Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          4qoTERFcxZ0eYjXq8c/Fg0aZcOKxGbYY0CLdzA2RcGU=
Subject key identifier:   EF:41:ED:53:C4:69:12:BC:C3:D7:1E:77:2F:2A:7D:42:C8:6F:C4:13
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       0198D583C201A807B5E30859E179E2F73C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: LjqbNiObDeVpiT1OJVz8ISp3od1KLJAmbM3v/pWXJhw=)
                          2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=)
                          3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
                          4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
                          5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c2:01:a8:07:b5:e3:08:59:e1:79:e2:f7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=ef41ed53c46912bcc3d71e772f2a7d42c86fc413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:0d:66:3d:af:10:36:f3:a4:3a:18:c3:4b:
                    39:cf:37:7a:20:42:80:44:76:05:31:ac:7a:e1:1b:
                    f1:84:e5:fb:dc:ce:c5:30:4f:c3:f1:13:09:06:c4:
                    1b:f6:7c:44:01:29:07:17:2b:56:75:7f:7a:2c:f0:
                    50:f8:35:58:37:ec:c0:79:ab:bf:a7:4a:60:5a:b2:
                    81:31:5b:b1:bb:af:69:80:7e:da:fa:20:7f:84:8a:
                    98:b3:f7:d9:df:f3:ee:9a:a3:66:5c:f7:08:37:32:
                    a4:b3:13:24:b2:14:84:f6:20:13:74:45:92:56:4e:
                    e4:54:18:ed:cb:96:b7:65:d9:1b:b1:3d:5c:e9:0a:
                    58:78:17:f5:d5:6d:a8:78:99:98:75:7e:7e:44:07:
                    a4:17:d9:bb:8d:a9:ec:79:61:3d:d5:74:f6:56:8d:
                    b1:f0:7f:b0:10:6c:77:49:20:5d:33:40:b1:5a:7c:
                    d7:8b:67:2c:49:9f:aa:1f:4b:58:7f:e6:30:4b:a3:
                    27:e8:5c:97:b5:70:35:83:b7:05:af:23:56:38:52:
                    ba:ba:a4:8f:5f:6f:1c:bb:52:d4:5f:b1:fb:27:bc:
                    40:7d:90:1c:5e:de:9c:26:7f:d5:1f:01:21:26:9e:
                    7e:cb:63:67:68:43:28:75:27:51:dd:05:12:1d:c5:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:ED:53:C4:69:12:BC:C3:D7:1E:77:2F:2A:7D:42:C8:6F:C4:13
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:df:5b:8e:d6:48:85:a8:32:c0:6e:c1:a2:d6:fb:15:83:a9:
         f2:73:80:6b:c4:24:ad:ab:ac:66:42:c2:76:b3:a4:56:cf:25:
         b0:47:a2:2d:b8:e5:72:f4:4b:c6:a5:c7:e1:bc:c9:1c:a1:84:
         01:39:cd:12:2a:a4:60:df:cf:c4:0c:e7:82:35:72:55:d0:03:
         4e:89:53:83:f3:df:05:de:29:6b:31:26:67:b3:53:7f:fd:3e:
         82:c4:00:3b:6a:9b:87:5c:95:cd:26:56:7a:e5:59:d0:15:6b:
         81:9b:21:bb:d3:35:b5:bb:81:31:39:a4:5a:14:cc:6d:84:8a:
         81:1b:3a:7c:2b:6b:5b:d0:f7:bb:78:b0:c5:ea:c3:83:26:ee:
         cf:a0:8d:fc:29:a2:d9:55:a4:52:e7:79:fb:36:7d:ef:6c:0f:
         b6:96:1a:6e:ac:40:a1:d8:e8:65:e4:a3:6a:b3:af:44:39:33:
         78:86:27:d3:78:bf:fd:30:40:98:95:ae:c0:1c:a4:fb:36:50:
         d4:41:65:d6:74:38:5a:64:ad:ab:29:75:0b:b5:bf:e3:ca:ae:
         b7:1e:4d:f5:9d:af:eb:23:56:f5:6f:85:08:d2:9f:be:7e:e2:
         72:3a:3c:a6:a9:88:90:20:fe:53:89:00:fc:ec:a6:47:1b:fa:
         d9:ea:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:40 2025 by rpki-client