Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
File:                     4C15LJfb1EguuBXMmk-59Uevegk.mft (raw, json)
Hash identifier:          za1XjHS+Vxr2F2siGKOWT47p/cySwdJQPn+Ybu5ukiA=
Subject key identifier:   36:E3:24:8A:75:38:99:E3:B9:23:BB:67:D5:5E:9C:8C:B2:D4:B4:82
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Certificate issuer:       /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial:       0198D65F17A283F44C3B3739ACD568EBAD06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:12 +0000
Files and hashes:         1: 4C15LJfb1EguuBXMmk-59Uevegk.crl (hash: lHxV5TYE6RA7AG8ItxeoSgDbZd1+B1fRFqGzxfZLq7M=)
                          2: cWQ3FcXIpgayQfqlmppdKMwVQXo.roa (hash: psm2EXD7JYCfSDQE9D3Rxu9Bj66wyGfDywECDIfOm7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:17:a2:83:f4:4c:3b:37:39:ac:d5:68:eb:ad:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
        Validity
            Not Before: Aug 23 10:00:12 2025 GMT
            Not After : Aug 24 10:00:12 2025 GMT
        Subject: CN=36e3248a753899e3b923bb67d55e9c8cb2d4b482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:12:63:b3:87:fe:55:2c:b8:7a:21:4a:ec:
                    a5:51:4a:7a:92:c0:8a:c5:5a:81:94:ff:98:ef:59:
                    01:1f:fa:c5:53:97:20:a7:93:99:ca:dc:5a:61:71:
                    2e:6b:ea:ce:25:ae:06:de:2a:14:56:4a:07:1d:fb:
                    54:e5:c4:45:a4:37:e8:c9:ad:69:60:a4:ce:67:95:
                    09:1d:e3:16:a5:92:47:23:ef:4d:ca:8d:0f:7d:82:
                    49:d0:38:b4:8b:df:b0:4c:f2:40:7b:f4:9c:e2:09:
                    fe:4b:e3:c4:54:41:ec:d6:bd:8e:fe:22:9b:42:7a:
                    d8:50:19:f3:da:3e:c1:c2:a6:60:76:c8:24:0e:77:
                    fc:01:a9:3d:b8:bc:f0:03:32:f9:0e:5d:db:de:c1:
                    6b:83:64:1f:a3:3e:d1:49:60:7e:78:d1:74:ba:f0:
                    9a:9c:52:45:a4:d9:d0:42:06:d8:5b:13:b0:ad:a8:
                    51:b1:4a:10:9f:73:67:fa:98:27:4c:f8:cf:51:07:
                    81:ff:a1:bc:90:e6:ef:05:28:49:44:be:e6:27:5d:
                    f6:cd:22:6e:a1:eb:3c:74:e8:53:92:07:bf:d2:44:
                    fb:3a:cf:a5:e7:86:1a:44:39:0b:36:60:ab:b0:71:
                    5d:72:65:88:c5:87:86:8b:f1:98:77:f4:db:f8:41:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:24:8A:75:38:99:E3:B9:23:BB:67:D5:5E:9C:8C:B2:D4:B4:82
            X509v3 Authority Key Identifier:
                keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:94:68:e9:19:f9:99:e4:7b:37:98:3f:ce:0d:48:c9:9a:
         e5:f1:7f:85:3f:f2:5e:4d:b6:26:e9:7b:04:3e:ab:72:94:c4:
         e3:b9:54:5f:63:ac:77:3b:e3:83:74:af:e7:ea:07:27:0a:c2:
         3d:7f:89:cc:83:5e:b9:8d:f2:96:b3:13:3d:4c:2f:b3:84:b2:
         f5:e0:e0:99:05:ff:f5:e0:26:89:da:ee:26:c4:45:e6:8a:04:
         5e:b1:d0:89:de:bd:0d:c1:12:21:35:22:80:23:15:01:ad:61:
         66:56:86:ed:d4:eb:c5:ef:d8:c5:8c:0c:96:8e:69:33:96:bf:
         d0:e7:50:57:59:25:3f:e3:82:94:f9:b9:19:7b:d7:31:c2:39:
         9d:aa:84:8d:de:4d:ac:67:f8:c6:89:9f:30:6f:20:d2:24:91:
         37:1d:fa:60:9a:a9:bb:67:a8:d4:10:5e:1f:fc:21:45:27:10:
         34:36:a6:c3:8c:6e:fb:0b:e9:3c:ab:ee:54:b9:c5:76:64:ee:
         f6:b6:fc:2c:76:31:1f:d9:30:68:86:c2:9f:91:82:28:d8:f8:
         f9:fd:64:3d:42:2a:48:30:84:35:9f:67:f4:6c:18:3b:0c:b1:
         4b:40:7f:b0:66:f2:2e:dd:e0:d5:5c:39:11:9c:50:de:20:68:
         b0:a6:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:20 2025 by rpki-client