Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
File:                     bss_s76ozI4249p9nEcEm_xv-xQ.mft (raw, json)
Hash identifier:          tuP6Le/XklvoQcqHJqyccRYTsCtr3MhN+ezb3urs3Mg=
Subject key identifier:   5A:00:18:B3:91:94:7F:2D:42:DE:AD:73:1F:30:1C:8B:6C:3E:C4:EC
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Certificate issuer:       /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial:       0198D5BBF3EA01D1EC266CD9C2A3837C42DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:01 +0000
Files and hashes:         1: HpcoPHWXelsEc83A5lrjHQcz4ck.roa (hash: z5HkkcDJsILTMlUiHF/hxZcjE8u956W+aTccBwWVcDI=)
                          2: KaQ1cbhsU-_BkoECZGtKOYFMwp4.roa (hash: l5AAqJ6KrxG8q9wOC3vocpvn5IVvSVAwWKvgrRqMXhc=)
                          3: SA-FzbdtGCCG9QKC4S4YHJSWsmI.roa (hash: PGidG7Ka16kE9y3JRE1oncEZXH6tKTIKybnjJfvB2js=)
                          4: bss_s76ozI4249p9nEcEm_xv-xQ.crl (hash: 3GZNcPZsn4CrK08IzBmY+uMSkeHVE4aXc5mCMXduI/Y=)
                          5: uipqeN76722FPmspleIyOjfn3Zk.roa (hash: gwJEBBmEVVFOjb4Xj28XR2GIE/hpooHskPB8J+P99Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f3:ea:01:d1:ec:26:6c:d9:c2:a3:83:7c:42:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
        Validity
            Not Before: Aug 23 07:02:01 2025 GMT
            Not After : Aug 24 07:02:01 2025 GMT
        Subject: CN=5a0018b391947f2d42dead731f301c8b6c3ec4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:93:61:e1:8c:9d:18:e7:ee:a2:27:49:41:
                    56:f2:53:76:d7:e5:a5:69:03:42:07:a8:87:2a:eb:
                    b8:ea:58:7c:89:88:c1:37:b8:52:09:1d:7a:35:69:
                    7f:70:23:8d:b2:1f:1d:dd:f9:da:78:ff:56:33:8e:
                    e1:c1:79:ca:d2:fa:54:81:c7:af:97:93:d3:33:9b:
                    7b:4d:a3:f1:5e:93:21:60:3b:de:a0:1d:44:60:75:
                    1b:65:b1:23:3f:d8:d3:5a:34:9c:7d:d5:63:64:e9:
                    9b:d3:d9:83:6e:e8:28:c9:76:a2:71:9d:f1:77:4d:
                    f6:af:a7:6f:60:fd:9e:f9:e8:ee:c7:8e:1c:07:48:
                    be:d2:15:39:3d:ed:b9:be:92:27:26:86:02:17:85:
                    a4:f2:cd:bc:5d:2c:0f:27:a4:72:a8:75:5b:b0:d6:
                    d8:49:2d:f6:83:0b:d0:98:55:cc:28:5f:4b:7a:2f:
                    09:ea:79:d3:6a:65:21:de:58:2d:46:4a:1f:58:e2:
                    c7:2a:a0:d7:27:0f:e2:c8:26:63:45:38:41:72:14:
                    e3:bc:fe:dc:cd:4c:4d:57:c2:82:b6:2e:d1:cb:2a:
                    70:ae:be:81:28:7c:82:b6:79:dc:fd:86:b4:79:82:
                    a4:02:b7:cf:16:f1:09:3c:01:e9:ba:54:2b:af:c9:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:00:18:B3:91:94:7F:2D:42:DE:AD:73:1F:30:1C:8B:6C:3E:C4:EC
            X509v3 Authority Key Identifier:
                keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:2b:86:b7:ce:26:3c:66:14:a6:fd:68:8a:cd:5f:6c:b6:
         17:a5:b0:00:1a:5a:45:d8:9c:b6:5f:7e:98:f2:b0:ba:72:6d:
         dd:67:60:05:35:b5:14:9b:c8:fc:ef:03:a9:58:14:0e:99:11:
         fc:81:9d:b0:78:b8:49:af:20:47:7f:26:c8:5b:28:62:ac:a3:
         2a:0f:b2:78:b7:0c:f0:57:d0:fe:1a:e1:3e:56:bc:d2:83:af:
         8e:b2:84:24:44:e2:67:9b:f1:b1:2b:64:aa:3f:93:f6:58:11:
         5d:3f:f2:81:4d:00:75:03:c0:7e:59:d1:c4:6f:f8:2a:2e:da:
         5d:41:ba:35:04:66:be:0f:1c:73:f6:ec:37:f3:09:dc:85:ac:
         13:38:40:24:a8:3b:3e:ec:de:57:1a:14:c6:31:98:7e:34:45:
         e3:4f:58:0e:5c:a0:d8:23:23:2b:93:64:5c:2e:5a:ca:a2:54:
         9d:8b:18:06:43:cc:d5:8e:8e:9d:c6:b8:d4:8c:9c:f6:5b:bb:
         38:92:2f:73:bf:24:b8:9f:21:57:e7:9c:56:d7:90:ca:5e:3b:
         10:22:a2:2c:ed:06:95:4a:7f:f4:09:3f:1f:65:ff:d0:65:ae:
         7d:d1:82:2f:c6:d2:3f:b4:3f:76:fe:d7:f2:a5:b5:a3:96:5f:
         64:a1:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:48 2025 by rpki-client