Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          nI7ss+2vz/5TFhSYZSux83DB+1s/YlmABPfms74+PrQ=
Subject key identifier:   7B:37:2E:04:B6:12:F8:28:88:82:0A:A7:03:B9:35:44:7D:48:43:B3
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       0198D661479989BE60A0DDDC1905810AA99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:36 +0000
Files and hashes:         1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: f7ICzhbYurKGZoIZ/I+9P+bNsgm/JJ8QlhMRTsxXCsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:47:99:89:be:60:a0:dd:dc:19:05:81:0a:a9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Aug 23 10:02:36 2025 GMT
            Not After : Aug 24 10:02:36 2025 GMT
        Subject: CN=7b372e04b612f82888820aa703b935447d4843b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:20:36:56:af:f7:c4:c6:e2:d2:dc:a1:0d:
                    ac:3d:e9:40:be:ef:73:cf:ea:e7:be:18:b6:93:83:
                    28:2d:4f:29:75:67:3b:59:5e:56:cc:ba:d5:c0:d9:
                    40:7a:49:08:38:1c:3c:91:98:37:09:ba:41:73:9b:
                    e9:aa:6d:d4:0a:31:3c:a1:85:03:7b:0c:43:60:61:
                    6a:f8:63:58:90:9d:e2:d1:54:9b:1c:0c:7a:fd:9f:
                    06:cb:65:8e:ad:71:2a:0f:3b:81:66:eb:ba:1a:e4:
                    fc:1e:92:a1:c1:67:92:b9:27:bb:ae:fd:87:33:af:
                    36:27:2d:6d:57:c6:10:5f:86:d7:7d:fb:96:68:23:
                    0b:58:21:9e:e1:06:61:df:30:50:9b:2c:3f:18:64:
                    5b:8d:83:49:aa:d3:d6:ad:5b:84:ef:2d:af:7d:6d:
                    db:b0:3b:d6:ba:8a:be:78:79:56:83:b8:5c:81:da:
                    35:5d:cc:0a:54:c4:17:8e:fc:d1:ef:10:1f:18:bc:
                    c1:fa:92:e8:ec:ae:54:f5:f3:54:5f:e7:83:ad:7a:
                    36:35:fd:26:a1:27:38:b9:b4:f0:28:87:ba:f1:a3:
                    ff:2a:c8:49:1a:24:01:8f:21:41:39:cd:b1:cf:e6:
                    82:39:27:54:5c:21:3d:99:98:2c:ff:6b:e5:70:f3:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:2E:04:B6:12:F8:28:88:82:0A:A7:03:B9:35:44:7D:48:43:B3
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8a:bf:68:81:6d:db:dd:a5:c5:3a:62:0a:e7:af:08:f8:fc:
         ff:d1:5c:37:3f:ed:aa:d5:dc:23:f4:ae:72:df:8d:55:3f:7c:
         17:07:b4:b5:84:b5:f3:4e:98:04:e4:b6:66:f7:e5:50:36:dd:
         a4:38:be:1a:b1:71:e4:51:09:2b:e4:9c:70:db:75:e2:5c:f5:
         3c:3f:89:80:3f:81:e5:f5:d4:5b:88:ae:48:dd:dd:66:2f:cb:
         7d:68:d7:18:47:2c:3a:c7:96:98:09:75:ea:d8:7f:f1:a2:94:
         0b:94:48:7e:97:f8:41:a8:34:58:03:aa:ca:bc:e0:e8:4e:a4:
         b5:05:d7:02:be:95:31:73:8d:14:63:cf:b5:aa:54:9c:3d:e1:
         ae:9f:a1:b7:0a:25:66:71:83:f8:4b:be:71:95:b3:a6:06:1d:
         0b:58:d7:4c:30:30:ae:9b:9b:91:24:58:38:54:7d:f0:6f:71:
         4a:c9:bd:0a:5c:fe:e6:7f:3b:f6:b2:4b:8f:d4:4d:9e:99:77:
         05:6d:35:f6:bf:14:30:55:00:52:b4:0c:20:db:ad:53:25:59:
         fc:5a:ec:b0:95:e4:12:f5:60:f3:94:3f:5c:3e:7b:75:a9:84:
         73:e2:7c:b3:ce:38:b0:dc:5e:3c:15:f7:bf:97:0c:b7:a7:22:
         04:2d:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:29 2025 by rpki-client