Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          7g4KwQiAbLmtNLetQS9WP4gpd38UkO71abnzYSKvHeY=
Subject key identifier:   9B:D2:27:24:17:00:D3:61:C9:A6:06:CE:2B:ED:55:98:11:AE:5B:FB
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       0198469B42A6B50125765A4D0BD256020739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          160D
Signing time:             Sat 26 Jul 2025 12:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:36 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: xTq0OLtV1+KO7SeaHSeCsTUzgBiztgDbX79WWbDbRYQ=)
                          2: 6fR_eS1-S-5XOCu6-_w9WFRAsnM.roa (hash: QrWF8qdwleA9HW7Gs5bTLxZ2kKrxxkYNg+tfhj45HxE=)
                          3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
                          4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
                          5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
                          6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:42:a6:b5:01:25:76:5a:4d:0b:d2:56:02:07:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jul 26 12:00:36 2025 GMT
            Not After : Jul 27 12:00:36 2025 GMT
        Subject: CN=9bd227241700d361c9a606ce2bed559811ae5bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:ee:48:f9:06:31:c7:b4:a8:71:6c:ec:1a:
                    f8:28:00:2e:8e:7c:80:be:a2:3f:d7:78:eb:07:5d:
                    a2:d3:a1:a6:23:8f:89:59:6c:11:84:93:a1:b0:6b:
                    24:2f:e2:21:ff:1d:dc:a6:bd:bf:85:ca:2a:48:67:
                    b4:fb:f8:74:70:56:97:3f:f2:90:a1:a1:f5:21:55:
                    4c:5e:20:cb:2f:a3:2e:cc:36:51:8f:bf:c8:ee:49:
                    d0:47:85:73:ae:2a:20:d4:74:16:51:9b:fd:55:c5:
                    5e:c4:c1:c3:bf:dc:56:d3:38:13:91:20:5b:a9:4c:
                    e1:a9:a6:a5:37:b1:c6:02:cc:a6:ec:35:b8:ba:b7:
                    f2:19:2b:be:be:05:77:e6:c0:ff:99:c6:d0:e9:cb:
                    c2:0b:a6:1d:ba:ba:41:69:d2:1c:97:50:58:07:19:
                    e5:53:c1:fa:4b:8b:21:67:e5:f9:46:6f:5b:6c:15:
                    89:51:47:89:12:55:e0:dd:84:6e:97:a4:5b:0d:cf:
                    21:ba:33:27:fd:49:cb:e2:5a:81:7c:ea:6b:91:b9:
                    bd:82:d7:d6:8f:52:01:bb:17:71:cb:13:23:39:17:
                    5e:e5:c1:3c:a6:c9:b8:ad:b3:c6:a5:f6:5c:95:ce:
                    b8:d4:b2:55:cb:cd:87:70:dc:2b:da:22:76:c0:c7:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:27:24:17:00:D3:61:C9:A6:06:CE:2B:ED:55:98:11:AE:5B:FB
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:21:57:30:31:52:e8:34:45:95:51:a9:8d:fa:8b:25:5e:
         b3:df:cd:4f:2c:a1:72:2b:7a:1a:08:15:61:bf:87:e6:6a:60:
         73:6d:08:2c:a9:f4:95:91:eb:aa:9d:3c:0a:9a:e1:e6:4c:12:
         61:05:72:45:bc:05:ac:2e:18:bd:e6:2a:c6:fb:4b:a4:63:c4:
         33:75:44:f0:e0:64:3a:21:0d:6f:ef:ea:ab:cc:5d:55:d2:90:
         85:9b:33:42:67:d9:24:45:91:4e:3e:4a:7c:74:a7:01:d0:c4:
         27:41:a3:51:2c:a9:6b:db:4e:68:57:84:59:30:1d:8a:81:03:
         2a:7b:f5:b2:2d:a1:26:1a:4e:38:a7:de:c8:9d:31:a9:52:01:
         b8:ae:56:ba:7a:7b:1f:1e:5d:ec:1e:45:7c:98:13:91:c7:a1:
         36:f8:08:74:2e:ae:21:43:7c:1b:20:42:17:df:9d:ad:83:86:
         de:30:75:4f:08:0a:df:24:6d:49:b4:76:68:bc:58:82:6e:c5:
         ff:b9:19:c1:47:43:76:ed:34:19:a2:43:d2:48:32:69:b3:90:
         35:c8:7f:e0:0d:5b:b4:77:6a:47:93:fb:85:c5:15:a7:b2:0f:
         a8:c0:19:41:f2:97:b3:c4:e2:03:9e:8f:66:a8:43:bb:e6:8f:
         04:3b:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:59 2025 by rpki-client