Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          a1lq0KS1uoD9Xx7yCEaYMQxTRHVl2XRdwIhjLGDATTM=
Subject key identifier:   E8:02:70:DA:13:96:0F:40:A1:22:7A:CB:66:57:4D:10:F7:F9:49:54
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       0197CBDEB4D6B8E3795B4897FFE3580F1499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          166D
Signing time:             Wed 02 Jul 2025 16:00:59 +0000
Manifest this update:     Wed 02 Jul 2025 16:00:59 +0000
Manifest next update:     Thu 03 Jul 2025 16:00:59 +0000
Files and hashes:         1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          4: dVSHkxvBSWvx6DTAQypDnpbzncQ.roa (hash: 3ANn5h8OEmJButge1mufdkGdCeyGZ9P/cyzyOLiH0hM=)
                          5: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: 4j/DR6LyOgRE6lr7s0B4sUHRThnoqmgvQwHWnlbSufc=)
                          6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:de:b4:d6:b8:e3:79:5b:48:97:ff:e3:58:0f:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Jul  2 16:00:59 2025 GMT
            Not After : Jul  3 16:00:59 2025 GMT
        Subject: CN=e80270da13960f40a1227acb66574d10f7f94954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:66:a0:18:78:0c:75:37:a0:47:4d:6e:96:
                    7a:26:67:b6:1b:95:23:d8:0d:30:29:d9:49:58:d0:
                    0c:79:17:4d:3b:e5:37:fd:2d:ae:fc:bc:85:56:62:
                    d4:20:12:8d:58:dc:e2:c5:0f:2a:af:e8:17:6d:33:
                    69:cf:c5:76:26:6e:79:39:a9:6a:49:a3:75:51:67:
                    38:04:0f:ab:46:83:4d:e1:a6:0e:a2:cc:2c:24:5d:
                    12:9c:5c:df:8b:ad:18:4b:5d:32:0a:4c:b3:2c:2e:
                    40:d8:eb:b6:b1:d4:35:53:1c:1f:10:6a:d2:76:0b:
                    6f:b5:f3:db:86:83:04:07:e7:58:29:23:fe:5c:08:
                    d7:f5:65:2a:e0:03:1b:4a:04:d6:43:99:6b:85:e7:
                    8f:a9:b5:b4:24:1a:02:92:b3:70:c8:6d:08:36:54:
                    4d:8f:cf:ca:26:d3:48:ed:b4:e8:f3:32:48:67:d8:
                    25:fa:7a:c7:ee:3b:90:c6:a2:11:44:e3:0d:53:f5:
                    33:22:75:23:9b:df:92:65:87:fb:22:4f:ee:20:bf:
                    92:93:e8:05:b4:27:cf:5a:f3:85:96:f2:84:1e:0a:
                    3b:1e:38:0a:89:ea:9a:0d:ba:c5:60:2a:66:79:dc:
                    54:e8:b5:2e:69:4a:0e:4c:aa:ab:86:10:17:79:10:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:70:DA:13:96:0F:40:A1:22:7A:CB:66:57:4D:10:F7:F9:49:54
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:cf:d1:98:3a:74:c1:06:ae:68:79:e7:80:71:03:df:98:
         45:7d:be:17:44:c4:71:82:e6:78:c3:4a:8e:c4:34:33:30:f9:
         7d:7c:d1:67:a7:ef:4b:37:9b:19:23:e3:e3:2e:2a:59:64:bd:
         6f:44:db:7f:f3:b4:a5:2b:ae:79:4c:61:a2:29:73:ab:fa:6b:
         d6:55:e7:81:3f:d5:dd:eb:36:2e:34:ef:63:d7:f2:07:64:4f:
         62:68:7a:a1:12:41:de:f4:c2:20:4f:f0:ce:e8:b9:5b:09:05:
         4e:34:63:da:8f:4a:fc:27:1b:dc:d7:ad:89:75:37:b7:97:50:
         b0:84:41:88:e2:2c:f1:93:dc:8b:c6:46:e1:fd:37:96:77:f6:
         4b:33:e4:7f:4c:55:b5:ca:55:94:b0:44:3f:1f:5f:a1:eb:36:
         9a:51:5d:7b:37:55:5a:78:52:14:7b:7a:a3:9e:e1:82:b5:96:
         bf:74:ea:af:d0:e9:88:35:80:34:12:95:b1:fe:8a:01:8b:d2:
         1e:f0:fa:74:48:b6:cd:a7:60:63:aa:af:27:ea:33:3a:18:ed:
         98:af:07:06:55:ae:ee:67:ad:ba:e8:70:42:35:c3:44:e7:df:
         79:a9:18:95:d1:40:56:2f:0a:80:2f:33:e5:59:c1:b7:b8:9d:
         e7:d7:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:07:35 2025 by rpki-client