Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File:                     0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier:          SI0DLAYtvYtNbmBauWGnmMeTKrJUDabv74dTAIMJAxw=
Subject key identifier:   8E:6E:E5:53:12:B9:B3:BC:DF:B3:38:AD:06:6E:F4:88:1A:5C:32:4B
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer:       /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial:       0198D516365F91D582B93A1A444E6C349F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:59 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:59 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:59 +0000
Files and hashes:         1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: /vPMitkOZIPt0j0a14OvWi69x1bWX6JS9E9e5T3W+qc=)
                          2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:36:5f:91:d5:82:b9:3a:1a:44:4e:6c:34:9f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
        Validity
            Not Before: Aug 23 04:00:59 2025 GMT
            Not After : Aug 24 04:00:59 2025 GMT
        Subject: CN=8e6ee55312b9b3bcdfb338ad066ef4881a5c324b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:33:af:52:30:15:71:07:cf:83:cd:8b:f8:
                    91:34:3f:fd:06:43:e6:7c:8a:86:52:6d:2f:bd:2a:
                    e4:52:45:a2:06:3e:68:9e:3b:0a:52:ba:b9:a3:a2:
                    8e:6c:cf:95:be:b7:11:b4:2d:c1:b7:6f:7c:a7:c8:
                    ab:48:db:24:6b:56:a7:33:30:d3:81:86:4a:0b:b7:
                    5a:fc:40:e5:54:ec:5c:8b:04:91:af:92:5c:56:ba:
                    78:10:64:60:66:59:f3:39:02:7c:f5:d9:6a:d4:9b:
                    37:85:96:6f:df:d1:e8:d2:d7:b7:72:ae:83:f5:3f:
                    ca:72:49:2a:19:46:72:f8:53:18:91:42:47:ac:3f:
                    29:47:f2:91:b9:2d:f9:d7:6d:db:71:9c:ee:84:16:
                    4f:72:bc:92:b3:5d:b3:a1:59:6b:e2:ce:34:c1:21:
                    57:06:38:57:c3:01:9c:2f:71:32:45:31:76:13:fb:
                    6c:62:14:66:a2:a3:97:65:17:7f:d3:5d:04:85:12:
                    f7:fb:5a:b8:9f:5b:54:c9:6d:52:05:50:b3:61:9e:
                    84:64:4d:0f:7a:9f:60:e3:ca:87:b4:73:65:84:91:
                    4c:85:e1:68:45:cd:fd:8d:e7:01:85:20:23:1c:22:
                    de:23:2d:aa:aa:cc:22:b7:01:3e:f7:b7:7a:35:a7:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6E:E5:53:12:B9:B3:BC:DF:B3:38:AD:06:6E:F4:88:1A:5C:32:4B
            X509v3 Authority Key Identifier:
                keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:8c:b2:a8:72:59:75:eb:a2:cf:38:6d:27:72:8b:ba:a7:
         f3:60:4c:ff:b1:3a:06:d7:21:b3:a8:78:c8:34:35:f2:ac:f8:
         74:fd:2b:3c:5e:74:c0:30:5d:c1:7a:5e:f8:78:ab:f5:90:f8:
         b0:66:eb:00:55:fa:bc:5e:63:c8:9d:2d:b7:b3:68:cf:b7:1e:
         56:f7:83:de:ed:5d:75:9f:8f:f0:fb:6d:28:fc:f6:41:12:71:
         49:ff:82:90:ab:e5:19:4c:b9:35:96:bd:2f:f6:9a:71:ae:54:
         2a:c9:a0:d6:a2:7d:0a:9f:89:a8:17:23:b2:5d:92:70:dd:01:
         64:1a:83:2e:a5:00:40:37:a2:3c:c6:b8:94:3c:6e:b8:8d:db:
         4f:a0:73:b1:cd:d5:4b:02:1f:23:1e:b5:5e:89:76:fd:ea:7d:
         29:82:5f:a0:46:ca:ac:f1:ab:6a:7c:bd:72:ee:0f:0d:ec:de:
         83:2b:74:33:20:03:3b:8c:67:78:27:a7:46:cf:ac:51:38:df:
         8e:96:47:bb:f9:1d:08:49:fb:91:ee:97:ee:96:f3:0a:a6:03:
         0d:d4:9b:4f:27:de:75:f7:1d:8a:23:8f:7a:32:9b:5c:32:9f:
         d1:a9:16:5b:2b:5d:8a:e1:78:71:42:a9:70:bd:e2:7c:49:5e:
         fc:ec:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:18 2025 by rpki-client