Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File:                     Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier:          fGqLyzbFHZlOPG4uNcEm643w5rDGyQL1NoYBOPKnJRs=
Subject key identifier:   44:F3:A1:FC:CB:70:9E:50:70:36:5C:23:70:3A:33:1C:56:16:50:3E
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       0198D6CDA6A859525E1FAEA65264FE4F2C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 12:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:58 +0000
Files and hashes:         1: 3FbaZR0zxfx0WA80YXG85ZDcCq4.roa (hash: qryijX9WTlELqR/vPu/COvNZoSxzH7bA72VNuMKufdo=)
                          2: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=)
                          3: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=)
                          4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: ipD5RtYwj7uwRhqTLue00YSIORhMasvdefWJyee1uYU=)
                          5: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=)
                          6: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:a6:a8:59:52:5e:1f:ae:a6:52:64:fe:4f:2c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Aug 23 12:00:58 2025 GMT
            Not After : Aug 24 12:00:58 2025 GMT
        Subject: CN=44f3a1fccb709e5070365c23703a331c5616503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:f2:a0:21:72:c7:77:f0:f7:36:07:67:51:
                    43:84:57:1b:aa:dd:28:b9:d9:90:da:ac:43:4b:20:
                    ea:1f:f3:80:59:a2:46:bc:04:33:b2:cb:58:b6:7c:
                    54:b6:aa:da:00:55:7e:a9:4b:b2:96:2c:5a:b5:85:
                    56:4e:04:6a:b2:83:f4:bc:4b:28:91:26:eb:16:ba:
                    0c:a1:34:76:56:83:fd:bf:20:ec:9d:cc:45:5f:4b:
                    be:6e:9e:d8:61:51:bd:8c:ac:75:73:ad:1b:fb:cc:
                    44:e4:40:2c:6f:d0:33:25:db:3c:91:4c:48:66:41:
                    63:68:45:9c:a5:9f:9d:ff:31:ef:9f:7c:48:32:49:
                    66:79:58:68:50:0f:bc:43:48:85:31:52:05:9e:83:
                    8f:31:75:5d:75:c9:3d:2a:65:d9:bc:f5:1c:72:2f:
                    3c:17:b1:a5:0a:67:7d:94:29:f3:40:f8:4b:50:80:
                    3e:1f:f0:10:7f:1a:30:85:08:8e:f3:12:a5:86:a1:
                    41:c3:9e:13:61:9b:f2:05:dc:2c:bd:52:29:49:e5:
                    b0:ab:00:69:f7:80:1b:6e:7b:ed:0c:db:24:bb:44:
                    68:c8:77:21:e9:04:b2:8d:65:f3:7e:9d:67:6f:bb:
                    a8:2e:1a:62:de:1b:de:ee:a7:70:cd:13:65:9a:a9:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:A1:FC:CB:70:9E:50:70:36:5C:23:70:3A:33:1C:56:16:50:3E
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ad:f3:c5:fa:4f:d4:37:f9:c3:9e:f5:f5:ae:90:40:66:a5:
         b5:b9:de:53:7b:3e:55:95:94:b9:bd:88:02:2c:60:87:ee:45:
         63:41:e6:0a:b6:52:b2:cd:3a:f7:c9:32:da:5b:f4:2c:84:2c:
         54:cd:47:9c:68:27:ca:9e:6b:f7:09:a6:cc:7f:48:a2:8a:17:
         e7:1f:14:ce:51:40:a6:01:bc:75:59:42:3e:c5:50:53:56:d2:
         e7:ce:19:21:f3:c6:30:e9:e2:0d:37:2d:c3:ff:3b:45:21:95:
         16:cf:71:f5:92:70:4e:88:0d:3d:99:4f:45:bd:0b:88:c8:ee:
         6e:e7:85:07:f3:0b:c6:ad:a5:90:e7:f1:9e:ea:b0:5d:28:e5:
         94:40:eb:71:1f:eb:d6:14:ff:d0:68:b9:76:2a:7c:2a:7b:44:
         18:35:17:15:e9:a9:70:8e:5d:a3:31:f0:c2:2f:45:c8:6b:cb:
         2a:e2:51:e8:83:d9:5d:f1:b5:0b:d2:9e:7d:14:75:ca:30:13:
         52:86:f2:ab:b7:a5:d6:97:6d:f7:43:21:bb:20:fb:78:e6:de:
         20:14:68:8d:2c:bf:6f:1d:97:b4:e3:f3:a8:c9:14:5e:e2:e6:
         fc:25:b1:e1:aa:6b:90:48:e1:9f:ec:12:66:63:56:b9:f7:7f:
         4a:73:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:31 2025 by rpki-client