Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          SCHfCgwZsDxUsjsDMiHm5a2EHxdxTYZWZcI1KsMGYP8=
Subject key identifier:   AC:94:9B:8E:6C:6E:2A:9F:B8:E1:B1:0A:A7:02:F5:15:69:E0:A9:3A
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       0198398478149508D76AF07409F774A6FE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          161F
Signing time:             Wed 23 Jul 2025 23:00:39 +0000
Manifest this update:     Wed 23 Jul 2025 23:00:39 +0000
Manifest next update:     Thu 24 Jul 2025 23:00:39 +0000
Files and hashes:         1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=)
                          2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=)
                          3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=)
                          4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=)
                          5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=)
                          6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=)
                          7: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: n0Ql0KGfH61HQgk4dEgXlKMTMDlvwUAFvPuXVS+mu0M=)
                          8: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=)
                          9: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=)
                          10: tB4Gwrhu06E3QsikW_2RR3FHl9c.roa (hash: rpxh3Xft3stAaYfa6mVzKU7ubzyBU16e4wSptWKVCrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:84:78:14:95:08:d7:6a:f0:74:09:f7:74:a6:fe:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jul 23 23:00:39 2025 GMT
            Not After : Jul 24 23:00:39 2025 GMT
        Subject: CN=ac949b8e6c6e2a9fb8e1b10aa702f51569e0a93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:31:09:c8:99:f2:45:91:7e:e2:c5:b3:d0:
                    8b:ec:ab:fc:c8:54:e9:a8:1f:ce:fb:5d:a6:10:41:
                    9a:75:7d:32:f2:95:54:40:e7:59:2c:4a:2b:ff:53:
                    09:d0:8e:20:2d:ce:bd:cd:ed:0f:dc:b3:d1:f2:e6:
                    08:72:14:e1:62:b9:1b:4f:08:42:d7:74:2b:5f:95:
                    74:65:f7:1d:c1:b3:37:ad:2a:87:ca:08:c1:a6:f4:
                    b2:11:f1:bf:f3:72:0d:54:c6:9b:0f:fb:c2:f8:b6:
                    48:28:fa:b8:35:e6:3f:b4:40:81:0e:18:f9:28:18:
                    5a:e9:db:a2:34:45:d1:f4:47:f1:fc:8b:a8:9c:8e:
                    c1:7a:bd:dd:14:8e:00:f7:b1:e7:74:c5:c3:fd:db:
                    da:cb:72:3c:80:27:e6:95:0c:3f:62:a9:b2:6e:92:
                    60:fe:95:e2:05:6b:6d:f5:79:f7:c2:a4:ec:cd:f3:
                    8e:60:32:9f:3e:57:88:0d:53:7f:e8:52:40:63:97:
                    dc:ed:8b:0b:0a:b8:46:57:f1:59:ab:af:0d:49:5c:
                    ea:bf:66:39:98:d5:41:10:48:0c:24:a8:1b:ac:af:
                    d1:65:09:f6:c8:00:cd:09:78:65:e0:b0:cf:4b:c9:
                    2d:82:9d:80:2f:0d:88:7a:ab:fd:ce:ec:ad:a4:7e:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:9B:8E:6C:6E:2A:9F:B8:E1:B1:0A:A7:02:F5:15:69:E0:A9:3A
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:14:62:b5:98:42:e1:64:17:d5:6c:4d:37:14:41:18:3a:1b:
         3f:2b:ff:b3:2d:4d:72:1a:41:d1:0c:ff:5d:6b:9c:75:fc:26:
         21:33:dc:76:67:b1:41:19:82:aa:67:ff:77:df:15:2e:8f:7b:
         a5:b3:8f:8e:b1:a4:73:f9:03:f4:4c:a0:7c:d8:5e:16:26:95:
         93:d0:ae:b9:3f:3b:12:6f:e1:42:29:6b:ab:4e:c1:17:57:06:
         53:0a:76:7a:f9:30:88:63:eb:57:6e:0d:a3:05:80:db:ed:87:
         fb:a4:11:77:45:38:51:3b:d3:ff:ba:9a:c5:fc:87:57:1f:9e:
         21:b4:ae:93:c6:d7:ee:69:7d:a2:26:00:1e:5a:00:c9:e1:bc:
         be:b4:63:53:cf:de:e5:c8:b0:07:c3:ac:52:f1:37:0f:05:8a:
         66:99:4a:1c:e6:f2:cf:28:43:38:76:09:c2:03:a9:ee:83:e4:
         6e:fc:16:ba:6c:39:53:43:43:83:7e:da:ce:67:ac:79:17:3c:
         f9:c2:6f:e6:7b:e8:da:0a:9d:25:5f:98:a2:d9:33:84:82:73:
         76:e3:6d:a0:13:79:c2:81:fa:ba:a0:cf:0d:47:9a:6d:65:d7:
         16:68:f3:1c:84:64:cb:ca:c9:34:03:62:ba:52:fb:8e:cc:6a:
         0a:e7:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:55:01 2025 by rpki-client