Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          Ndd3hSkWQxb7WNRBmC31bpRHbuz03wyK4PoqVVad2Uo=
Subject key identifier:   44:D3:3D:18:18:5C:D2:84:31:A4:5D:EE:C1:9D:5A:FA:80:FF:B4:70
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       0198D850310F5158E945D37DF593D507BD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 19:03:10 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:10 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:10 +0000
Files and hashes:         1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: t2zB2WzdBWPWzL298d11cN3K0cdSO1qIdoie3XP6evs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:31:0f:51:58:e9:45:d3:7d:f5:93:d5:07:bd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: Aug 23 19:03:10 2025 GMT
            Not After : Aug 24 19:03:10 2025 GMT
        Subject: CN=44d33d18185cd28431a45deec19d5afa80ffb470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:b6:51:61:de:17:cd:05:d7:4f:e6:2e:f8:
                    1a:ec:88:89:d0:bd:7f:cb:37:ae:bf:75:88:1a:12:
                    83:12:d5:de:05:0f:75:ca:5a:80:9f:78:99:25:2b:
                    cf:db:a5:00:44:7f:b0:8c:9b:0c:39:09:ef:bd:54:
                    dd:fb:c8:c9:16:3f:43:2c:b5:90:7c:ee:23:4d:f1:
                    bf:e5:1a:03:5c:bb:bd:13:06:1c:9b:31:bc:89:f3:
                    53:55:d5:5b:a1:4c:49:4e:c1:9c:d0:98:22:86:2f:
                    ad:94:0d:4e:00:79:5e:3b:cf:f8:a9:41:57:9d:5a:
                    51:1b:64:5d:8b:ff:bc:85:c3:1a:96:21:cf:5b:c9:
                    4e:9d:84:7f:7e:31:2a:56:4b:e4:6d:12:c4:9e:44:
                    99:4d:c5:e0:18:b2:27:6f:73:e4:9f:60:0b:81:2e:
                    6f:9d:30:2f:39:44:e2:aa:3c:a0:02:ad:2a:a7:cd:
                    da:5a:1b:ae:3e:bb:53:58:e1:6b:09:83:7f:dd:e4:
                    3b:9b:6c:74:af:c7:64:f4:08:64:2e:ce:a6:05:49:
                    63:3e:3f:6e:f3:38:3d:4f:fc:83:4e:43:21:21:3e:
                    8d:ea:9b:7f:1e:3b:cb:a8:00:25:94:15:03:12:9a:
                    91:da:d9:4d:eb:dc:88:e2:dd:2f:13:e5:d7:79:fe:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:3D:18:18:5C:D2:84:31:A4:5D:EE:C1:9D:5A:FA:80:FF:B4:70
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:0e:cb:b3:ac:cd:f4:75:0f:96:e4:c6:b8:11:d3:6b:38:
         42:a5:22:4d:2a:85:28:3b:e8:51:d5:ce:e0:c5:ef:29:98:ed:
         d2:b7:0a:5d:fe:8d:11:9a:0f:a5:e4:a3:15:92:a5:66:62:32:
         89:c5:b7:46:be:8c:5e:ff:21:6b:3d:15:d2:7b:1b:93:7e:7c:
         5e:cc:b8:2b:23:c8:84:cb:b7:8d:e7:69:29:c6:65:b0:a6:75:
         c3:bc:03:12:ac:e0:b5:5c:31:10:b2:06:7a:6d:60:70:3f:42:
         64:da:05:18:a4:7d:51:9c:b8:02:93:a8:ee:6a:fb:94:02:19:
         cb:2c:7c:cf:9f:30:5d:d9:9d:f6:6c:04:e5:95:3a:9a:21:45:
         8c:01:4a:e5:70:b6:cd:c6:a3:ec:09:cb:43:e3:4f:54:84:f9:
         be:93:cb:b6:a2:19:a6:fc:c6:c4:1e:99:ca:73:f8:43:f7:da:
         d4:4f:92:e0:7b:75:39:94:73:b5:f8:29:87:b2:f5:f8:7e:ce:
         53:32:fb:a7:49:06:39:c0:9d:ab:6b:74:6c:b7:29:e8:d3:25:
         f6:f6:0c:fc:b3:bc:e3:2e:49:b7:77:4a:be:fa:c3:4f:9c:f9:
         b3:38:0c:58:10:2f:99:c8:37:87:c4:1f:d6:e1:64:96:f5:62:
         ac:9f:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:06 2025 by rpki-client