Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          lYtEyUWuroQr5woeDfcTXsrbXoSk+/tS2pRTkoI9mIk=
Subject key identifier:   5D:55:43:F7:5A:5D:14:7B:F9:EC:22:E8:1B:E3:B5:B7:86:BA:65:06
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       0198D69814192EC7C35638A76562F4A653FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 11:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:27 +0000
Files and hashes:         1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: Jd5GR043l8zIgyzlaKPAaMfsN/G9lKzHGqlXAAUF0us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:14:19:2e:c7:c3:56:38:a7:65:62:f4:a6:53:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Aug 23 11:02:27 2025 GMT
            Not After : Aug 24 11:02:27 2025 GMT
        Subject: CN=5d5543f75a5d147bf9ec22e81be3b5b786ba6506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:27:d5:d9:a2:96:80:56:cb:cc:9f:14:d1:
                    28:a1:04:0a:ac:86:08:ad:07:cb:96:10:5b:4f:be:
                    36:df:58:cf:06:1d:1f:09:fa:fc:5e:36:2f:ba:50:
                    ed:a4:db:f1:d6:d0:4b:8c:72:f2:a7:d2:83:e5:ce:
                    68:17:fa:d5:c4:da:e9:54:76:c3:4c:b9:21:8f:35:
                    78:86:61:1e:a6:bb:36:73:81:40:17:1e:be:42:57:
                    15:e8:b8:b9:3e:1c:5d:25:88:87:af:a9:e3:3f:cd:
                    4c:09:50:8c:88:87:18:4a:e1:27:1d:1b:99:c0:50:
                    54:72:98:cd:e2:55:52:44:0f:6c:2a:85:18:28:56:
                    6f:29:5c:43:b0:55:f3:e6:c4:9d:2d:55:96:76:fc:
                    93:2e:0d:96:23:8c:88:e6:6d:53:14:25:f0:84:52:
                    8d:b9:53:36:3a:f1:5d:a4:28:2c:fd:92:90:3e:d2:
                    a0:b7:f8:a7:2a:82:e5:8b:77:93:91:ad:ee:bb:3b:
                    7d:1b:c8:98:1c:4e:23:78:67:51:da:91:a1:71:70:
                    15:3d:55:26:a4:65:27:9d:b9:bc:7d:15:5a:88:b8:
                    78:d7:22:e8:73:6a:eb:25:4f:28:8c:8b:d9:86:4b:
                    9d:88:17:f6:be:f9:1c:30:a4:ff:13:11:c3:a3:e7:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:43:F7:5A:5D:14:7B:F9:EC:22:E8:1B:E3:B5:B7:86:BA:65:06
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:70:90:b8:3c:a6:ae:d8:76:94:6e:83:8a:ea:a8:d5:2d:b6:
         1f:c1:11:c8:20:10:88:46:24:b6:8a:e3:23:ca:c5:05:ab:af:
         2a:70:ab:f3:3d:b7:cb:a4:56:e2:b0:9a:f5:e6:30:d6:1b:eb:
         86:51:46:fd:0b:00:66:e3:7e:05:b4:0d:1a:ad:20:da:9e:17:
         36:04:44:4d:a5:f4:65:ba:fe:d5:05:a9:d0:0a:20:6a:86:c9:
         11:b6:f3:e6:e8:42:b2:26:18:97:e8:97:05:77:42:6f:24:2e:
         ac:b2:1a:ed:5c:70:89:d9:eb:d3:69:45:21:f8:6e:61:2f:86:
         a4:99:f0:7d:26:ec:71:1d:9f:c7:83:8d:63:01:c6:0c:c8:27:
         47:9e:74:db:96:bb:fc:47:6d:fb:dd:0b:6a:43:71:a1:e3:6e:
         d4:4e:15:7b:4c:f7:5a:dd:21:fd:19:07:65:51:12:cc:76:cf:
         44:30:0b:43:41:3e:73:73:91:03:db:5b:bf:e7:e6:6e:26:7e:
         e0:cc:56:96:2a:4e:98:4d:03:9b:aa:01:6e:dc:2c:32:e0:72:
         a9:83:fd:9e:23:de:93:e8:4d:10:77:ff:8a:b2:78:9b:f5:d9:
         20:df:c3:d6:c6:c2:11:a1:1d:02:83:14:13:e1:3c:43:92:dc:
         74:5b:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:12 2025 by rpki-client