Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          lBJixJ3IHheXyO0yDI1CN57i4YDRZ6F/ClYO2EQzKog=
Subject key identifier:   52:6B:C7:58:6E:70:CA:E0:1E:B6:2B:F4:E9:3A:73:E2:7E:E2:E0:D7
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       0198D65FF421752B0CAE67240E4F509A6374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 10:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:09 +0000
Files and hashes:         1: 5juFOi12IlXtCkf2DtKHvFjQ7Jk.roa (hash: ww1Ap6yHRZv0yJoUDsvGuz2Z305tTs+DxDhKtXDBfFg=)
                          2: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (hash: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=)
                          3: PtfamAIKc-wbnus8-5afpUvZHGU.roa (hash: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=)
                          4: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (hash: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=)
                          5: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: eic3H7En1BAxCM+s1BM9yVCcbF4auYgVqSPleKQuPKU=)
                          6: rS6BwZvo3GfqDYx4UHFP382Hars.roa (hash: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f4:21:75:2b:0c:ae:67:24:0e:4f:50:9a:63:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Aug 23 10:01:09 2025 GMT
            Not After : Aug 24 10:01:09 2025 GMT
        Subject: CN=526bc7586e70cae01eb62bf4e93a73e27ee2e0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:29:c1:c5:c1:b3:9d:40:fd:2d:28:1b:a3:
                    9d:e8:d0:16:6d:a8:6f:c9:65:ee:16:91:f6:c8:96:
                    f9:8c:b4:9a:c6:ce:c0:f1:d0:36:1d:99:75:17:ba:
                    7e:f0:9b:06:56:8c:f0:f0:56:32:58:80:b5:e2:38:
                    fc:69:d5:8b:64:0b:85:97:e6:4e:33:aa:5e:b4:ce:
                    70:01:3b:89:2f:20:bb:ef:d5:e8:f0:5d:37:f3:d9:
                    0c:5b:b2:f9:b3:29:fa:96:b3:76:17:f9:d4:fe:8a:
                    f2:66:40:ef:43:be:1c:d4:d1:5c:85:b8:cf:fb:43:
                    ec:37:9f:4c:b7:f4:1a:23:fe:19:4c:b7:ce:27:fb:
                    6e:d8:f8:9f:ed:33:5e:df:ec:df:50:92:9e:8d:39:
                    ed:68:0f:17:65:49:b7:13:2a:fc:00:64:3a:a2:7b:
                    87:43:74:1e:16:22:ae:fb:aa:1a:96:62:e5:86:ad:
                    ce:2a:66:8b:b0:26:a2:46:03:19:55:b8:e2:92:4d:
                    f2:69:e6:16:1d:ea:62:af:3b:c2:34:a2:c8:71:43:
                    85:71:01:a1:e6:9a:8d:b0:11:ed:61:65:1a:13:24:
                    82:14:e0:5c:7b:26:eb:b6:16:a9:c7:7b:28:87:a0:
                    5e:21:31:11:1e:23:5f:d4:9c:09:c2:d7:f8:89:30:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:C7:58:6E:70:CA:E0:1E:B6:2B:F4:E9:3A:73:E2:7E:E2:E0:D7
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3a:f3:74:6f:d9:52:2a:7c:f4:67:b4:04:f1:34:a2:65:7c:
         b8:5d:d8:e3:61:38:d4:fb:43:7c:18:30:a0:b0:67:df:13:fb:
         68:47:72:e4:75:e9:b6:b3:63:11:fa:2c:35:98:a8:00:b6:7e:
         0e:35:3f:9d:fd:3b:b2:46:61:ff:b7:16:0a:b9:2b:14:b3:18:
         8a:32:c7:f3:7c:23:71:f2:5b:a4:82:44:ff:a2:d6:33:ef:e7:
         29:a9:49:54:b2:14:c7:8d:32:28:73:b9:e7:7d:ce:4a:3b:ff:
         14:6f:42:68:3c:99:f4:b6:07:cc:b0:51:87:e4:71:31:20:61:
         30:69:b3:82:f1:05:86:b3:d0:03:bf:ca:ef:43:7c:0e:a8:77:
         02:66:6d:77:be:35:c0:c6:31:e4:c2:f2:33:07:c8:a8:2c:03:
         5b:eb:2e:96:83:d4:a6:f4:d8:98:72:43:c9:95:7e:55:e0:f6:
         6b:3a:a5:0a:48:72:93:78:dd:b1:c5:29:b6:13:53:26:80:90:
         e5:dc:05:80:ac:66:76:1e:06:4f:de:c6:13:65:52:44:58:a5:
         10:2e:f8:da:ad:e9:7d:64:eb:10:73:89:68:aa:68:e7:60:72:
         13:d4:a2:58:f0:01:99:32:61:d6:1d:c8:fb:a2:2b:e2:96:8b:
         6a:ff:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:13 2025 by rpki-client