Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File:                     flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier:          7085NrFZ7BAYT79xCBxyDFKFns4uhzqwEJyB3lQxA7k=
Subject key identifier:   8E:FD:33:33:08:70:ED:39:A3:8A:FC:C5:0A:46:BE:D9:C9:A5:83:B9
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer:       /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial:       0198D62989DA122562385338A1F728110AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 09:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:43 +0000
Files and hashes:         1: 0JqunmMBjEmd1A-HgkE4JsYwvvg.roa (hash: S7pQ47ggIC3jlvfHhUSFNbRX+v6ZCpTaVmICGgx3JLA=)
                          2: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
                          3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: gqG8wybdg2vlr6qbqwY/Ohsb89RQA4Izj5S5o0/CDe4=)
                          4: vd2pBoJBZhf5P4J8dtMG91g6Jt4.roa (hash: rtCqRJvAHr3CK7C32hUZPO+hSIBq5AQ/a8C+367rDXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:89:da:12:25:62:38:53:38:a1:f7:28:11:0a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
        Validity
            Not Before: Aug 23 09:01:43 2025 GMT
            Not After : Aug 24 09:01:43 2025 GMT
        Subject: CN=8efd33330870ed39a38afcc50a46bed9c9a583b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:6a:51:ff:e0:08:c8:2f:8a:3f:4d:e1:b6:
                    08:69:06:66:cf:5c:64:d8:47:37:d6:4a:83:5f:ef:
                    d9:50:46:7b:fe:8b:67:e5:9a:88:9c:6b:29:40:dd:
                    16:eb:f3:32:b1:00:12:9c:eb:02:24:0b:6b:d0:39:
                    2b:f5:b6:02:f2:df:53:93:43:e6:f4:7d:ef:bb:90:
                    75:25:46:1a:26:fe:54:da:bd:06:f0:c4:6b:4e:85:
                    44:bd:31:ee:8e:98:7f:ef:6b:11:57:10:7d:f7:b2:
                    27:42:2f:97:58:f3:1f:cc:4b:9e:a5:e8:1b:63:e9:
                    3a:90:b6:e9:7f:cf:07:ea:dd:b8:4e:9e:81:b4:cf:
                    a1:5b:cf:23:ca:b2:a8:20:ae:54:e8:1d:43:6b:05:
                    90:19:cc:77:c5:f9:f9:7f:31:62:dc:ef:69:e7:fd:
                    20:d7:23:dc:14:cd:23:c7:51:ae:19:23:dc:a0:99:
                    ec:fa:c6:4a:35:54:bd:f2:6c:2d:72:44:13:9a:b3:
                    c6:76:4e:d3:3c:71:25:c9:61:eb:46:4c:fe:1c:df:
                    1f:01:c4:5c:ef:d3:71:65:7d:81:d7:eb:79:ba:ee:
                    98:e5:04:bb:a3:26:98:85:3b:29:d1:52:60:e8:0b:
                    5a:af:e0:18:82:f7:c1:df:88:e7:c8:22:8e:5b:80:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FD:33:33:08:70:ED:39:A3:8A:FC:C5:0A:46:BE:D9:C9:A5:83:B9
            X509v3 Authority Key Identifier:
                keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:6f:51:51:6b:9f:04:57:8b:1d:d2:30:97:88:aa:72:c3:
         b0:af:81:db:51:49:77:4c:fc:f9:a6:02:85:07:e9:b8:c2:64:
         fc:76:08:25:34:d1:ab:52:c3:9a:f6:fe:6e:3f:ca:14:6e:d6:
         8b:a3:81:aa:18:a2:80:de:27:36:bf:c0:2d:1e:90:b9:9f:ff:
         d3:ff:35:74:b0:ae:9e:2f:67:a6:24:80:b6:b7:cf:5f:01:02:
         bc:37:b2:72:ef:f3:83:b3:22:62:b7:cb:1c:84:83:21:31:c0:
         55:a8:33:f3:e4:57:cf:6f:94:79:41:dc:be:ba:2a:fa:d4:c5:
         d3:63:75:de:89:8b:74:6b:b4:b4:e7:e2:26:83:ec:02:e4:14:
         b0:1f:74:e6:4a:16:1e:eb:78:8b:fc:25:dd:55:45:c8:6f:df:
         e2:6f:94:f0:51:3b:23:54:d4:32:c9:9c:0b:b0:24:5a:a3:d2:
         56:46:1e:ec:50:34:a3:56:1b:c3:58:83:f1:d1:95:b7:0a:8a:
         97:34:1e:28:28:9c:98:2f:ff:b0:7d:a7:3a:96:4d:43:a5:da:
         44:b7:b6:ac:d6:e3:bb:88:59:9e:01:0a:e0:bb:28:ef:0d:35:
         90:61:36:98:eb:95:f2:a9:ff:35:e6:24:8f:5e:d6:b1:70:2a:
         86:f6:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:13 2025 by rpki-client