Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File:                     eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier:          7rYfQCriq2EY07fTP+DNlNl0WhN5UH3asvEhTXkSB5w=
Subject key identifier:   00:99:24:1F:D8:3D:55:58:58:9C:5E:89:C1:F5:51:85:AD:83:A5:8A
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer:       /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial:       0198D54E6EA253D2B697DDCA4B4D3BED3814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:23 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:23 +0000
Files and hashes:         1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
                          2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: muRZ1F6w/WYcpg1+LOe3NM42T4AYQkVVzg/9MGHIct8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:6e:a2:53:d2:b6:97:dd:ca:4b:4d:3b:ed:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
        Validity
            Not Before: Aug 23 05:02:23 2025 GMT
            Not After : Aug 24 05:02:23 2025 GMT
        Subject: CN=0099241fd83d5558589c5e89c1f55185ad83a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:9c:24:1d:24:08:70:af:cc:c8:ea:74:07:
                    ec:92:81:e7:7a:d9:d4:52:f8:02:4f:07:a1:89:2f:
                    1c:40:03:c2:35:da:73:a0:0c:8c:d9:be:07:50:eb:
                    12:63:b2:18:b3:2d:21:68:78:23:6c:09:14:67:0a:
                    40:5d:e8:30:5e:ef:31:45:94:4a:c8:f0:47:45:cb:
                    db:e7:c5:9a:e1:d6:75:eb:1a:86:50:6a:33:f4:f8:
                    55:de:cd:46:24:22:31:70:79:a4:b8:f0:df:20:24:
                    2d:3d:8d:f9:eb:53:b6:df:47:7c:ae:38:d1:6b:50:
                    3b:6f:17:de:a4:f5:4a:db:eb:7c:65:2c:b5:ec:33:
                    53:b4:ba:72:11:13:7a:d8:da:df:2a:e4:b2:7f:27:
                    ea:24:48:c7:4f:f7:db:aa:4b:54:ce:7b:06:f6:89:
                    94:de:fa:38:42:5d:a5:72:d9:4a:2f:3f:61:de:54:
                    ca:30:bd:42:0e:5a:d5:c3:6e:28:85:46:0b:1e:56:
                    b6:1d:c2:af:c8:b5:d9:df:b8:e2:7e:db:43:b5:5e:
                    fd:5d:da:42:2d:22:4c:2b:c8:5f:09:f1:99:d2:c8:
                    50:ad:e2:2e:d7:b8:25:b5:a3:02:ed:41:29:da:24:
                    b6:4b:c8:41:b0:f7:c0:06:a8:da:8f:f1:92:32:93:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:24:1F:D8:3D:55:58:58:9C:5E:89:C1:F5:51:85:AD:83:A5:8A
            X509v3 Authority Key Identifier:
                keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:f1:bb:b1:7a:e4:94:7c:e8:0a:f8:7f:62:be:51:d2:27:
         db:81:55:b2:c9:d1:8c:81:65:31:1a:70:3b:14:69:55:74:ec:
         3a:bf:c4:c9:dc:7e:51:27:da:54:60:81:35:65:8f:8c:5b:40:
         3e:c5:90:ef:05:88:c0:c8:a7:db:35:65:7f:a6:00:c8:c6:26:
         fe:55:41:78:45:5b:5c:ec:a8:9f:7b:af:d7:64:df:ee:0f:58:
         e5:fc:08:8b:bd:7a:2b:f2:41:c3:25:a4:77:c4:71:c5:b2:86:
         af:43:04:7a:e6:97:19:38:f8:4e:db:ee:99:98:0e:bd:ab:d5:
         2b:24:63:83:be:9b:46:84:a6:e6:15:f6:72:bd:d4:73:db:a2:
         b4:aa:8a:ba:0d:2b:db:de:2d:0c:46:2b:97:1b:0f:f7:d7:9c:
         93:a0:32:e0:0f:f2:3b:ec:ea:3f:80:5c:f0:47:12:0c:b9:a6:
         a1:31:a4:e4:e2:e9:57:16:01:2d:1d:c8:46:8b:c2:f4:a9:c6:
         b5:8a:57:04:d5:cc:a1:21:4f:6b:43:5d:26:80:ee:2b:95:32:
         53:90:55:2f:72:b0:fc:c9:95:e4:ec:44:c8:d6:c8:55:f2:63:
         ff:b9:ae:64:71:f9:40:40:e6:cf:1b:02:22:25:2c:66:91:82:
         eb:1a:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:55 2025 by rpki-client