Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File:                     IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier:          IbuIkILcvDYqx8WZYhKE9VumeOLg3ebA646hvWpG0zo=
Subject key identifier:   A3:F9:D0:40:85:CC:DD:86:60:67:BA:EE:88:C3:91:4C:12:86:E2:50
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer:       /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial:       0198D698238949A0CEF80A359EC1DA162700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 11:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:31 +0000
Files and hashes:         1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
                          2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: VC3lqh9kZYAjx1Uhw+Q9M+L0zfV3edHVsZIN8x8JYIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:23:89:49:a0:ce:f8:0a:35:9e:c1:da:16:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
        Validity
            Not Before: Aug 23 11:02:31 2025 GMT
            Not After : Aug 24 11:02:31 2025 GMT
        Subject: CN=a3f9d04085ccdd866067baee88c3914c1286e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:28:37:7f:b1:cf:9b:b1:95:b0:36:26:63:
                    8b:15:6a:ec:84:11:30:3a:35:72:75:52:73:8a:ed:
                    45:67:fe:d1:44:28:99:bf:9d:c1:ed:c0:cf:47:12:
                    c6:b8:35:7e:51:29:0f:a0:71:b5:b3:2c:4d:02:22:
                    15:0b:ff:2b:67:98:eb:45:a8:e1:5e:f6:7a:4a:13:
                    f9:58:c1:6f:98:a6:e3:22:c8:6d:ef:69:1f:9d:5b:
                    af:68:87:39:c7:15:dd:89:e1:bb:04:36:17:38:0f:
                    87:b0:b9:a0:06:db:58:b4:cf:3f:70:6e:e3:a7:14:
                    f1:5e:1d:9e:2d:d3:fd:08:be:23:c5:f5:ff:77:78:
                    3f:f9:a5:b7:ad:50:55:16:f1:02:d8:ed:66:c6:d0:
                    e2:64:f5:0f:64:99:1f:76:29:56:fd:34:00:de:34:
                    79:81:2f:7a:8f:ce:e8:ef:7e:89:f3:ef:8e:9b:b2:
                    79:93:cd:8f:fd:ae:a8:3a:07:d1:22:78:db:89:05:
                    62:19:80:7c:a0:1b:46:5a:b2:4c:49:c3:87:a8:87:
                    68:58:3e:32:e7:6a:78:cb:59:78:1f:7b:e6:25:6e:
                    8f:d8:d4:a2:21:1d:16:fe:8c:f8:57:ee:4d:c2:3e:
                    55:67:60:d4:49:52:7e:48:c0:6f:98:e2:db:33:84:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F9:D0:40:85:CC:DD:86:60:67:BA:EE:88:C3:91:4C:12:86:E2:50
            X509v3 Authority Key Identifier:
                keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:43:b5:21:d9:c8:87:43:cb:07:91:7d:e1:15:93:97:1d:47:
         08:f4:6d:9d:06:4a:31:22:86:bc:84:16:dd:eb:1e:9f:35:ac:
         06:cf:64:71:c5:f0:64:e1:09:2a:b7:0a:1d:97:89:94:8c:c2:
         19:38:3e:61:63:24:93:e2:65:ee:7b:24:ce:13:1c:24:88:cb:
         15:61:a6:fa:85:95:69:91:bf:4e:5a:f3:89:07:e5:25:0b:3c:
         f3:7f:29:82:c3:39:a1:c9:bc:96:b1:e0:33:f8:f0:98:e7:15:
         21:b6:e5:03:1f:3d:76:df:f3:b0:bb:05:c6:e9:4c:37:f2:86:
         5c:04:df:48:e4:cd:df:2e:08:8a:ad:2e:1c:64:0e:b3:17:0f:
         97:15:c0:96:42:04:54:99:d0:b8:d2:fb:43:e5:2e:e3:16:e0:
         1f:c5:15:9f:4b:9a:7b:93:29:b8:fe:b4:1d:2c:4b:1a:b4:53:
         a2:ff:a3:f3:06:87:0b:11:50:60:c4:9d:c6:be:1c:f4:69:04:
         4e:18:97:ab:cc:2b:ff:ff:dd:96:25:5a:10:ed:08:e4:55:95:
         a0:fb:1c:c5:08:f8:8d:d0:48:3b:35:a6:19:83:5f:a4:27:69:
         f5:da:31:88:c0:a7:7b:df:bd:14:8d:34:5f:14:fa:c7:1e:05:
         1d:d4:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:26 2025 by rpki-client