Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File:                     muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier:          Fex1nhEHtyVJB9QbM7blWf0uzSXKsb5lmwZpJR3M1yk=
Subject key identifier:   1B:F5:D8:BE:94:72:82:6C:E4:22:B8:0D:C6:85:8A:29:D1:D7:67:C6
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer:       /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial:       0198D2F12316D6891CB59BFA8D9AF114CE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number:          164A
Signing time:             Fri 22 Aug 2025 18:01:15 +0000
Manifest this update:     Fri 22 Aug 2025 18:01:15 +0000
Manifest next update:     Sat 23 Aug 2025 18:01:15 +0000
Files and hashes:         1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
                          2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: jpnEKVuWLmKV1Le+0cKDQ52gLp2Zh31RyXZai3x5qrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d2:f1:23:16:d6:89:1c:b5:9b:fa:8d:9a:f1:14:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
        Validity
            Not Before: Aug 22 18:01:15 2025 GMT
            Not After : Aug 23 18:01:15 2025 GMT
        Subject: CN=1bf5d8be9472826ce422b80dc6858a29d1d767c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:b4:5f:74:91:5f:92:fa:01:1b:38:5e:09:
                    e6:2c:e9:da:fc:38:82:e1:7d:6d:e9:7e:2b:04:b4:
                    67:89:dd:d8:94:7f:e0:c8:70:86:1b:96:fa:13:c8:
                    a0:51:24:67:9c:24:15:8e:a7:a7:c8:68:f4:eb:2e:
                    67:aa:1a:92:59:01:7b:45:81:2b:57:19:e6:9c:1f:
                    78:fb:60:75:30:4c:af:47:83:d4:c6:40:60:e4:ad:
                    14:af:a9:7d:d5:54:e9:5d:18:0a:07:1a:fd:63:f4:
                    8f:54:e0:94:e6:22:21:1a:20:f1:d4:3d:6c:22:76:
                    61:47:51:b6:93:a2:26:a8:4c:eb:b0:d3:94:16:e9:
                    3a:a3:81:6b:e1:00:73:f3:9c:63:50:a0:b5:29:d0:
                    f3:2c:2b:63:3d:0c:72:5a:67:34:ec:1b:eb:36:27:
                    97:86:18:11:34:cc:97:cb:8a:fc:3b:73:dd:60:64:
                    ea:50:e7:e2:5e:c4:e9:a1:e4:15:90:56:39:c4:42:
                    e0:5f:ca:77:f5:85:5d:da:7f:92:0f:df:ec:4c:1f:
                    0e:7b:5a:aa:78:7a:78:9f:77:97:55:f6:c6:3b:a3:
                    eb:e0:5f:69:1a:64:7f:d1:1e:fb:50:cd:2b:5b:32:
                    fc:06:5d:42:8a:31:66:8c:8e:12:4a:bd:ce:db:a2:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:D8:BE:94:72:82:6C:E4:22:B8:0D:C6:85:8A:29:D1:D7:67:C6
            X509v3 Authority Key Identifier:
                keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:c2:5b:4c:5b:5e:af:b5:2f:ad:95:be:cf:78:09:0a:c1:
         99:a2:e4:0d:91:2a:9f:0c:85:97:81:03:c2:4d:e8:6b:f2:f3:
         4e:f6:b1:33:b0:a8:49:02:ef:45:db:4f:d9:3c:a8:cc:d1:1e:
         fc:cd:e2:fd:81:f4:92:7f:8c:1e:c7:c3:29:76:48:68:59:a2:
         b3:fa:05:75:4a:e5:a5:f1:f3:49:26:13:ab:b8:bf:5d:0c:2e:
         5d:d5:74:6b:7e:80:3e:6b:1a:56:99:de:90:4c:6f:b3:6c:90:
         4b:81:8c:40:65:3e:52:48:d6:60:f6:2b:d3:93:01:3b:9a:2f:
         0c:b3:a6:72:dd:1f:24:f8:24:be:0e:4d:65:64:a1:fb:29:af:
         12:a3:ac:b2:69:42:e0:ab:41:1b:d9:25:ff:01:c5:76:fc:38:
         c0:8f:5d:14:59:52:fc:5c:7a:a1:bd:be:0f:b2:b1:cc:8c:11:
         47:99:00:12:9c:da:9f:ac:71:6f:39:ec:fc:bb:62:ca:47:34:
         72:80:9d:a0:c8:45:80:7f:4b:1c:3d:70:f2:5a:37:85:98:d2:
         58:de:84:51:fe:0f:23:1b:b5:77:93:fa:bf:d5:9e:38:94:86:
         5b:06:bd:9f:17:49:fa:a5:60:b6:3d:06:57:53:86:1a:e3:56:
         30:42:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 02:06:46 2025 by rpki-client