Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          jzu3pfiCWMInt6mnTTTbwl0uhQ/ddQqb1qzqQuWfA2s=
Subject key identifier:   CE:69:44:1B:89:7E:C4:F9:00:83:79:AA:C4:8C:77:8D:C3:69:2F:51
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       0198D8845DACEA8C19C309A719EF447A04A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 20:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:10 +0000
Files and hashes:         1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
                          2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: zwTcVp/yk27YEARumKGI5br9R8c7N25c9kinaLHWkew=)
                          4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:5d:ac:ea:8c:19:c3:09:a7:19:ef:44:7a:04:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Aug 23 20:00:10 2025 GMT
            Not After : Aug 24 20:00:10 2025 GMT
        Subject: CN=ce69441b897ec4f9008379aac48c778dc3692f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:06:6e:ec:e1:0d:c7:e6:04:51:d7:8e:69:
                    32:16:a3:79:ee:a4:1a:12:4d:f5:f6:28:86:5c:39:
                    72:d8:f4:cf:dc:5c:07:62:f5:8c:ab:05:49:e6:9d:
                    0b:55:e5:65:f2:6f:c9:44:b6:c6:f0:4b:67:27:16:
                    1a:d1:ad:08:fe:11:f2:4e:57:e8:6f:26:91:d2:d5:
                    5f:93:c4:7b:81:09:17:f3:4c:07:18:18:d0:c9:a5:
                    6f:09:6c:be:e9:87:9c:21:49:6d:2a:75:a3:eb:52:
                    73:c0:c3:d6:54:aa:84:84:27:34:16:0b:a2:29:59:
                    45:a8:55:0b:05:6d:f3:34:d3:1e:e7:a5:be:a8:07:
                    9b:45:47:21:7f:63:f4:2c:60:d9:c1:f4:61:f3:be:
                    24:b9:08:54:94:ec:07:21:78:d5:ad:1e:20:f6:00:
                    9f:2a:c3:49:14:70:c4:2d:4d:7a:13:a8:a7:34:63:
                    7b:a5:0b:8d:16:da:b4:55:71:9c:aa:c2:2d:9b:44:
                    08:f6:76:cd:2c:38:de:e9:8b:ff:97:7e:10:57:2c:
                    db:7e:33:0a:99:fb:f2:13:13:fe:19:4c:ca:41:0f:
                    41:d5:ff:06:94:07:d8:f7:d2:36:26:c4:0b:f7:94:
                    75:b1:87:3a:f1:d2:2b:8a:19:88:d6:98:33:1d:7b:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:69:44:1B:89:7E:C4:F9:00:83:79:AA:C4:8C:77:8D:C3:69:2F:51
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:ef:99:16:2f:5e:a4:af:ee:4b:3f:1c:8e:e5:90:45:ad:
         84:81:32:52:af:26:ee:e3:c5:c4:9d:41:4f:24:42:cf:cc:42:
         60:92:28:58:27:5f:63:21:1c:8a:10:65:f6:08:30:95:3a:09:
         8a:5f:bf:ab:74:1b:00:8f:10:bb:53:e4:2e:cf:e9:56:99:47:
         e2:e1:a2:68:62:97:e2:1d:6b:fb:be:81:0c:d0:7d:d9:d2:c6:
         0e:b0:45:d8:2f:3a:37:e4:eb:a6:87:e2:d1:5a:b8:22:f1:03:
         2a:10:13:bf:c6:03:44:ae:69:26:23:8d:9c:38:e3:0a:71:17:
         2f:7f:7d:ab:9b:8e:b8:3b:70:02:44:a1:04:42:19:2a:27:6d:
         35:a8:6e:dc:7f:74:6d:08:a0:e6:b4:4d:11:13:7c:df:50:be:
         d4:8a:52:00:78:b6:75:70:cf:98:9b:59:62:3b:a9:2b:0e:21:
         6f:6c:5d:41:24:a9:91:8c:8d:d7:8b:f8:dd:5a:5c:22:66:7e:
         6e:f6:ae:b8:9e:3e:8c:af:39:a4:6d:05:14:a0:24:74:58:8a:
         1b:17:0f:61:24:5b:24:9f:d0:90:76:8f:a2:7b:e2:f6:3d:87:
         91:1e:0d:30:82:69:80:fc:89:51:15:3e:4b:97:d3:06:b8:1b:
         ae:fc:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:12 2025 by rpki-client