Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File:                     cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier:          G9anaCkrV4QQOXXV7qGcv2hLTAWTvaC7YXtJtZ0jATc=
Subject key identifier:   64:AA:FB:D3:B8:34:F6:A0:92:5E:9C:BB:73:2E:73:6E:AB:73:E7:A9
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer:       /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial:       0198D4E0B6C5EC257695B3C0EAF11B08E8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:33 +0000
Files and hashes:         1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: lQ4N8l8ZubwRjkpG6FGU5QpLDdpIuNK1M/pb3Hhqj74=)
                          2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b6:c5:ec:25:76:95:b3:c0:ea:f1:1b:08:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
        Validity
            Not Before: Aug 23 03:02:33 2025 GMT
            Not After : Aug 24 03:02:33 2025 GMT
        Subject: CN=64aafbd3b834f6a0925e9cbb732e736eab73e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:08:b2:41:f8:d2:50:c4:59:49:01:32:1e:
                    79:37:a0:e2:45:d2:a9:79:ae:95:de:4d:90:ce:c6:
                    6a:8a:26:0f:58:c5:f7:35:65:46:e8:c3:8c:8d:01:
                    45:ef:26:fa:b1:6c:70:84:93:f3:42:29:95:49:31:
                    bb:c1:d5:0a:f4:89:e8:41:53:da:55:79:2a:bc:25:
                    18:3c:25:7b:67:77:a0:2f:d4:7d:35:bd:ac:e3:cb:
                    9f:a6:86:2d:d4:b4:1a:8e:c4:20:40:17:49:7d:11:
                    50:40:fc:70:08:be:34:d3:a7:d5:32:f0:b3:df:49:
                    81:0a:38:67:50:43:5e:ec:01:59:0f:50:db:ab:15:
                    68:f6:8f:6e:16:b2:f1:0a:11:fa:ed:c5:19:08:b3:
                    a2:3e:b4:9a:1b:00:d7:58:2c:c7:8b:78:7e:d9:36:
                    44:c9:ca:c3:bb:35:96:97:2b:9e:00:62:de:01:91:
                    35:cd:1a:03:a7:df:37:44:ab:5e:49:83:25:3b:6f:
                    89:24:5c:e7:9b:e8:72:0f:2f:b8:23:5b:de:dd:4c:
                    03:79:18:b5:c0:3e:83:e3:cc:00:3f:c3:03:f7:e8:
                    82:68:f8:88:c1:84:01:49:91:c0:ff:67:b4:1e:f3:
                    fa:7c:d5:6f:41:c1:ab:56:66:34:51:06:62:a2:f2:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:FB:D3:B8:34:F6:A0:92:5E:9C:BB:73:2E:73:6E:AB:73:E7:A9
            X509v3 Authority Key Identifier:
                keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:5b:14:33:8c:2c:57:43:c0:5c:d5:75:97:61:95:5b:ee:
         10:69:04:ff:4a:2b:70:37:47:c0:e4:ad:a0:96:ab:81:9c:7f:
         3c:d5:f4:27:da:dc:1c:41:47:27:9c:c9:69:dc:d6:01:ee:c0:
         74:20:3b:0c:5e:46:b9:bd:7e:71:44:eb:1c:bc:33:ce:49:a1:
         fe:f5:ef:18:36:25:ee:7b:2f:3c:be:68:fe:6b:b3:8d:b8:3e:
         18:79:fa:87:7a:8b:09:a3:a4:62:d7:9a:bb:54:01:73:fc:c6:
         d4:c9:51:c1:6d:cc:59:f5:4c:a2:90:9a:d8:11:72:62:75:f8:
         8c:c3:58:69:14:cf:dc:4c:ab:50:fd:9d:78:bc:4b:e2:bf:9b:
         d6:78:99:5c:41:db:7f:d8:c5:20:76:16:8e:18:57:f9:e1:0b:
         72:18:ed:f6:81:e0:5c:9e:3a:ac:43:b1:0b:f5:c6:cf:e9:19:
         c0:e7:77:85:75:5d:2d:8e:96:3d:01:55:85:52:e8:08:9e:61:
         08:4b:aa:d7:4a:b5:62:12:60:7e:87:c4:3a:7f:7a:53:73:e6:
         ba:ee:20:44:69:c6:2c:0a:bc:1c:5e:95:20:c9:6e:3a:c5:9e:
         27:ab:82:31:20:49:39:96:3f:01:0b:eb:85:11:75:e8:06:2f:
         d9:57:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:43 2025 by rpki-client