Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File:                     aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier:          q+Jo2gWlxl6qrXaJvxyGHKS8rucKY/KCSoNOH5JNduk=
Subject key identifier:   2E:DA:50:40:8D:49:6A:56:DA:3A:5C:A8:5A:80:40:01:8F:E9:45:D4
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer:       /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial:       0198D4E0C9A6A6AE2272EF7F149F0AD367C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:38 +0000
Files and hashes:         1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=)
                          2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: 3Inn+b/JHGt2zh2CGWM7vzlx+fPplYe3iyXdSeuD8iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c9:a6:a6:ae:22:72:ef:7f:14:9f:0a:d3:67:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
        Validity
            Not Before: Aug 23 03:02:38 2025 GMT
            Not After : Aug 24 03:02:38 2025 GMT
        Subject: CN=2eda50408d496a56da3a5ca85a8040018fe945d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e9:a1:6e:b1:2e:84:b9:f6:1b:0d:2d:c3:ed:
                    3f:19:c8:37:d0:09:0e:16:b2:da:25:b8:c0:9b:6b:
                    84:9a:25:00:15:53:d4:13:d7:10:34:c8:cd:1f:b6:
                    3f:a9:31:45:7e:7d:63:28:ff:df:f1:c5:f1:8c:ef:
                    ab:46:86:db:37:30:85:97:45:ee:81:f1:35:b5:11:
                    16:a9:76:81:d8:94:74:0d:0f:cf:fc:e2:2a:69:b1:
                    8d:ac:05:4a:c8:11:e2:b1:96:02:36:5f:3a:80:af:
                    95:d3:5f:9e:fb:54:81:71:2d:38:95:90:bb:4d:df:
                    f2:d8:3e:df:59:dc:10:f9:c8:9a:25:6e:81:42:5a:
                    de:55:f2:11:3b:4f:03:4e:05:9d:89:2d:1f:68:30:
                    1a:fe:ad:62:c0:ee:86:73:80:20:2f:43:f3:77:b7:
                    8d:4a:90:48:29:fc:08:45:f6:89:59:23:54:01:f7:
                    1a:da:7e:e8:ae:07:50:5b:78:1f:60:bc:13:59:de:
                    03:b6:b5:9d:e4:33:41:25:af:0c:9f:fa:63:82:83:
                    a5:74:8b:f1:b3:00:74:0e:ee:45:1d:7c:05:22:c2:
                    dc:a6:69:4b:41:cd:b6:9b:db:1c:a4:79:05:c0:28:
                    0e:c4:a8:a6:e7:5e:7f:a5:ed:22:6f:ac:bd:f8:06:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:50:40:8D:49:6A:56:DA:3A:5C:A8:5A:80:40:01:8F:E9:45:D4
            X509v3 Authority Key Identifier:
                keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:a9:d9:ec:e7:ce:c8:7f:0b:61:fb:b9:b0:db:94:f9:01:
         82:61:df:02:e5:cf:4b:9a:19:07:64:93:94:25:80:30:a3:c5:
         b0:d6:2b:4e:f8:6b:46:a0:1a:a5:26:6d:ce:f6:3c:e6:e9:44:
         70:d6:c7:a0:53:23:ae:87:06:a0:d9:6d:ae:21:36:9b:cc:84:
         5c:30:71:1e:fc:1a:74:08:16:83:c0:46:8a:54:1e:f7:b0:39:
         25:43:ae:95:bf:6f:6c:a3:11:67:8d:9a:57:8a:1c:cb:1a:52:
         cf:b5:cb:41:6a:d1:49:4c:50:58:64:e7:ac:87:36:84:2e:e1:
         7a:57:9e:32:bb:a9:26:f6:95:9d:27:bb:64:da:f8:9b:a5:ca:
         4b:c3:f4:8f:0f:2e:7f:0e:0d:32:d2:37:ad:e4:e4:6e:82:09:
         00:5f:f0:1f:c4:34:d3:a9:09:38:0c:79:14:e1:2d:74:1c:e3:
         f2:74:a4:ec:55:7b:a8:ce:65:af:7a:fe:c9:ad:70:97:8f:e8:
         71:6a:2e:e2:7a:36:20:e4:42:c0:48:98:71:be:94:2e:c5:5c:
         8b:ea:29:04:d1:ad:19:8a:e7:a7:15:12:67:18:0c:6b:36:c0:
         31:e9:ba:08:93:45:c0:91:4c:6b:30:6a:26:9c:37:52:50:7b:
         cb:a1:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:50 2025 by rpki-client