Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File:                     ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier:          YZStWW8xx4eP4qwqSPq2nwzUmbBW2jryX1oOFkQxB50=
Subject key identifier:   C5:97:14:E8:AF:69:7A:F3:13:09:CA:8E:FC:B0:54:90:C1:3A:C7:9E
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer:       /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial:       0198D73B7C6D114D5E3A638F2918E7DC31A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 14:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:56 +0000
Files and hashes:         1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
                          2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: yNcw8JbkW1c5nBkEAKyp9lKr74W+10fMC+xW1SFIn/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:7c:6d:11:4d:5e:3a:63:8f:29:18:e7:dc:31:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
        Validity
            Not Before: Aug 23 14:00:56 2025 GMT
            Not After : Aug 24 14:00:56 2025 GMT
        Subject: CN=c59714e8af697af31309ca8efcb05490c13ac79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:3a:27:31:f3:c2:de:bc:4c:2e:eb:25:28:
                    78:f5:63:fa:c4:b3:98:64:ac:ef:0b:d5:6f:01:4b:
                    c9:4d:42:9f:5f:9e:15:11:24:df:08:83:c8:dc:90:
                    47:d0:4f:fe:0d:d4:73:09:7c:4a:20:c5:73:5e:06:
                    d2:26:86:b9:36:04:fc:a3:09:dd:2d:6c:1f:2b:70:
                    1d:a1:41:aa:11:d0:75:d3:ae:91:36:e1:09:85:51:
                    83:c3:d3:4c:79:1b:20:c1:d3:d5:ef:c2:bc:64:2c:
                    f4:4d:31:5f:ff:98:16:4f:ef:50:63:38:73:c2:29:
                    75:02:f9:19:11:68:53:cf:44:f0:d1:f7:0a:8c:99:
                    19:14:52:fd:5f:bc:05:6a:89:ca:3a:95:e4:d9:b2:
                    f1:d5:83:cd:57:9c:e4:89:ad:53:14:e1:b8:a5:43:
                    2b:5e:6d:d5:11:74:ca:75:e2:2f:72:08:e7:d7:0d:
                    c4:1a:e5:0b:d5:2b:8b:bf:ea:ce:b2:e3:8d:77:17:
                    fe:77:c7:62:a0:26:69:86:d8:d8:5f:72:23:a2:f5:
                    f6:c8:7b:d3:9f:04:8e:3e:34:1b:2a:6f:3a:27:6d:
                    1e:49:aa:98:51:a3:cc:51:1e:f5:62:87:a0:92:22:
                    65:86:10:cc:e4:40:c4:cd:b0:3e:7b:e8:d2:a9:bc:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:14:E8:AF:69:7A:F3:13:09:CA:8E:FC:B0:54:90:C1:3A:C7:9E
            X509v3 Authority Key Identifier:
                keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:e3:5d:27:b5:f7:7a:97:f7:6e:0d:c0:ae:8f:f7:47:9d:
         82:83:db:7f:31:f9:8a:fa:b1:e4:e6:65:27:47:b4:25:cf:41:
         d6:0c:aa:59:93:a8:b7:ee:8e:5e:e8:f6:ad:9a:ad:14:75:b2:
         46:3b:58:b1:6e:41:e9:11:e5:b7:90:84:40:71:3d:5f:f5:b2:
         31:2d:bb:60:dd:5a:be:52:2f:12:56:ce:49:5d:41:a9:14:92:
         a2:07:71:cd:46:d1:7b:d7:94:56:86:b5:35:18:0a:79:01:16:
         63:26:b1:37:b6:c9:0d:bc:06:1a:0b:df:68:8a:e8:cf:4e:7b:
         03:76:e0:4f:5e:cd:8f:17:fb:1a:b8:8c:d6:8b:a8:79:36:0c:
         14:3f:56:e0:34:ce:6c:37:cc:dc:c2:d8:f3:9b:70:55:9d:53:
         9a:de:0d:bb:70:b6:73:2c:fd:56:0c:e0:4a:dc:3a:0e:4a:40:
         2e:74:af:e3:94:74:72:83:87:5d:d7:ff:8c:00:ad:4b:2e:87:
         00:73:a1:54:b7:64:80:87:19:09:2d:23:2b:22:1a:87:e7:20:
         a8:4e:47:ee:c3:c9:01:42:52:76:bc:6a:41:2e:4b:32:f4:10:
         c8:e3:57:1f:13:6d:01:68:75:48:9b:7c:05:68:7b:82:06:ac:
         4f:ff:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:44 2025 by rpki-client