:a6:65:66:76:17:bf:40:af:66:34:ad:da:e6:b6:2e:fc:
         16:f5:32:4e:c6:bf:94:9e:a9:07:cf:cc:63:24:de:f2:6b:e2:
         7c:72:cc:ad:de:0c:f5:5d:60:97:19:3a:32:4a:37:c2:e6:78:
         8b:48:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:07 2025 by rpki-client