Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File:                     SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier:          2n9YN3c8yUHF3dYF6jX1oP01vx09+7Iy2HyM7CEIQRo=
Subject key identifier:   36:4E:7A:70:52:CA:58:C4:2D:15:C8:94:11:D2:4D:81:5E:6F:DB:71
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer:       /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial:       0198D4E08CA81CF01BC2DBEA265E25CFB949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number:          1651
Signing time:             Sat 23 Aug 2025 03:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:22 +0000
Files and hashes:         1: QKjCAOKQJMjqOOmayga7OQ2UBwc.roa (hash: jA/gBvlqnMxkZ4Kz1oiT52kTp3obybgFm8vN9PxrrXM=)
                          2: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: wXDFaBwK6wGersVweBIDhrIzttJYl6Bm/8Ichh/mcto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8c:a8:1c:f0:1b:c2:db:ea:26:5e:25:cf:b9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
        Validity
            Not Before: Aug 23 03:02:22 2025 GMT
            Not After : Aug 24 03:02:22 2025 GMT
        Subject: CN=364e7a7052ca58c42d15c89411d24d815e6fdb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:a9:d9:44:3e:39:3e:1d:e6:5e:df:e1:78:
                    0d:c2:df:40:11:97:f6:2d:16:1e:e1:59:dc:01:1d:
                    4d:d5:3c:4c:e5:c1:ec:18:a9:e6:0f:20:2f:c7:ca:
                    0f:bb:69:ee:a3:2e:db:a5:1a:2b:d3:8c:c6:3e:07:
                    67:f1:6b:ec:bd:96:10:7c:76:c9:a9:9f:7c:e4:7a:
                    dd:d0:25:3b:0d:32:3f:39:20:d6:ee:9f:91:6e:ff:
                    94:77:2d:1f:d2:2e:2a:2b:d7:b1:19:48:74:80:fd:
                    c0:c2:6f:30:3b:1e:c6:7b:f5:1a:59:0f:59:47:1b:
                    f2:0b:d2:0f:f3:51:ba:6d:0c:5e:ff:9a:65:35:91:
                    98:29:2c:6c:12:ee:a7:05:6a:88:45:06:33:b0:85:
                    ad:30:3e:52:bb:83:ee:fa:7e:9b:d6:17:9b:9e:7a:
                    7a:c5:4a:4e:63:e3:1c:8e:a6:e6:24:b5:06:91:0b:
                    74:4b:21:35:52:3b:a7:b3:2c:cf:64:66:d7:7f:fe:
                    87:e1:52:4f:21:2d:2c:b8:1b:bf:5b:a6:f7:12:ac:
                    b3:92:2a:68:68:c5:1b:e1:c5:b2:d8:e0:ee:c6:8a:
                    b2:e0:d2:c9:ca:2d:a3:05:1f:84:ad:84:57:17:d6:
                    af:af:8c:2c:84:95:b2:41:58:12:2e:d3:54:73:91:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:7A:70:52:CA:58:C4:2D:15:C8:94:11:D2:4D:81:5E:6F:DB:71
            X509v3 Authority Key Identifier:
                keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:87:67:1c:9d:cb:16:6c:ca:e9:73:e5:fe:30:47:f0:fc:90:
         87:aa:97:5c:ea:5d:2a:6c:55:f5:aa:f6:df:75:d5:c1:c0:4a:
         2d:9a:7f:da:b0:47:87:24:34:b2:9d:c0:04:7a:e4:29:bf:38:
         bb:18:22:0b:09:34:46:18:57:87:10:11:b3:18:8c:63:f4:ed:
         21:9b:c5:ea:2a:78:84:38:43:8c:dd:93:92:38:11:d4:81:eb:
         e5:24:b3:93:08:87:d7:e5:67:d5:df:47:ca:2c:5e:2f:99:63:
         03:ce:dc:70:d2:9b:73:98:ba:a5:1e:20:25:e4:6e:27:13:00:
         71:fc:54:8f:81:81:0e:af:21:9d:85:89:8f:e9:6e:91:6b:d6:
         6c:b2:02:96:0e:de:65:4f:8d:7b:68:08:8b:8b:08:3e:fb:e4:
         64:f3:2e:fa:53:9c:ec:da:5f:46:b1:62:f4:f9:40:6e:26:b5:
         33:7c:92:8d:bb:bb:fa:4f:39:c0:ef:0d:c6:1c:8b:54:41:ba:
         65:25:f4:cd:c6:49:f8:4c:c4:95:5a:c9:2e:d3:cf:c9:07:f9:
         70:87:6e:07:75:95:6e:3e:46:ad:97:d2:e1:e0:c3:99:96:03:
         1d:ed:64:37:af:7f:24:f5:73:c9:08:2e:90:f4:b0:ad:32:fc:
         a2:ea:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:58 2025 by rpki-client