Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File:                     m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier:          3T+r7lYnPjpxkpw2M+meoqb2FQLjda72LD7Ad49/QzY=
Subject key identifier:   00:9D:31:14:61:94:A5:A1:6D:D6:AC:EC:33:CD:F1:23:DB:33:9D:65
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer:       /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial:       0198D70584CBF59336FDBD1B3D6148302D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 13:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 13:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:59 +0000
Files and hashes:         1: FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa (hash: SxzdVdUSQKrcckNUFu+lpTFeygIkg6UP1Y+6mqUGLxE=)
                          2: JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa (hash: l/gL9lI2eMfRXxgl8LBJmFmTtW4VYwoOIblpJwQi6UM=)
                          3: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: aNgNJm6ZNa0Dwl2mHk7wZqsbjM5gPMeaagZy8rrH1EA=)
                          4: tKyKZjLEDoku_61jkuUZJsA6mh0.roa (hash: mS9ELNBChswUREefPfJwkVLPPBkzapMb0K1Iwkj0ZXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:84:cb:f5:93:36:fd:bd:1b:3d:61:48:30:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
        Validity
            Not Before: Aug 23 13:01:59 2025 GMT
            Not After : Aug 24 13:01:59 2025 GMT
        Subject: CN=009d31146194a5a16dd6acec33cdf123db339d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:62:10:54:38:2f:bf:8e:5f:0b:a6:d6:12:
                    13:b5:4a:ec:13:cc:12:cc:1b:34:bc:a2:27:f6:24:
                    db:70:0e:af:00:09:53:5a:e7:8f:04:46:8a:71:94:
                    d8:ba:50:fc:7d:60:a6:06:1d:9c:23:55:11:ef:0f:
                    84:e4:96:52:8f:88:99:ad:94:6d:ab:85:6a:87:ca:
                    54:43:04:21:a4:1a:4a:dd:af:b1:9b:52:f5:d6:7e:
                    b7:e9:84:55:e2:88:fa:21:70:9b:25:7e:8f:0c:6f:
                    ad:53:83:72:d1:72:11:93:3d:5e:91:b5:3e:9a:26:
                    79:42:98:c1:e4:f1:4c:d6:82:cc:2d:d9:f6:6b:c5:
                    32:97:34:a5:d8:c4:46:d9:9d:61:ed:29:17:4c:58:
                    53:21:21:0c:95:05:b9:e5:70:15:94:7c:a2:b4:12:
                    dc:03:e7:25:9a:91:71:66:6f:51:0b:18:76:b0:7b:
                    a4:25:6d:c9:4e:98:3e:84:2e:e9:82:42:59:bb:7b:
                    57:81:8e:55:fb:32:35:de:1e:1d:25:43:66:38:25:
                    ee:f8:16:6b:f0:c4:44:19:a6:10:18:88:54:37:83:
                    ec:0e:34:08:fd:8c:b4:ec:82:9f:6c:eb:91:07:4e:
                    6d:86:b9:67:48:e6:60:ec:cd:92:95:52:c8:0c:d7:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9D:31:14:61:94:A5:A1:6D:D6:AC:EC:33:CD:F1:23:DB:33:9D:65
            X509v3 Authority Key Identifier:
                keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:de:6d:b8:da:63:78:31:39:37:d5:b6:71:82:1c:97:b4:2c:
         d2:f4:2b:c4:f6:86:24:27:01:87:c2:f6:99:34:cc:d8:89:1f:
         a3:72:f3:92:04:b6:12:a6:75:55:e3:d8:16:3f:91:c4:88:77:
         37:ec:da:5b:62:fc:b4:41:40:cd:e4:28:4b:23:a2:2a:2c:e3:
         dd:39:8a:50:f3:4a:2c:b6:61:d0:ec:92:00:b0:4e:19:b9:ee:
         d9:81:4b:64:ac:92:2e:5c:b3:8a:16:4a:57:91:6a:22:00:dd:
         a3:5e:ec:da:8c:4a:84:4f:9d:56:ea:54:da:e5:04:54:59:6c:
         21:a3:1f:25:d7:c0:15:66:f2:ef:85:a5:a4:7b:22:0e:a1:8e:
         75:62:93:a7:d0:80:f9:1b:ac:38:a7:5f:a1:c0:a2:ca:74:d8:
         2c:11:14:8c:1a:9e:c6:5a:42:5b:07:33:87:75:02:f0:86:16:
         d5:b1:80:5e:8b:6e:60:04:ea:55:5b:f7:1c:10:b8:14:af:d9:
         aa:90:04:48:61:2b:13:11:48:8b:56:95:31:fc:02:74:ec:37:
         06:43:10:e9:e4:31:65:36:76:48:e4:c7:a0:03:b4:14:db:b5:
         62:7b:a2:15:22:ae:ab:25:b3:be:bb:8e:a0:96:95:e6:27:a4:
         02:27:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:43 2025 by rpki-client