Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          JMXPdID5UqYIfOCi38+zm/QYaresEjQXp7+vXUqcUI4=
Subject key identifier:   8C:E5:F8:D3:F7:22:5F:D4:1C:23:EA:DF:54:3D:FF:03:51:59:9E:D0
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       0198D4A7D20470410B3CA65E492A1F7C7D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 02:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:24 +0000
Files and hashes:         1: JgzpPohbfVvMIcKTpIBaDGYyTbE.roa (hash: G+qmeF9FhBKU4LJ3ZbSw7iLKTabN9a1acVHHKbI2D6M=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: BQrEvwBWmpx6eCL5YPfd1I0gyyuFZ5yGaqtyVq0j3D4=)
                          3: WlzyMJALtky3UfCL3LeynZJn274.roa (hash: cFugyqePAm3Z5xloXfQbWqCEPWkm4mnJFuRR8A9Tn3Q=)
                          4: mn0eBW57NQIPiKHlN3VjBOCrBwM.roa (hash: Q9KukE1TFuxZdPyKM+3q4VKMJP4x9GkCYDXI40jMHbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d2:04:70:41:0b:3c:a6:5e:49:2a:1f:7c:7d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Aug 23 02:00:24 2025 GMT
            Not After : Aug 24 02:00:24 2025 GMT
        Subject: CN=8ce5f8d3f7225fd41c23eadf543dff0351599ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:6d:65:f6:37:76:92:63:5a:21:bc:e1:2a:
                    24:02:e3:30:73:0f:59:b2:80:55:39:17:74:2b:e6:
                    00:30:6e:4d:2a:e7:72:ef:86:e0:76:20:c8:5e:5a:
                    01:ed:ed:61:f1:4c:18:3a:46:ee:04:b4:52:3f:2e:
                    ae:cd:9a:d9:66:30:46:ad:78:ce:c9:3d:a5:c1:6d:
                    96:d3:87:da:2c:0f:1c:34:76:d6:a0:2f:b6:1f:fd:
                    8a:0c:eb:4c:4f:ba:e5:e2:e4:b3:0d:13:eb:d3:0b:
                    6e:39:46:78:c4:88:9a:1c:52:ad:7d:73:42:73:f1:
                    98:d3:89:75:df:e2:df:6f:0a:2c:eb:4a:17:87:ca:
                    3a:25:e1:78:10:a7:2c:f1:0e:80:61:6c:58:66:66:
                    bf:9a:9a:32:f5:42:34:02:7e:72:00:91:f9:d2:44:
                    9c:c7:b2:6c:8c:1b:28:c6:0d:4a:c9:38:67:e1:a8:
                    f2:56:c8:74:7f:dd:3e:0a:96:a2:6b:bd:d6:91:03:
                    64:a7:91:cf:13:dc:ee:07:05:b4:b2:d6:e7:4c:35:
                    3c:7f:c6:12:40:13:5d:6e:7b:59:c8:a3:eb:9e:d4:
                    83:22:f7:53:b5:f5:af:94:3f:09:f9:52:1f:df:a0:
                    9e:41:dc:f7:22:63:de:b5:ef:28:22:78:8f:ca:b7:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E5:F8:D3:F7:22:5F:D4:1C:23:EA:DF:54:3D:FF:03:51:59:9E:D0
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:73:d2:4b:7f:eb:e3:30:a3:45:1c:0e:91:a9:1c:7a:05:
         1d:7a:87:8d:d1:bb:4f:7e:7c:7b:78:8d:4e:c5:d0:3b:6b:6f:
         e0:09:cf:9d:f0:67:f5:85:a5:7f:fb:f4:d0:7d:89:ed:d4:9d:
         65:ec:15:8d:41:81:aa:74:e5:6b:db:5c:d3:4d:87:36:6f:a6:
         db:e5:08:b9:da:f9:66:55:48:94:57:7d:78:30:08:97:11:14:
         ae:fc:5e:b0:e4:ac:b6:e9:59:ee:5b:49:43:a4:ce:92:ea:0e:
         b7:31:5c:46:b7:b9:45:18:a9:00:d2:dc:2e:db:21:32:6a:48:
         a5:70:c7:58:49:2a:2c:06:68:03:19:a2:28:54:08:cb:3a:55:
         4c:0e:7c:52:b1:21:f2:d8:ca:9f:b9:f4:e2:dc:96:13:f2:2a:
         35:f5:ca:07:0b:49:41:13:1d:db:58:9f:40:e5:88:4e:db:34:
         e2:b0:d3:7f:6c:0c:31:0c:28:d7:d0:85:cc:d6:2c:e0:2e:6c:
         c1:ab:11:85:ec:b8:da:8a:0b:7c:ff:de:dd:58:64:23:87:b7:
         f4:cb:58:3c:e9:2f:0e:dd:12:a6:8f:5d:0f:b2:e0:4a:df:ee:
         3c:23:23:2b:31:4d:6f:33:17:4d:d5:0c:b5:f2:0b:c2:7b:08:
         f4:73:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:03 2025 by rpki-client