Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File:                     bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier:          AM+vSzRVAJeUotsnyseBomDmhyLr0sKVr5NKpCg+b6o=
Subject key identifier:   4F:66:7C:86:B7:43:99:18:72:CA:13:44:49:B1:A4:1F:08:B6:A5:30
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer:       /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial:       0198D65F9F0D83F8FC58B769EF3CD6A95A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 10:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:47 +0000
Files and hashes:         1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: EwzT4gSYb9grjKKEyapvmuTGdayEXo/q2UOY+OuwGQw=)
                          2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:9f:0d:83:f8:fc:58:b7:69:ef:3c:d6:a9:5a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
        Validity
            Not Before: Aug 23 10:00:47 2025 GMT
            Not After : Aug 24 10:00:47 2025 GMT
        Subject: CN=4f667c86b743991872ca134449b1a41f08b6a530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:b3:6c:12:a2:6d:90:51:dd:51:53:e7:3d:
                    eb:f4:d8:76:e5:9e:8e:d2:c6:53:bb:fa:11:76:42:
                    ce:80:85:b7:1d:62:3f:df:da:eb:b4:88:ed:0a:a9:
                    2c:49:67:ba:40:81:29:84:70:93:94:6c:a1:b6:8b:
                    11:2f:a2:ff:d6:58:bd:43:b7:48:69:d1:b9:f7:96:
                    24:f8:16:96:b8:f4:06:7c:d7:b6:ad:f0:a6:0a:7c:
                    fd:c1:d6:0b:6d:df:cf:4c:06:3b:44:5b:dc:38:32:
                    6b:24:9a:22:9d:90:06:df:57:01:6e:77:e2:4e:50:
                    85:4c:30:2c:18:06:75:a1:ea:2b:21:47:5c:f8:64:
                    88:08:e3:2f:64:1d:86:52:83:d8:bf:11:fa:6e:bc:
                    7b:0d:eb:94:5f:0f:5a:cc:41:e0:69:2f:cc:be:ec:
                    a1:ec:b8:d4:7d:74:36:dd:95:38:5e:ef:aa:80:da:
                    99:43:0e:cb:c8:45:9d:c2:25:e8:9e:7e:a4:63:81:
                    00:08:94:a8:cf:72:25:33:2c:6b:1b:d4:79:48:19:
                    0b:83:53:90:63:b3:bd:33:83:2a:9c:02:85:c6:30:
                    1d:d5:ec:66:87:39:6f:0a:20:67:63:5f:27:db:7f:
                    00:0b:69:55:b5:f7:af:02:bc:2e:57:d6:45:42:93:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:66:7C:86:B7:43:99:18:72:CA:13:44:49:B1:A4:1F:08:B6:A5:30
            X509v3 Authority Key Identifier:
                keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:29:cb:ab:26:e4:1c:68:d7:9a:cb:93:be:f9:bc:ae:35:
         e2:d2:01:09:2c:09:81:4d:2b:d5:24:0d:3b:60:0f:2d:14:ee:
         c6:77:aa:8e:17:d6:30:47:08:85:9f:3e:66:44:4e:d0:08:51:
         d7:60:57:b0:3a:4e:34:1a:7e:3d:ac:3a:d2:54:e3:e3:1d:a5:
         20:c2:36:58:34:32:eb:8f:d5:41:ea:68:7a:bd:f3:3f:0a:8c:
         6b:51:1f:b2:75:b8:ce:9c:d4:3b:dd:30:50:b8:64:33:b7:09:
         29:07:0a:ca:46:f0:cc:9e:22:19:7d:8d:65:dc:a8:90:ab:d3:
         d9:5a:3a:d9:ee:02:c1:e5:d0:27:16:79:a9:3f:99:9c:03:39:
         f2:ca:a2:38:17:3e:5c:34:ee:00:c5:2b:24:1f:f4:4f:88:80:
         55:c9:10:21:f1:3e:dc:ac:f9:f9:1f:a9:57:15:f3:65:1c:1c:
         62:ed:40:f9:eb:9c:65:3f:fa:5f:bd:2a:57:49:15:bc:11:d1:
         56:26:6d:3a:cc:c2:12:d1:d8:f1:ba:6e:4e:36:42:91:aa:b0:
         8e:68:b4:f6:39:be:83:4c:95:bd:3a:cf:fe:83:2b:da:8a:58:
         20:0e:5e:cb:a7:7e:8a:ef:a2:5d:e6:d4:1e:d0:b5:02:84:e4:
         16:ca:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:04 2025 by rpki-client