Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File:                     R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier:          pU9352eTt+S0y5S78Jz8lE6Jiop71cZx+ewIXb1miK8=
Subject key identifier:   18:1E:21:4B:78:32:AC:5D:6D:E8:EC:F7:A4:90:E0:2F:FA:0D:CE:10
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer:       /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial:       0198D5BBACF9C7D259088173354BE6D0406C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:43 +0000
Files and hashes:         1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
                          2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: EpcxnEuXzd1JGX9RTTYjLAMKqGvKmNsqkO7DaRFiHuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ac:f9:c7:d2:59:08:81:73:35:4b:e6:d0:40:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
        Validity
            Not Before: Aug 23 07:01:43 2025 GMT
            Not After : Aug 24 07:01:43 2025 GMT
        Subject: CN=181e214b7832ac5d6de8ecf7a490e02ffa0dce10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:f0:75:9f:3e:98:ee:e3:ff:01:83:34:32:
                    45:a3:eb:73:77:6b:e2:ac:2b:52:2a:bd:1b:b2:d3:
                    16:fa:d0:39:72:68:6d:13:61:3a:76:a6:ab:a3:0d:
                    5e:08:7e:c3:fc:7b:45:dd:0b:1e:53:35:57:07:75:
                    d3:31:fe:84:98:d5:f6:f5:5a:10:9a:95:57:1c:08:
                    48:1f:10:1e:36:68:d3:63:f1:70:54:c6:41:e8:0d:
                    e6:e6:ac:4b:48:0d:6b:19:75:4b:73:ce:f6:57:71:
                    a6:a5:46:eb:96:4c:61:ca:15:d3:0b:38:21:60:fa:
                    12:64:8f:68:3b:91:71:38:c2:e7:1c:2b:db:a8:dd:
                    c1:ec:a8:e3:b6:7c:21:4c:1b:d1:04:a7:7e:3d:e3:
                    be:0a:d1:a8:a8:d9:1c:0f:4b:14:e4:92:79:4c:ab:
                    3c:cb:50:d4:04:c0:4a:3a:02:38:34:25:eb:cd:11:
                    67:4d:56:bb:9f:0c:5a:c8:25:80:00:a8:a7:8c:3a:
                    b7:94:d1:cd:c4:87:2f:c3:71:7a:e9:29:1d:98:7c:
                    70:c0:24:39:25:12:c4:34:da:4f:0c:6f:3c:0d:9b:
                    9d:50:17:fb:ee:0c:af:ff:71:fd:4b:96:b2:5f:5e:
                    9b:fb:5c:f6:71:9c:9c:96:b8:13:5e:3d:2d:8e:75:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1E:21:4B:78:32:AC:5D:6D:E8:EC:F7:A4:90:E0:2F:FA:0D:CE:10
            X509v3 Authority Key Identifier:
                keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:0e:4e:6c:40:93:d1:5c:d7:35:58:c7:8d:25:8d:95:9e:
         b2:0c:46:0d:c9:21:f4:f6:c0:82:32:db:d7:60:4d:6d:f9:be:
         81:00:da:dc:68:5b:54:8e:00:ca:a2:55:21:f6:46:7a:44:7d:
         23:24:36:ce:7f:83:c3:a6:97:a5:dc:c5:2e:7c:94:81:16:5b:
         64:b2:7c:cf:77:57:21:d5:8d:26:32:3c:99:9b:17:9c:63:58:
         dc:30:9f:2d:a6:d8:ad:f1:4d:27:e7:30:6c:9e:7d:49:ba:90:
         df:3b:59:d0:65:62:ba:26:24:73:d0:ee:76:a9:de:68:0a:5b:
         98:48:99:a4:4f:87:bc:6f:d6:c3:e3:43:57:0c:14:63:52:43:
         3e:00:f4:70:ac:1d:24:de:e0:56:fd:7d:0d:c8:94:c9:b4:b0:
         95:bd:39:81:95:49:c2:3f:9e:92:b6:c0:4a:91:b2:fc:07:df:
         26:2f:45:eb:9a:19:93:a9:52:da:b0:69:3d:47:3e:dc:84:97:
         3c:40:af:ef:cc:01:82:d0:58:ff:89:09:2c:7d:f5:e7:f2:1f:
         6c:fc:af:ad:f7:c4:a4:e7:ac:01:8b:d7:71:ac:e8:a0:d3:0a:
         0f:36:cd:94:ef:9f:ab:2d:55:3b:4a:9b:7b:9e:1d:dd:5d:8f:
         ef:8d:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:05 2025 by rpki-client