Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          RMCGzUC85oYD5dpqTdfGgsL3QYHoTwsT75VHpCCO1zk=
Subject key identifier:   43:90:5F:1D:99:48:CE:8F:92:82:2C:6D:8D:18:A8:F3:FE:16:16:1B
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       0198D6CDBB263AF8F483C1117D2F07856EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 12:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:03 +0000
Files and hashes:         1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
                          2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: zR++aX4HQR8hMmv8XoytYYbvaCyh1gWn0oKiL1TXKB8=)
                          3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
                          4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
                          5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:bb:26:3a:f8:f4:83:c1:11:7d:2f:07:85:6e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Aug 23 12:01:03 2025 GMT
            Not After : Aug 24 12:01:03 2025 GMT
        Subject: CN=43905f1d9948ce8f92822c6d8d18a8f3fe16161b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:1e:11:4a:0e:64:15:66:af:25:3b:f9:a1:
                    7f:48:72:85:49:48:dc:fa:a5:71:2b:e5:38:e2:36:
                    ff:02:bd:39:4c:db:e8:49:d3:c6:8e:fd:60:b6:e9:
                    4f:33:18:78:3c:de:bb:e5:e4:7f:d9:95:d7:69:0f:
                    69:5f:3b:2d:ea:d0:b6:40:ad:6f:12:d4:c9:c5:0b:
                    e7:84:fd:7b:ea:81:db:1a:74:b7:c5:0d:bb:93:eb:
                    f6:7e:c7:ea:cc:b7:50:03:83:d6:d2:eb:7a:77:34:
                    f5:14:da:09:15:fd:26:7a:c3:61:d8:ee:86:17:cd:
                    3b:4b:dc:fc:eb:ea:d1:10:95:47:44:ce:7d:a6:94:
                    35:7a:33:77:6e:81:c4:6b:fd:71:40:6b:bb:52:da:
                    d0:1e:02:16:df:46:dd:29:6e:7e:a5:ac:9c:f9:a6:
                    1c:e1:51:56:00:03:1b:0f:54:5d:a0:7e:b8:0a:fe:
                    49:3d:86:63:0b:5e:96:bc:74:f4:47:30:0c:c9:15:
                    c5:26:3b:83:cb:3f:fa:b3:69:d0:4f:79:04:c8:3b:
                    80:57:cd:9b:86:e2:31:07:bb:70:d7:95:95:5b:f3:
                    2f:9e:02:4a:e7:2d:36:45:b0:7c:50:43:54:ce:52:
                    64:f3:0a:8d:a3:7e:b5:20:16:fb:c3:3e:a0:bc:46:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:90:5F:1D:99:48:CE:8F:92:82:2C:6D:8D:18:A8:F3:FE:16:16:1B
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:e5:4f:75:d4:61:f9:2b:f0:de:f1:d2:a8:2d:11:c1:bc:
         29:0c:09:1d:1f:b4:1e:bb:4f:62:8d:a8:04:82:43:dc:ae:ca:
         83:1b:40:6a:e4:0d:a7:cb:ce:30:39:5c:aa:ea:23:d6:28:d3:
         ca:0d:65:24:d3:88:1b:1e:df:c7:35:ec:34:cd:32:ca:46:66:
         53:21:3f:70:b0:84:ef:e6:c9:79:23:6a:77:a3:d7:57:e0:97:
         c0:81:48:64:d1:48:12:1f:05:1e:ff:e6:03:19:90:3a:5a:3c:
         70:d0:59:08:5b:55:ae:94:d8:eb:a2:87:c5:bf:be:f9:6d:8f:
         25:0a:e2:67:78:9c:8e:38:bb:73:75:08:ca:8e:02:6e:50:48:
         df:b5:e1:05:09:00:c6:8b:ac:38:88:5d:63:af:db:6a:7b:66:
         6d:af:2d:9b:6c:bb:bd:a9:6a:89:db:c7:64:4a:09:37:b9:3c:
         24:44:2d:58:4f:fc:fe:2e:a5:b9:33:3d:1f:71:35:81:51:8a:
         97:95:73:04:31:04:df:bb:fe:ee:ce:16:00:87:fd:f4:5e:6c:
         0e:f2:b3:7f:28:41:f8:57:1c:f9:5f:9f:d7:64:e9:71:a9:1f:
         d5:06:14:4e:52:95:dd:83:2a:2b:89:89:d0:28:fc:28:6d:1a:
         3c:ed:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:16 2025 by rpki-client