Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File:                     tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier:          QY+BKs3kTqLf6Ip/JeoTp6UOmMEfXwWnwszbzCpO1Lo=
Subject key identifier:   48:4C:7A:BD:21:2D:D4:4F:C3:24:D3:49:B7:19:4F:52:84:E0:C5:DC
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer:       /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial:       0198D5BB8B528E232178846C1A1BF5EF8AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:34 +0000
Files and hashes:         1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
                          2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: XzEYc0FtFPtUrOOUeyYiC9EBU0uHecbOH4iyGn4CMPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:8b:52:8e:23:21:78:84:6c:1a:1b:f5:ef:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
        Validity
            Not Before: Aug 23 07:01:34 2025 GMT
            Not After : Aug 24 07:01:34 2025 GMT
        Subject: CN=484c7abd212dd44fc324d349b7194f5284e0c5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:d3:d2:b3:26:30:5a:a5:2c:3c:b0:d8:da:
                    66:d3:25:49:59:1e:b9:10:61:de:57:db:4d:13:c0:
                    90:28:55:a2:b8:55:c6:5b:70:66:21:d1:86:47:0d:
                    ef:92:9f:ba:ad:89:fc:8c:fc:02:45:1a:b8:9c:93:
                    dc:c6:2a:8d:a2:b1:ae:2c:09:6f:d7:4b:7f:74:a0:
                    75:93:22:e5:24:fb:fa:92:0b:cb:82:da:88:90:b1:
                    0b:eb:22:81:02:e7:01:25:bc:ba:be:a9:04:d7:ee:
                    bc:2a:54:e5:70:05:2c:05:a3:27:0e:10:86:bd:ad:
                    28:27:5b:76:dc:dd:9d:47:b3:24:c8:97:59:e4:1c:
                    83:61:87:7e:71:6f:51:48:b0:1f:0d:f5:69:45:f9:
                    67:b9:dc:50:5e:8b:35:5e:24:42:69:be:37:8e:41:
                    dd:1c:9f:06:a3:d6:7b:1a:39:97:b2:6c:48:be:8f:
                    12:24:d8:d3:fc:59:9b:d0:7a:3a:cc:ff:ad:64:73:
                    07:36:b7:5a:4c:6a:2c:d6:12:fb:16:3f:04:94:61:
                    de:f9:33:bb:e0:b1:9a:9f:01:11:6b:9e:3e:f5:23:
                    89:08:5d:0a:c5:4e:99:b2:7b:b2:3b:11:ca:97:5c:
                    3b:e1:37:d4:cd:f0:e8:12:4d:13:50:a0:38:6a:85:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4C:7A:BD:21:2D:D4:4F:C3:24:D3:49:B7:19:4F:52:84:E0:C5:DC
            X509v3 Authority Key Identifier:
                keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:c5:f1:71:ec:7f:a0:9b:8b:6d:78:85:84:dc:e8:fb:e8:
         68:e3:71:27:28:2f:bf:7e:ca:34:80:e5:fc:94:f3:21:a7:ee:
         6d:9d:df:b2:2d:61:80:68:c8:0e:df:96:94:90:a3:73:a6:c4:
         50:65:6d:08:2e:4d:af:95:ea:59:3c:b5:ff:9b:f2:19:84:9f:
         87:92:17:84:7e:9b:38:3d:14:b8:a7:57:e7:ef:30:d1:49:8e:
         12:43:24:3d:34:0e:bd:e0:e0:10:15:6d:ad:c4:2f:26:55:ba:
         cb:63:89:58:66:28:cb:e6:ed:4d:dc:ae:99:4f:66:7b:ab:26:
         d0:38:04:b4:79:36:5f:b7:b4:a1:04:14:93:09:62:ba:55:2f:
         b3:58:89:fd:f3:58:f0:8d:d0:ee:21:b7:20:b0:e7:43:5f:84:
         b6:ba:73:f9:0b:3c:10:84:41:bb:9b:1e:df:f0:e8:79:2a:26:
         6c:64:08:8f:16:ae:c2:69:0e:7d:4f:e2:a9:77:8f:99:2c:6a:
         de:e8:bf:dd:7f:f1:d1:96:63:d7:a8:1d:cb:a7:05:ca:f8:9d:
         74:de:41:67:50:ee:b3:2d:71:49:67:84:01:aa:55:ce:c5:a7:
         b1:c8:95:b1:40:6b:3c:03:8d:0a:2f:57:30:36:f1:f6:9e:83:
         4b:5f:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:58 2025 by rpki-client