Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          5IHjoRkyaupEGzaSRN6Y61KTE6lrrj8JM4+R29gE94E=
Subject key identifier:   B0:72:18:C9:2F:4E:55:AE:49:70:96:2F:85:29:CA:2B:D6:1E:1B:BD
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       0198D705DA71936F77F9E94F106B492F8E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 13:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:21 +0000
Files and hashes:         1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: 7iTEVbqg+5ETQTL/FcvcyQEXMHrItrMrf4JjNNfSIzE=)
                          2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:da:71:93:6f:77:f9:e9:4f:10:6b:49:2f:8e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: Aug 23 13:02:21 2025 GMT
            Not After : Aug 24 13:02:21 2025 GMT
        Subject: CN=b07218c92f4e55ae4970962f8529ca2bd61e1bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:32:df:16:37:5c:68:46:f7:bd:9e:52:14:
                    e6:65:86:07:1f:02:dc:c2:2b:57:b2:ef:92:6d:a1:
                    07:80:7e:c4:7e:5f:ec:01:8f:11:0d:5f:39:01:f2:
                    ab:aa:b5:aa:ff:cf:3b:3b:6b:47:4b:47:52:21:ea:
                    1a:4d:83:32:e0:61:8c:41:94:df:aa:72:86:0e:bf:
                    73:57:f0:d3:ba:ae:b8:48:80:ad:2c:05:7b:56:b9:
                    0e:af:44:0f:46:e4:b7:57:97:0a:6e:9a:91:0b:99:
                    5e:8d:1a:15:13:56:0b:56:76:4a:e0:ff:47:0a:b6:
                    5a:35:3c:2e:6c:e2:ca:66:1f:40:69:32:fd:f5:5f:
                    3e:8f:68:37:d1:9a:c1:38:ce:23:53:1a:cd:ae:38:
                    7b:37:7a:f1:57:23:d0:46:19:02:dd:90:d2:b7:e8:
                    79:d8:cf:7e:7a:38:66:a4:d3:72:98:c1:6b:8a:cc:
                    46:d7:d9:df:f9:27:0d:00:38:9d:5e:89:ab:82:a9:
                    c3:1f:3d:62:44:b7:be:9e:3a:e2:f2:41:ef:36:33:
                    01:08:01:f7:61:f2:d8:bd:03:19:bb:57:bb:3e:b5:
                    ff:5a:e5:38:85:a8:2c:6a:ab:b9:3e:3e:a1:2c:aa:
                    7d:8f:ee:f4:92:b6:9e:f2:52:7d:1a:51:a1:63:b7:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:18:C9:2F:4E:55:AE:49:70:96:2F:85:29:CA:2B:D6:1E:1B:BD
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:a2:c9:9b:b2:14:db:16:f0:d9:12:a8:a6:db:52:0a:22:
         3a:f6:0c:2c:bc:11:ac:bb:07:75:b5:09:6a:09:88:e1:f3:b3:
         81:d3:ee:a8:25:38:7f:3a:77:8e:bf:65:54:94:19:db:1d:00:
         e9:a4:de:6f:55:58:9e:18:4e:a7:6a:ca:1e:ea:8f:bb:b0:f8:
         4d:55:8e:4b:48:79:45:10:18:38:cd:76:e4:95:24:4f:2d:db:
         7b:9a:ce:70:9f:ea:c6:e7:6d:ad:e8:7e:36:3d:58:40:ea:3b:
         2a:90:cb:62:55:f4:cc:8f:fb:f8:32:da:63:0f:79:1d:63:35:
         77:ee:62:72:03:47:cf:47:b9:90:0a:14:cb:b1:a1:6d:8a:3f:
         aa:d8:66:bd:37:6b:0c:16:ee:3a:91:b5:88:54:99:a0:65:94:
         5d:f3:c7:07:93:cd:15:3f:ed:c1:8b:a7:e8:45:98:19:99:94:
         79:f1:d3:ec:f8:c7:0f:2d:c1:82:b8:b2:ba:45:e4:44:34:d4:
         3b:b2:b1:4f:16:e8:0a:2a:7e:ff:6a:77:7b:2b:f6:39:e2:76:
         9c:99:9a:ff:2f:d1:4a:eb:e6:44:e8:2f:73:74:03:82:17:43:
         68:6c:0a:cb:5a:d5:43:08:8d:1d:49:34:b4:f4:d4:07:af:d2:
         19:9b:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:41 2025 by rpki-client