Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          36bfdADHHc7bJfQyIG+q9Nv6TKODnpfHkqBUpd2SzV8=
Subject key identifier:   EB:CC:5B:57:62:0C:34:86:61:10:AE:0B:4F:97:A0:64:1D:B1:C8:35
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       0198D54E564A8CE516C6E8881C70C9B0EB6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          165B
Signing time:             Sat 23 Aug 2025 05:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:17 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: YbciJSyDNWOBXARX7LCfbkE8jZmPZYzrPQjc+SyNu0E=)
                          2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
                          3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
                          4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:56:4a:8c:e5:16:c6:e8:88:1c:70:c9:b0:eb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Aug 23 05:02:17 2025 GMT
            Not After : Aug 24 05:02:17 2025 GMT
        Subject: CN=ebcc5b57620c34866110ae0b4f97a0641db1c835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:1a:9a:ea:cf:87:e6:3d:b5:e2:e2:4f:12:
                    67:74:87:d6:27:4f:fb:2b:52:f2:26:34:fd:8b:7d:
                    58:67:29:2e:26:c9:1c:d5:3d:e6:47:a6:25:88:cf:
                    cc:e3:57:54:f5:6a:cd:13:cc:f5:4c:08:bd:a6:ab:
                    a2:a3:14:d6:08:1c:59:c9:45:bb:19:63:48:92:fc:
                    2e:65:3b:55:df:c3:ec:02:75:3d:ff:30:28:3f:91:
                    b6:68:32:67:05:56:c3:59:d4:09:9c:9a:64:b4:f0:
                    ab:91:5b:cc:8f:e9:fa:32:cb:3c:74:48:0d:34:bf:
                    87:30:ef:7a:ef:00:48:30:71:e5:47:3e:db:fb:a1:
                    aa:b4:fc:7e:a7:3b:a6:64:cc:e1:91:84:c6:28:b7:
                    7d:0c:c2:1e:91:1a:b9:b9:32:f1:f3:2c:91:0b:10:
                    6c:89:47:50:37:ca:62:e9:4c:06:37:1a:14:9d:e3:
                    d5:90:f2:94:05:fe:62:d5:96:c4:22:ad:f8:f6:68:
                    3d:de:00:d4:5c:13:e9:80:09:ce:ab:56:87:c7:80:
                    f2:d6:19:0a:f6:b2:fe:e9:f6:b0:4e:df:a9:29:3a:
                    74:b0:72:e8:71:73:a7:05:e9:35:43:82:93:12:2e:
                    68:af:89:6a:f1:ff:4c:3b:a4:74:e7:0d:58:0c:48:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:5B:57:62:0C:34:86:61:10:AE:0B:4F:97:A0:64:1D:B1:C8:35
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:47:3e:02:a2:42:6f:46:dd:66:d7:d8:91:19:3e:38:91:90:
         0a:05:8b:29:b8:2f:52:29:66:60:66:e7:20:db:f2:0c:dd:7b:
         81:a5:cf:eb:28:35:87:e0:63:59:5b:05:93:61:d5:ab:46:75:
         97:60:ed:22:c9:82:ba:9b:2c:96:f8:32:a3:8c:80:4a:fb:e8:
         57:b5:30:c1:fc:bd:6a:60:82:02:e6:b1:4f:c2:37:72:c0:d8:
         7d:3b:44:cb:f1:6c:d3:87:7c:22:cd:60:e7:fc:40:9b:7b:34:
         c1:bc:8b:d4:e2:fa:74:25:9a:af:f3:1c:4c:8d:23:dc:ca:19:
         5c:19:ed:56:0b:8e:e0:d4:9a:f8:5f:d1:9a:b8:0e:bf:74:e0:
         8b:9e:88:d4:8a:72:01:56:07:2c:25:80:2a:3d:07:59:67:05:
         ea:5f:04:b0:06:94:83:cb:6b:1c:df:5d:ad:bf:b1:00:b1:be:
         6e:6f:27:41:8b:c2:a6:9f:ab:48:a5:00:49:5b:ba:36:b7:35:
         d3:a2:1d:e6:86:3f:d5:24:1a:2a:bf:ac:1d:19:60:0b:2f:27:
         ad:75:2e:84:80:aa:df:22:aa:cf:06:be:be:71:1a:5d:19:51:
         0d:bd:f0:ee:bd:52:6a:62:9e:72:e6:ef:16:13:ec:99:8c:3a:
         da:f8:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:09 2025 by rpki-client