Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          XqNvzYZ/bVUT0Y3FW2mX1fIFIdXyyXDj/OLF+97x2z8=
Subject key identifier:   58:29:FC:4F:FF:99:42:80:A2:16:08:DD:FA:58:A4:BA:51:ED:25:D4
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       0198D705F33DE29F410DCCD8F6CB21A1BAE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 13:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:28 +0000
Files and hashes:         1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: rCbji4RJAwfCYPDdCtfgwe2m7y0V1DHMtbP6vZ9SIxs=)
                          2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:f3:3d:e2:9f:41:0d:cc:d8:f6:cb:21:a1:ba:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Aug 23 13:02:28 2025 GMT
            Not After : Aug 24 13:02:28 2025 GMT
        Subject: CN=5829fc4fff994280a21608ddfa58a4ba51ed25d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:2c:7f:b7:23:b0:07:d2:e9:d2:df:be:30:
                    1d:02:fa:8b:1b:64:4b:a5:55:c9:2b:c2:0e:71:95:
                    f8:db:d5:91:51:cd:6d:ef:14:d3:fd:91:21:d8:bd:
                    5f:fa:9a:80:ca:cf:2d:03:38:5d:13:f2:df:1e:b7:
                    80:4a:b7:37:c6:b4:86:dd:a0:71:04:ea:cb:2c:a0:
                    0d:ee:16:f4:c6:4e:cf:85:1b:ea:36:af:62:03:21:
                    6b:c8:f7:02:6c:df:1a:3c:0d:18:9a:88:e2:7f:30:
                    66:c9:71:5f:8d:7f:65:ee:ef:32:0b:9b:58:e2:cb:
                    b6:81:c9:b5:6e:1b:f2:1c:79:83:11:80:43:4a:6f:
                    0f:e0:9d:48:0e:59:a2:ac:09:e5:ee:00:b6:48:23:
                    0b:d0:cf:6d:51:47:75:38:98:52:2c:0c:a5:4c:fe:
                    96:a4:1a:2f:c2:40:de:48:5e:a3:e4:ea:fe:0e:da:
                    d8:d7:1c:a7:fe:d8:ae:3f:51:e0:87:14:a9:d5:09:
                    9a:ce:c0:69:84:66:40:f9:4c:6b:60:d2:50:9b:bf:
                    4c:72:cf:fe:df:f2:27:a6:2c:3a:50:5f:ee:32:5c:
                    78:af:46:bd:d7:cf:32:a9:89:c0:f9:fc:fd:1c:bb:
                    34:87:0c:f9:19:8e:09:6f:d8:81:e0:02:82:80:37:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:29:FC:4F:FF:99:42:80:A2:16:08:DD:FA:58:A4:BA:51:ED:25:D4
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:20:86:5f:14:72:4a:8c:e2:36:27:66:e9:48:8b:56:2d:
         9d:57:e9:cb:05:f3:a5:57:03:83:72:a4:31:f9:6a:8d:5a:71:
         d8:bd:ce:c9:88:e2:ba:69:32:ff:31:fe:c6:ae:58:3d:46:0a:
         ef:98:81:59:30:8f:25:49:b4:22:ea:a1:6c:71:16:16:6d:9a:
         09:c3:d9:71:97:29:99:e1:94:f8:be:77:dc:0d:eb:49:b2:eb:
         8f:0a:07:f5:d7:30:07:e5:a2:af:42:11:3e:ae:ea:81:dc:a9:
         4a:4b:6a:f5:7d:8e:46:ed:bd:fb:cf:ed:39:fd:0f:01:f6:cd:
         ee:70:f1:77:a8:95:c2:9a:80:29:b2:b0:4d:9d:fd:8f:4b:e8:
         4a:48:f5:73:5e:2a:69:5b:3f:ac:97:9b:b4:dc:33:98:5c:b6:
         68:11:bb:bb:bb:35:81:02:e4:c6:e1:d2:a3:e4:da:ac:fd:6c:
         51:96:59:3a:a9:3c:45:19:0c:89:8a:73:45:61:86:59:fa:3e:
         83:91:99:52:03:7e:e9:7e:6b:9b:5d:27:bd:ad:0c:ae:d6:2e:
         a3:8b:fd:6d:bb:04:1a:f3:80:e1:f4:ac:ec:14:7f:59:2a:e3:
         71:2d:08:b9:f4:19:fe:a3:e6:3d:96:60:aa:e3:f6:83:9d:a6:
         b6:5d:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:06 2025 by rpki-client