Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          ZEpMHgmDwJ4jxpl+qEI8zP4ePoUlNz28HwKkhZWUCiE=
Subject key identifier:   1A:3D:D0:91:35:63:10:E2:AD:6E:CD:D7:15:4B:7A:FA:F1:12:DE:83
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       0198D54DD36D37C19DFAB8A4EF661F3A6947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: PDpu45iCHCMZvE7Lp/34sDGh3ifwPonnTYz1fTD8Y5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d3:6d:37:c1:9d:fa:b8:a4:ef:66:1f:3a:69:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=1a3dd091356310e2ad6ecdd7154b7afaf112de83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:9f:81:5e:6a:da:90:72:65:0c:76:6c:a1:
                    71:ec:4f:2b:a5:bb:c9:b4:da:7a:f4:02:bd:a1:2b:
                    5c:c5:92:5a:d1:02:0a:01:af:46:bb:48:1b:50:27:
                    4a:2d:70:ac:23:e9:f2:ce:3e:0f:14:96:9a:15:fc:
                    d3:47:1d:81:d0:34:ce:0c:60:6d:09:3d:ae:e8:67:
                    20:68:58:7f:8d:f4:e5:c1:9e:6d:fa:0e:46:fb:c4:
                    cf:98:db:56:ea:cd:2e:68:38:99:c5:fd:f9:04:1e:
                    6a:7d:b9:c7:3e:01:54:b4:c9:55:de:a0:ce:6d:59:
                    c3:76:4d:47:1c:dd:7e:73:5f:44:35:31:23:92:b1:
                    29:ff:c0:c5:e1:c7:bb:0c:4f:fe:73:88:61:cc:3c:
                    b5:3b:16:06:db:7c:d1:86:7d:85:fa:d2:8c:bb:57:
                    30:3b:dd:e4:b4:9d:d8:4d:8d:81:b2:78:0f:18:18:
                    31:9c:b0:51:81:f7:d8:0c:bf:62:c5:8b:cd:3f:f5:
                    f1:05:9f:0f:05:ea:bd:5f:58:41:0a:d5:f5:3b:15:
                    13:6a:39:0a:c3:5e:0a:e6:b8:c5:a5:52:8e:1b:a6:
                    07:bd:c8:2b:15:47:3d:86:9a:f6:e7:69:88:34:24:
                    92:eb:08:3a:52:15:75:7b:68:2e:01:c3:23:3a:5f:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3D:D0:91:35:63:10:E2:AD:6E:CD:D7:15:4B:7A:FA:F1:12:DE:83
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:a5:87:08:0f:e7:5d:81:e4:2a:3f:ee:cd:96:96:39:f2:
         03:3f:c9:ef:2c:01:dd:8f:31:bf:e7:69:94:35:d3:e2:eb:1e:
         ee:6d:5a:99:df:00:06:c5:e3:34:83:2c:e6:e2:11:8b:8e:99:
         eb:67:0e:e2:67:87:a7:91:62:27:5d:f1:87:9d:29:e3:3d:2e:
         77:bc:a0:42:b7:d8:cf:78:c7:5b:67:26:8c:a8:ca:53:5c:01:
         67:aa:08:6a:9f:26:21:a9:c2:82:e1:bd:aa:7a:09:ad:2d:9a:
         5d:26:b5:ea:a4:aa:e1:f0:fc:35:fb:c0:29:78:a8:a1:0a:be:
         71:10:c1:db:d1:2e:06:9d:b8:ae:e9:42:2e:43:77:8a:b2:d7:
         c5:23:b2:09:c5:1d:13:0e:cd:f4:9e:ae:20:1c:23:52:8b:86:
         65:7d:33:23:ad:c8:f3:10:be:15:7d:15:2a:d1:6c:e7:91:62:
         9c:db:ca:85:da:b9:ec:65:88:57:7c:1d:5e:09:34:3f:2b:17:
         73:8b:3e:5e:05:4b:93:df:de:ce:67:1a:72:7e:a6:ba:3b:8b:
         e6:a9:4e:d5:4d:0e:e9:4f:c8:a6:1a:05:b7:61:78:06:bc:b6:
         fc:ba:19:47:56:01:cd:e6:82:f4:23:b4:d7:ce:1e:e2:e2:f3:
         68:df:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:38 2025 by rpki-client