Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File:                     cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier:          /0tGv9W4iy6RTpOMYVdWXERPSW3sw4abhrlNdPSn9Ro=
Subject key identifier:   39:55:9E:E1:20:46:E4:B9:B6:AD:44:79:90:5C:69:6A:B0:CE:12:FC
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer:       /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial:       0198D54ECCE62F41ADAA96AA725F6D7FF945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:47 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:47 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:47 +0000
Files and hashes:         1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
                          2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: O/JohdUwjiOdnNFVQjLSEJcR72FdjEP8dsI1LIdIJBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:cc:e6:2f:41:ad:aa:96:aa:72:5f:6d:7f:f9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
        Validity
            Not Before: Aug 23 05:02:47 2025 GMT
            Not After : Aug 24 05:02:47 2025 GMT
        Subject: CN=39559ee12046e4b9b6ad4479905c696ab0ce12fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:6b:4a:62:eb:e3:5c:17:ce:69:c8:c8:b7:
                    2c:dd:e3:51:ea:2b:55:7e:83:a0:e2:ca:36:c9:df:
                    85:3c:c8:63:cf:de:b5:a0:7c:4b:07:27:26:dd:c5:
                    8f:83:7b:fe:61:56:8e:fe:9a:3f:54:db:8c:aa:bc:
                    c6:cc:15:17:ae:30:4d:56:75:00:a0:62:40:fd:5f:
                    d2:56:79:08:f3:e2:46:d5:23:09:41:3c:4e:de:9b:
                    7d:86:51:92:09:1b:00:af:95:69:df:75:92:3c:d2:
                    c4:0a:ff:56:49:99:42:59:00:fb:6d:28:50:62:fd:
                    c9:e9:e5:c4:0b:b4:7e:bd:86:7d:7a:c9:82:91:ce:
                    ba:4b:fe:cf:cf:9b:25:98:e3:d6:52:9f:d0:34:0f:
                    a4:68:92:9f:9c:03:60:04:50:99:9a:ca:83:8a:03:
                    74:a3:87:5f:eb:cf:47:8a:62:16:a6:9f:ec:6b:41:
                    02:8d:27:59:d6:d5:a6:b0:29:0c:04:6a:aa:f3:b2:
                    af:6f:21:b7:30:46:ea:72:cd:f5:d8:b1:a0:c2:e7:
                    cb:e5:f6:1b:76:26:f9:80:15:92:b5:69:40:be:25:
                    c4:db:1a:7b:c8:c1:d0:27:21:3c:ea:50:d5:ac:45:
                    9c:59:c3:c0:75:e9:b1:db:4d:8f:b8:d0:b2:82:ec:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:9E:E1:20:46:E4:B9:B6:AD:44:79:90:5C:69:6A:B0:CE:12:FC
            X509v3 Authority Key Identifier:
                keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:71:bd:9f:4d:94:a2:57:26:b9:6b:be:37:6c:b1:8e:47:
         43:12:f6:88:72:60:0c:72:d1:c7:a2:ef:52:c1:34:ee:e6:7b:
         c5:c7:31:dc:df:10:35:b8:53:28:cf:4b:9e:76:c9:d5:5b:ae:
         f4:4d:66:8c:5d:0f:e9:4e:4f:be:ea:0e:8e:56:43:3d:e4:17:
         bf:4b:d0:1e:56:68:f6:18:02:10:25:46:7c:21:0e:4a:2d:84:
         13:eb:4d:7c:26:77:6c:3e:72:e5:39:66:a3:71:53:04:cf:8c:
         ea:25:35:d3:0d:20:7e:c8:1a:b6:71:7c:56:10:b0:8b:1c:bd:
         c8:7f:c9:c6:62:04:33:2a:31:37:98:5a:47:81:e0:d4:bf:ec:
         02:64:c7:35:eb:69:d2:70:b5:0b:40:20:f6:80:47:dd:6c:63:
         b9:42:19:0d:ba:81:6c:74:d4:86:59:9d:a7:08:24:02:c4:e7:
         d9:51:dc:c6:e1:a3:6b:c4:a5:cc:d4:8b:fd:71:28:3a:4c:0c:
         20:3c:76:a2:69:8c:3f:b4:db:aa:67:3e:32:d4:b1:9c:cb:2f:
         ca:b1:78:11:b7:13:3b:02:05:2e:86:b8:e5:02:4a:34:f2:be:
         ef:06:c4:94:69:e4:e1:da:be:cd:41:de:4e:83:da:2a:bd:8b:
         81:22:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:27 2025 by rpki-client