Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File:                     hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier:          VUh1DLg7QGx0D0ohGpFYk/txaXQKyqd8oNOdEnix7iQ=
Subject key identifier:   4D:13:9C:13:FD:9D:97:93:4E:2A:18:FC:63:44:DF:C4:62:1F:F4:AF
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer:       /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial:       0198D515710A82E334F62C22373203D5B4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:08 +0000
Files and hashes:         1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
                          2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: Z5KDJdeDqnZd0Ga+wpggL8ruzMfjFv9jW7Aqtm/G4M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:71:0a:82:e3:34:f6:2c:22:37:32:03:d5:b4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
        Validity
            Not Before: Aug 23 04:00:08 2025 GMT
            Not After : Aug 24 04:00:08 2025 GMT
        Subject: CN=4d139c13fd9d97934e2a18fc6344dfc4621ff4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:4a:e1:2e:2e:ca:99:f8:4a:51:11:e8:c8:
                    34:a2:67:d0:a2:16:87:c1:9d:78:af:92:5a:3a:66:
                    2d:31:b2:10:73:16:5e:f5:90:bb:7f:87:02:e1:d0:
                    12:cf:1d:b2:1b:32:3e:4e:88:df:63:d5:3a:f9:70:
                    83:62:10:06:8c:e3:00:89:60:d8:94:44:38:e5:6f:
                    e5:ad:7f:53:96:79:f5:4d:c6:a5:e6:f7:e0:b9:18:
                    2e:73:62:70:e8:8c:f6:7c:fc:68:d4:01:8c:6e:0a:
                    bd:cf:a0:c2:c5:61:a6:6d:47:54:4c:3c:4e:e9:47:
                    10:3b:f9:f2:ff:eb:49:17:e4:66:45:51:ad:33:88:
                    cb:7b:b7:c7:6d:21:31:ce:f1:b1:c9:65:79:83:b4:
                    86:01:62:6e:85:43:b4:fe:f9:cc:91:66:a9:6c:d6:
                    3c:09:3e:01:d1:a5:e9:63:c0:9e:08:c0:d1:3f:55:
                    13:f9:7c:48:33:52:46:59:c1:42:b9:ee:0b:7d:60:
                    09:90:76:51:ab:75:f4:69:8f:2e:70:9a:ea:d4:b6:
                    16:0c:ba:2e:f8:1a:9e:34:c0:fe:56:48:d6:e2:74:
                    68:cd:36:3d:85:58:97:07:fc:e6:62:fc:d9:e4:c8:
                    25:a3:8e:23:7e:3b:96:a0:b9:2f:fd:02:d6:4f:34:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:9C:13:FD:9D:97:93:4E:2A:18:FC:63:44:DF:C4:62:1F:F4:AF
            X509v3 Authority Key Identifier:
                keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:40:db:61:1e:9f:ed:0a:54:54:d0:a3:dd:78:fa:7f:3b:62:
         18:05:77:f9:4a:39:1b:1e:12:fa:1f:19:5a:e8:1b:5c:0b:cd:
         9c:5b:75:bd:ff:cc:50:71:78:76:cf:29:df:88:02:83:79:a8:
         41:7a:db:84:c2:02:2a:b9:84:e0:ca:5c:53:f5:75:e0:f7:8c:
         51:c1:ed:a6:16:c6:ca:bf:cf:df:aa:0a:bb:be:09:14:63:8a:
         07:5c:05:b8:2c:6e:95:19:87:e7:97:84:9c:08:8e:d0:e9:fb:
         3e:a9:86:f5:e5:32:0d:b4:a0:40:ab:fb:d3:58:8b:a2:1a:f4:
         29:98:3c:e3:62:81:6d:5d:36:7c:88:32:61:26:6e:93:c6:d7:
         f8:dd:28:f2:19:27:53:74:b9:8d:aa:73:ad:c9:6c:38:d0:4f:
         ec:ab:ce:b6:3e:05:b4:ad:ac:c6:0b:95:3d:31:0f:3d:73:7e:
         71:11:bd:ac:9f:10:dd:5d:13:25:2c:de:54:50:ff:93:94:09:
         74:e0:30:95:ed:2e:cf:f5:f4:d5:85:54:52:d4:c8:b4:f3:d7:
         3d:b1:75:82:e1:2d:80:73:40:39:13:6e:cb:58:05:7d:a4:5d:
         98:c1:40:e0:9d:44:a7:14:2f:3b:47:f5:d6:48:17:8d:2c:50:
         ce:56:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:25 2025 by rpki-client