Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File:                     RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier:          SyHhsE8a0RKl0Pg3C5GNPjkD2JJacHCPEzT5A/N9uFg=
Subject key identifier:   B9:3D:FA:23:22:0A:8A:1E:16:79:91:ED:B1:47:1B:28:77:D4:83:04
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer:       /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial:       0198D54DBFF1DADFF15724B286D196D9231A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:39 +0000
Files and hashes:         1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: qDzYyKKmxAUK+3MK/tjaCt1VKGhJf6tJZ3DtIUyQ5SY=)
                          2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:bf:f1:da:df:f1:57:24:b2:86:d1:96:d9:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
        Validity
            Not Before: Aug 23 05:01:39 2025 GMT
            Not After : Aug 24 05:01:39 2025 GMT
        Subject: CN=b93dfa23220a8a1e167991edb1471b2877d48304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:83:bf:b7:4b:63:88:3d:a4:98:23:ae:4f:d2:
                    17:82:b3:d9:76:22:f9:80:4f:fd:02:9b:ae:bd:e1:
                    d9:7c:5b:01:3f:f3:a5:8d:95:06:7d:94:0a:37:1a:
                    ce:01:2c:c1:0c:c6:0d:31:eb:2a:eb:30:84:9b:39:
                    66:de:0d:69:ec:40:7e:9d:7b:28:03:3c:0e:2f:f3:
                    0a:e9:77:ae:3c:3a:d6:1f:b0:28:c0:db:c5:a7:f9:
                    77:3c:3b:99:93:c1:6c:56:33:6c:5d:36:f7:6b:6a:
                    ad:cb:21:a6:ca:8e:38:d7:c8:29:27:41:e7:ee:f9:
                    f0:f1:46:bb:d7:7b:22:8d:1f:22:8e:4a:bf:17:21:
                    ba:8e:4c:9f:c9:45:35:a8:32:b7:1e:a5:44:0d:c6:
                    a9:10:c2:2c:90:fb:ad:7a:a5:ae:56:1f:13:4c:53:
                    4d:4d:45:9f:14:b4:f2:72:ce:1f:0a:83:01:6c:f2:
                    a5:f6:b0:de:61:ba:5a:ef:8c:5c:45:d6:69:39:63:
                    51:10:08:6b:00:d1:73:7f:12:c9:46:34:61:e8:0d:
                    48:19:a8:f3:fe:65:5c:43:64:28:34:7e:e9:44:2f:
                    f8:1d:5e:2b:dd:61:8f:96:7c:25:c8:7b:f0:93:3b:
                    8f:11:a3:8c:4b:23:52:61:1c:fc:b1:4a:8b:e4:52:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:FA:23:22:0A:8A:1E:16:79:91:ED:B1:47:1B:28:77:D4:83:04
            X509v3 Authority Key Identifier:
                keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:ee:b5:2b:de:0b:7d:f5:54:6a:24:07:37:df:aa:91:cd:
         ed:f3:6b:76:16:2f:b7:a9:84:f5:15:3d:65:ab:47:74:c6:2e:
         4a:64:7b:9b:4e:3d:5a:0e:5a:e7:3e:e7:1c:da:ef:f3:7d:a9:
         09:1c:90:cd:d3:a1:c2:70:23:d0:87:f5:47:11:d5:2e:27:f5:
         a0:81:ba:af:6f:b7:0a:d4:dd:83:5e:9b:60:99:e4:95:49:d6:
         97:bf:28:e3:ba:ae:c9:7b:f7:97:c1:f3:66:e3:4c:20:74:58:
         b0:df:6c:ff:2b:f6:60:48:60:ed:01:f5:72:bd:6f:48:71:e2:
         0a:68:51:ed:6e:fe:84:05:08:bd:03:26:bd:1c:e2:8e:37:a6:
         4d:85:6e:8e:3c:61:e3:a0:05:61:39:51:c1:89:72:98:9a:89:
         e3:6b:77:c8:bb:85:a2:89:2d:68:8d:07:4c:be:fb:97:08:0f:
         5e:25:8a:cf:6e:9e:7f:77:91:45:96:0c:4d:bf:20:68:27:3c:
         1d:29:91:e0:d8:45:29:4b:23:bb:0c:23:5e:67:66:1d:e4:f2:
         c9:ed:30:03:67:14:0a:70:d4:7e:76:d1:6b:22:52:a0:52:28:
         c5:0e:cd:06:79:f5:12:38:ff:00:4a:2f:12:51:a7:51:24:30:
         76:cf:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:29 2025 by rpki-client