Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File:                     qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier:          Tt/JyLYUr3YCDveyRf91H+vrRSgFWjHPe+XASVj9Dbw=
Subject key identifier:   52:66:2E:58:F4:1F:A6:F7:F1:5B:B8:C7:22:86:0A:05:35:6B:FE:09
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer:       /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial:       0198D583C5D5093A54BA4B2E81EB1F70CBFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:39 +0000
Files and hashes:         1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
                          2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: 4I3PO6a1u4Q0sgy/zNnO0eKKvuWHfN20TyMcSHipVM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c5:d5:09:3a:54:ba:4b:2e:81:eb:1f:70:cb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
        Validity
            Not Before: Aug 23 06:00:39 2025 GMT
            Not After : Aug 24 06:00:39 2025 GMT
        Subject: CN=52662e58f41fa6f7f15bb8c722860a05356bfe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:ed:1f:a6:85:07:e6:25:0b:da:02:87:52:
                    48:81:25:f4:68:e3:f5:2b:a5:74:aa:a3:8f:0a:43:
                    2a:98:af:ab:06:9c:ad:2a:c0:38:9b:30:d8:a8:d2:
                    43:ab:d4:07:95:15:4b:6d:eb:fb:69:ae:26:d8:07:
                    94:10:2d:a8:af:42:5e:54:ac:5e:bd:5c:f0:05:c7:
                    4c:db:eb:bc:af:6f:ca:a3:4f:45:33:23:9e:df:75:
                    ac:a1:95:20:c3:fe:12:00:b7:ff:19:b6:85:b6:fd:
                    71:fd:b7:43:48:17:c2:0f:c3:e7:09:ab:2b:1f:f3:
                    a8:7c:89:3b:d4:0b:c9:d9:67:c3:50:cc:6d:3e:16:
                    b3:47:6b:5c:b9:e0:4a:3f:f2:59:39:e3:99:a9:13:
                    96:c9:3f:e4:dc:10:68:16:87:28:fb:1e:ce:fd:a9:
                    f6:40:0a:58:3f:ac:be:ac:46:2c:b1:38:26:8a:39:
                    cd:08:80:f5:58:08:ca:be:23:8f:a7:71:e2:e8:38:
                    0b:df:0c:cf:5c:47:22:8e:f5:4e:7f:2c:b6:32:08:
                    4a:1f:ab:fb:60:3f:6c:c4:a5:dd:dc:86:26:e7:fb:
                    bc:d9:ff:18:20:b2:58:63:68:47:61:60:c8:6b:b1:
                    1a:ca:28:39:f2:a0:4e:43:7a:c9:7d:6a:2c:d3:48:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:2E:58:F4:1F:A6:F7:F1:5B:B8:C7:22:86:0A:05:35:6B:FE:09
            X509v3 Authority Key Identifier:
                keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:08:85:7f:68:c6:a7:14:74:cb:d1:d0:18:1c:94:d3:cb:eb:
         ce:8c:f0:f2:4a:5e:32:fe:81:18:f7:8e:c7:d4:0f:13:4a:6e:
         e0:7a:97:9e:28:e5:fb:1d:53:ab:86:36:2a:8e:76:41:1f:a0:
         a7:2a:bf:c7:ea:53:a1:14:0a:ce:0e:c9:f4:17:6d:45:e8:60:
         fa:74:1d:fa:6a:54:62:33:40:7d:8d:ab:77:e1:84:ed:dc:94:
         8a:d1:5c:d8:de:3f:8b:cb:c4:82:a6:9f:b6:dc:7d:57:72:3c:
         d1:45:95:63:3c:50:53:61:41:98:eb:f3:1a:51:7f:f6:17:f9:
         96:fb:a3:1a:43:05:b6:b1:80:57:9e:d7:4a:f7:6e:cc:87:56:
         b1:89:0b:2f:26:33:31:f9:41:08:14:e9:dd:bf:37:1a:44:31:
         eb:e0:2c:e7:ee:58:4f:25:af:cb:75:e4:5a:ec:6f:6f:4b:73:
         9f:f9:ec:87:9e:c0:fe:26:8b:de:ff:06:95:4b:06:41:04:80:
         f2:13:bb:d8:aa:9c:aa:9b:33:8a:f2:19:27:df:36:6b:b6:ff:
         fa:19:fe:91:3c:a3:b4:bb:a0:89:23:42:9c:8c:7f:6a:2f:27:
         6a:73:13:f0:7f:90:3d:09:17:ea:27:c2:bb:9d:68:fa:2d:e3:
         9b:87:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:31 2025 by rpki-client