Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          M+BLt7K9vucZb0hysh3SYYRo/KiJti0S7tNh+RwHrQA=
Subject key identifier:   25:2B:68:21:D0:1F:15:BB:8F:6F:A2:0C:33:78:41:6A:B6:7A:0A:94
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       0198D69877F423A9FB3195A6738C2C7EB8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 11:02:53 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:53 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:53 +0000
Files and hashes:         1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
                          2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
                          3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
                          4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
                          5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 96PdL7QPzF68qxodFwip0FxFxJ7EkoGUsUbC4bBs+4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:77:f4:23:a9:fb:31:95:a6:73:8c:2c:7e:b8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Aug 23 11:02:53 2025 GMT
            Not After : Aug 24 11:02:53 2025 GMT
        Subject: CN=252b6821d01f15bb8f6fa20c3378416ab67a0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:75:8f:b5:72:c2:55:ea:d6:77:db:d5:51:
                    d9:a0:17:c1:60:98:b5:62:a5:ad:5f:92:d2:d0:34:
                    03:51:df:2a:35:e0:2c:ae:1f:a3:57:04:38:cc:5e:
                    bf:fc:e2:6a:14:f3:96:e5:f8:9f:e3:2c:dd:0d:23:
                    28:66:e3:c7:fe:56:2d:30:14:81:11:e0:87:d1:91:
                    de:6c:6d:21:e1:04:99:05:84:71:c8:87:80:bc:f7:
                    17:87:df:93:5f:1e:99:93:b6:6f:a1:cd:35:ef:f7:
                    95:a2:19:e0:0c:c9:69:a7:85:f4:ab:dc:dc:ee:74:
                    ea:b5:fc:a7:a0:1e:b1:2b:c5:fe:49:8a:bd:67:c5:
                    03:38:d4:99:ee:56:3d:3a:55:6c:56:e5:c9:65:8c:
                    2e:fa:27:0e:f0:7f:93:8c:22:e2:3c:ac:35:3d:ad:
                    da:d7:04:b8:ff:e4:d1:76:7e:98:12:fe:99:02:23:
                    4c:ce:1b:cf:30:eb:ff:69:ac:cb:c8:ea:98:99:93:
                    90:a0:ec:ea:29:4f:6a:ed:d1:b7:56:a0:68:24:10:
                    97:de:88:54:56:a5:78:7f:0a:99:4b:ad:96:47:c9:
                    f3:0e:24:c8:8b:b5:83:65:80:48:b6:ac:15:61:61:
                    90:6d:40:e1:0f:d6:10:a7:3d:58:24:31:7c:2d:ff:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:68:21:D0:1F:15:BB:8F:6F:A2:0C:33:78:41:6A:B6:7A:0A:94
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:c7:1b:80:ad:21:4c:7d:d3:07:7a:a9:a6:ce:1b:c4:df:
         91:25:e0:af:f0:fd:d1:65:62:e4:4f:42:41:b4:8b:d1:ca:37:
         69:aa:cc:01:57:db:38:06:2c:e6:4c:25:0a:ee:8a:e2:5b:14:
         30:0d:92:7a:1f:25:73:6d:1a:f8:41:26:2c:d5:b6:54:0a:ee:
         0b:59:59:d0:b5:c6:c8:d9:3d:df:d5:ab:78:47:e3:68:fe:e5:
         ae:7f:b1:2a:e4:ae:fc:35:e6:c7:9e:c1:3c:db:59:21:98:50:
         cd:f5:f2:b0:94:45:c8:42:40:6f:a5:30:65:3d:f3:1e:3c:ca:
         2a:c7:86:41:6c:3c:9b:58:e3:38:e3:3b:53:61:a0:35:1f:84:
         5c:f3:6d:bb:54:f8:9a:25:57:2f:50:3f:c7:c9:8e:24:55:20:
         3b:58:6c:64:d6:84:91:50:a9:81:86:0b:92:35:ce:a1:bc:dc:
         81:58:c2:7f:42:ed:25:7d:ba:9e:d5:ee:04:2c:a1:3f:33:7c:
         b8:ca:6b:f6:bd:e9:86:8d:78:81:c7:e1:ac:83:31:52:1f:eb:
         6d:14:15:55:49:f4:eb:af:d3:af:84:f3:74:33:03:0d:88:5e:
         81:e0:1f:71:5e:31:a5:36:fe:f6:4a:34:6e:56:21:b8:e1:b3:
         43:01:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:05 2025 by rpki-client