Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File:                     a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier:          cvlehJeVdunr4un+zqxTH3zbPuNXX2/4pqrxAAymjro=
Subject key identifier:   A8:F1:7E:BF:0F:FE:EB:BF:DE:EF:7A:74:AE:F8:0D:4D:B3:AF:D4:16
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer:       /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial:       019855324C46D3067BB15EB924B54686DC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number:          160B
Signing time:             Tue 29 Jul 2025 08:00:16 +0000
Manifest this update:     Tue 29 Jul 2025 08:00:16 +0000
Manifest next update:     Wed 30 Jul 2025 08:00:16 +0000
Files and hashes:         1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
                          2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: pvILn5cyK1vy7QPIJItN409aUKRs2pVHm8RdyJPr4yM=)
                          3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
                          4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:32:4c:46:d3:06:7b:b1:5e:b9:24:b5:46:86:dc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
        Validity
            Not Before: Jul 29 08:00:16 2025 GMT
            Not After : Jul 30 08:00:16 2025 GMT
        Subject: CN=a8f17ebf0ffeebbfdeef7a74aef80d4db3afd416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:54:75:ca:8a:07:4b:b3:66:3c:b9:d9:e1:
                    8d:ad:86:49:b2:ee:20:e0:2c:03:b0:71:9b:e6:61:
                    4b:b1:96:1b:20:fa:53:85:0e:2f:e5:82:cc:87:61:
                    f2:af:62:a5:e5:a3:54:d7:9b:41:9f:b3:5f:7e:21:
                    ab:2b:cf:2c:52:8c:e5:2b:a7:f3:70:e9:32:8d:4f:
                    ba:46:a1:24:f0:91:13:a8:6d:3d:41:0c:04:dd:09:
                    da:94:b1:97:2b:d9:02:c6:1f:ed:0a:80:b4:34:b2:
                    d5:c6:5f:d4:7c:9a:8a:f4:91:fa:86:7b:8d:c5:2f:
                    05:56:be:9b:ce:39:99:b8:e4:c9:56:c1:e2:42:27:
                    f7:81:79:ea:91:b3:35:e7:cf:fe:65:63:f1:2c:66:
                    5f:b7:a4:6d:94:71:0f:4b:e9:e1:a8:12:eb:fa:3d:
                    f1:e4:2c:cf:ce:9a:82:bc:83:d9:71:21:a8:c9:79:
                    48:9f:dd:c5:c9:55:57:ab:1f:1a:45:96:ba:d1:d6:
                    5b:51:a8:b5:33:39:f5:a3:c4:ba:14:17:84:3b:5e:
                    80:08:d8:d5:9a:b6:42:d0:1e:0b:58:84:2b:50:34:
                    af:00:17:5d:40:f4:49:97:4e:af:45:8a:ce:7c:fa:
                    7d:eb:4d:59:05:8a:91:0a:b1:cf:f1:d7:f9:31:f7:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:7E:BF:0F:FE:EB:BF:DE:EF:7A:74:AE:F8:0D:4D:B3:AF:D4:16
            X509v3 Authority Key Identifier:
                keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:fb:b0:c5:f2:c7:b9:2b:d0:93:b3:f3:52:d3:22:05:65:
         bc:2e:03:a0:7e:1d:11:01:f6:00:4d:33:d2:72:76:dc:9c:9c:
         88:89:50:8c:07:b1:64:c2:31:d3:70:c9:dd:92:01:5a:8f:f0:
         d7:32:11:ca:4c:b9:32:00:38:a1:8b:78:e1:fc:9c:52:5e:02:
         75:9a:7e:d7:26:c1:5b:15:b3:70:07:96:fa:b1:da:9c:35:4a:
         d0:c2:a0:b9:2f:82:11:aa:a7:5f:16:c9:f6:0f:59:1f:7c:21:
         b9:43:e2:66:fc:47:15:2d:15:ff:5d:99:6b:c1:9c:0e:3e:57:
         bf:1c:da:02:f8:d7:de:e5:97:46:91:2e:83:af:b5:5e:ba:84:
         f8:f5:ff:31:ce:16:64:11:a6:ec:3c:fe:45:58:ef:76:7d:43:
         d0:7a:d8:19:85:55:1a:04:84:66:36:52:cf:c9:27:8d:70:73:
         75:22:92:d7:e5:63:ca:66:c4:14:e6:30:39:b0:d6:1a:39:e6:
         ce:60:c7:5e:25:35:a2:63:42:c0:ee:82:a8:0f:2c:a3:5f:f5:
         14:88:1a:fb:59:8f:5a:95:bc:0c:36:f7:23:fd:16:bd:71:3a:
         5e:ec:98:53:99:25:c8:db:34:50:fb:a2:f4:c0:07:b3:11:1a:
         0c:25:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:52:03 2025 by rpki-client