Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
File:                     hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json)
Hash identifier:          yxVcg+eZQ1bzdDWz9ogiXQGo4ODwwe46080mmcQG6eM=
Subject key identifier:   F5:EB:BF:A8:59:12:8A:D8:BC:C0:98:A8:5D:1F:EB:97:7B:AC:F9:79
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Certificate issuer:       /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial:       0198D6CD78F053267D52C2BA9EE764DF6022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 12:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:46 +0000
Files and hashes:         1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=)
                          2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: GBRGa3nNAk4Froqw26DGLMbLJl+wT0oUJmty9ibg96Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:78:f0:53:26:7d:52:c2:ba:9e:e7:64:df:60:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
        Validity
            Not Before: Aug 23 12:00:46 2025 GMT
            Not After : Aug 24 12:00:46 2025 GMT
        Subject: CN=f5ebbfa859128ad8bcc098a85d1feb977bacf979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:b8:0f:1d:bb:76:92:36:cb:a7:b6:5b:ac:
                    4c:6b:fe:5e:8b:12:43:dd:fe:69:6b:b1:d5:2e:3a:
                    36:5a:70:b9:33:33:f4:17:41:19:29:07:8a:f9:5a:
                    37:ba:db:fb:1c:51:97:09:28:59:40:61:18:ae:d1:
                    c0:c1:fa:60:99:a2:49:2c:68:34:3d:d2:98:f2:9e:
                    af:d7:55:d1:39:36:7d:94:19:72:46:85:7c:02:0c:
                    dc:da:69:95:46:95:ca:31:ac:04:75:42:2e:a2:3d:
                    59:54:8d:34:b2:b0:2b:9f:e7:fa:98:71:a6:61:16:
                    7c:0c:ce:7c:49:6b:fa:b8:3f:c1:df:4d:0d:9b:b6:
                    41:f2:87:9b:32:60:c1:df:ce:ac:82:76:af:0a:62:
                    c6:4f:cc:d9:55:de:1f:91:b5:ab:bc:8d:dd:b3:c9:
                    f2:4d:93:e8:8d:60:23:74:a4:77:05:65:47:95:6d:
                    42:b0:30:5e:35:2c:3e:68:ab:85:6f:4c:e2:de:2b:
                    6a:12:e6:fb:fc:51:e8:70:4f:c7:f4:e7:8f:d5:d3:
                    22:cb:c8:d8:06:80:34:7f:75:ac:42:f6:8c:4d:f5:
                    92:eb:a6:aa:86:46:ac:db:51:be:bf:bc:08:3a:79:
                    b1:69:3a:ff:15:ca:bd:71:3b:cf:bf:e2:28:9f:72:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:BF:A8:59:12:8A:D8:BC:C0:98:A8:5D:1F:EB:97:7B:AC:F9:79
            X509v3 Authority Key Identifier:
                keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:68:2f:52:2b:8c:bc:d6:b5:12:f4:3f:5a:44:62:f6:a8:
         0e:0f:7e:d1:51:0b:21:87:6b:01:1b:39:e7:92:1c:4a:70:65:
         b2:a1:57:58:8b:7e:61:f9:c7:75:c7:62:32:3f:f1:c8:e3:19:
         71:fd:c5:89:0b:28:ce:48:21:c6:19:49:42:9d:18:88:23:dc:
         57:39:22:5b:56:d4:9e:23:ad:09:ce:20:70:73:22:d6:68:c5:
         9f:09:4f:20:f5:4c:36:05:36:a7:e7:b4:4b:71:45:d5:5d:82:
         3f:6c:ca:bd:5e:7b:5d:e4:72:4d:66:43:3b:6c:b1:9b:ee:7d:
         44:a5:5d:44:d1:fb:c8:6e:85:07:93:e7:01:fe:9d:91:aa:c1:
         85:bf:c9:de:7e:52:5b:fe:c9:f2:4b:e5:24:c9:d7:28:1a:a8:
         dd:99:ea:61:2c:aa:ac:0e:0e:8e:a5:d1:48:5a:da:ce:52:6a:
         4c:88:ce:70:7d:d5:94:2b:6e:3e:88:f1:ba:71:e1:ea:ff:10:
         c8:5c:7e:32:dc:82:2d:ad:52:3c:53:4c:da:16:bd:23:6b:39:
         96:47:66:31:76:59:4d:2a:da:27:b3:86:3b:18:e3:98:d4:00:
         12:cb:3e:79:c0:56:86:59:15:c1:3a:23:02:d3:40:75:75:92:
         ed:a6:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:52 2025 by rpki-client