Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File:                     JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier:          2FYnxLXHgrOqbg1MaCOAJkurkkj4fgPLdWEMe7DQS/s=
Subject key identifier:   2A:E6:E6:3D:87:D5:62:FF:28:B9:6D:E8:0C:03:9C:3C:F3:A3:4C:3B
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer:       /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial:       0198D4DFEE08CD853EA76A97F5AEF79C2526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:41 +0000
Files and hashes:         1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: S4EJY8kjfwb9EckOpKuvXzFf+KQJkifesqcR8Zuhz+A=)
                          2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
                          3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ee:08:cd:85:3e:a7:6a:97:f5:ae:f7:9c:25:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
        Validity
            Not Before: Aug 23 03:01:41 2025 GMT
            Not After : Aug 24 03:01:41 2025 GMT
        Subject: CN=2ae6e63d87d562ff28b96de80c039c3cf3a34c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:12:15:76:2e:8e:cb:7c:74:52:d0:4b:f9:
                    92:7f:57:94:fa:5d:af:51:b0:f0:02:b3:75:b5:5c:
                    fa:62:5d:a8:ea:90:dd:39:6c:ce:b6:46:70:27:46:
                    9f:87:eb:6a:f9:7b:d8:1f:42:c6:09:7d:9d:02:6a:
                    4a:f1:ef:3e:af:90:ac:9f:6d:38:fb:b5:ed:91:07:
                    e9:e3:f3:42:71:e6:f8:82:97:98:a5:95:45:f9:6b:
                    52:f2:23:86:e1:c2:56:b9:09:12:f4:79:35:14:4d:
                    01:ce:79:56:b7:98:ec:67:37:e2:d4:31:ff:57:82:
                    2b:b0:11:41:c3:72:bd:49:29:46:05:93:35:a4:7c:
                    59:46:35:2c:d5:ec:c4:ec:bd:24:f5:68:52:11:12:
                    c8:1f:7a:35:15:1b:e3:87:51:ac:a3:78:d0:1a:86:
                    97:80:1c:57:6e:8d:97:7d:89:b5:7a:a9:e5:48:45:
                    b0:d1:ba:ce:eb:57:a3:e6:af:0a:af:71:af:54:cb:
                    79:f7:f2:a4:20:55:c3:ed:04:e5:a7:9a:a5:5b:cf:
                    61:2d:91:b1:e5:9b:c2:c1:a7:08:26:e1:41:42:df:
                    a0:b4:97:8e:f7:7a:3a:85:0e:7d:8e:8e:7e:9d:7d:
                    ea:51:11:d6:fa:d9:38:5f:8d:30:9b:d5:a7:59:6e:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:E6:3D:87:D5:62:FF:28:B9:6D:E8:0C:03:9C:3C:F3:A3:4C:3B
            X509v3 Authority Key Identifier:
                keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:8f:36:ab:7f:8b:ab:7d:81:26:14:65:52:27:69:16:1a:
         48:13:8e:e4:1e:88:47:b4:9e:29:5e:53:24:92:01:42:bd:ef:
         7f:22:3c:d0:9b:fc:93:7b:9e:25:a9:76:39:a0:5a:c2:0f:bc:
         eb:ac:64:1d:1f:40:b2:59:11:7f:6d:50:61:d7:67:74:ef:74:
         43:10:b9:62:45:48:dd:0e:fe:63:e0:82:28:81:7b:88:ab:64:
         5d:69:03:a4:01:65:ca:a2:03:b4:72:fa:de:7c:8b:be:20:3a:
         6f:00:8f:fa:81:1e:f7:de:f8:c4:88:b3:64:b3:3f:aa:85:b2:
         87:73:5f:85:2f:e9:2a:26:51:50:20:17:58:fd:b9:b1:19:1d:
         19:fa:77:46:e1:8e:a5:b5:7b:aa:74:2c:e8:8d:8e:5f:82:26:
         f2:f2:d5:3d:30:a0:b6:99:ca:13:22:ea:75:21:5f:bf:b5:ec:
         c0:dd:e2:f5:c8:a9:4c:ea:e3:8f:56:72:ce:fd:7b:93:7e:f8:
         50:1f:dc:b7:42:a3:40:40:4d:c2:8f:c3:c2:23:5a:84:92:3c:
         61:b4:f1:4f:fb:a9:fc:4e:45:2c:60:58:7b:79:2b:7c:ee:3a:
         4b:38:18:ce:e0:0f:26:fe:c9:a4:2b:68:d5:a5:6a:6f:51:2f:
         16:0a:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:36 2025 by rpki-client