Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          CYlfLY7UjU4aLGR0ThvFXThdUZcsE4EA9r8GfC0YR6g=
Subject key identifier:   FB:F7:89:70:65:58:73:A9:26:ED:81:E2:41:75:36:06:09:D3:9C:F1
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       0198D54DDADD52C162EC15CBCC23E1531616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 05:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:45 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: RofGJolrgs0FHcw2a6EnlH9sVWSFPWjW43AuCiaKmvU=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:da:dd:52:c1:62:ec:15:cb:cc:23:e1:53:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Aug 23 05:01:45 2025 GMT
            Not After : Aug 24 05:01:45 2025 GMT
        Subject: CN=fbf78970655873a926ed81e24175360609d39cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:8c:6c:7b:f1:0f:50:1c:ca:9f:f0:f0:8d:
                    52:67:21:0f:75:2a:ba:93:04:0a:b0:8a:7f:61:bc:
                    83:ec:27:9b:b5:d2:5c:a5:16:92:93:47:c5:71:9e:
                    0e:f3:fe:be:b2:12:34:43:56:0d:23:d7:0a:2c:a6:
                    15:b7:d8:e1:34:94:5e:c5:a7:35:c6:68:3a:b2:dc:
                    b0:50:c0:f3:bf:6f:da:00:4b:3c:55:0e:3d:d8:32:
                    a1:9f:13:0c:4a:16:da:42:5c:e3:db:3f:6c:db:15:
                    d9:9f:ec:18:a6:0d:ac:ac:f5:c9:21:86:ce:04:13:
                    31:5e:b4:33:8a:9a:5c:b0:f0:1a:69:4a:b7:ba:1a:
                    3d:71:e2:e1:c7:77:d1:4c:20:3c:c1:76:23:08:10:
                    14:18:12:e1:08:05:43:a7:73:0c:13:56:cb:8a:ec:
                    1b:7d:a1:26:49:0c:1c:57:9e:56:80:27:02:95:7f:
                    b5:80:27:fa:d7:13:71:7c:64:46:b9:16:6b:d0:5e:
                    d0:90:15:86:78:fa:1d:a7:1e:ae:7c:9c:33:f1:65:
                    c5:82:df:74:51:39:22:d1:a9:87:5f:e4:ff:0e:2f:
                    4a:0d:6b:9c:d0:4c:db:1a:dd:e3:e0:4d:06:e9:ca:
                    62:76:60:dc:f2:5d:e2:25:63:d4:18:10:be:ea:ff:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:89:70:65:58:73:A9:26:ED:81:E2:41:75:36:06:09:D3:9C:F1
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:2a:1f:a5:56:b9:52:cc:77:42:09:74:14:55:ac:b7:3d:
         e7:1e:06:cb:2d:3b:d2:5f:a7:d7:3a:4a:0d:3a:60:ca:04:e4:
         39:62:6b:16:32:e6:34:46:5e:45:54:e5:cc:be:5d:9a:dd:a1:
         5c:8a:24:59:01:1a:35:ae:55:59:c2:8d:fb:ed:31:0e:1c:3e:
         23:5c:35:ed:4d:b1:79:6b:45:0d:7c:0d:38:03:45:6c:6a:87:
         20:9e:d4:c6:02:4e:5c:50:ef:e1:eb:f4:91:c5:09:aa:55:b5:
         8c:19:2c:b3:25:ce:01:88:a2:cf:44:8e:0d:71:40:19:da:8c:
         2f:4e:eb:df:47:30:5b:01:96:ab:3b:f6:e2:bd:dd:a5:d3:36:
         23:64:92:dd:85:89:93:3d:cd:90:c1:59:14:2d:f6:54:9d:98:
         9c:8f:fc:af:60:ec:2d:93:b6:60:94:ce:03:7a:9f:99:c4:a5:
         23:6d:79:a5:af:77:e8:84:47:71:6f:b0:b7:39:b6:c6:dc:b8:
         44:f1:dd:41:ca:24:a8:2d:68:70:c0:50:af:50:11:65:2e:14:
         3c:35:b2:7d:1a:45:38:23:27:b3:87:ca:18:46:f6:df:6b:a3:
         7a:e2:bb:ee:c9:51:2a:ef:12:f8:96:df:de:8e:c1:76:1a:d2:
         f1:13:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:01 2025 by rpki-client