Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File:                     ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier:          kpl5jOLTu57NpwBCOzv1kLMMai7GIk7H9M3ttQtES94=
Subject key identifier:   46:D9:6C:F3:67:3F:F9:4E:32:C9:A1:BE:E1:54:99:4C:FE:A0:84:17
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer:       /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial:       019844087002647994652B30D9F1B8C283BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number:          160E
Signing time:             Sat 26 Jul 2025 00:01:00 +0000
Manifest this update:     Sat 26 Jul 2025 00:01:00 +0000
Manifest next update:     Sun 27 Jul 2025 00:01:00 +0000
Files and hashes:         1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=)
                          2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=)
                          3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=)
                          4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: pRWtCJGAfLY+j7OMAcc9Yv80sVPjs/eZh/exsXyF2g0=)
                          5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:08:70:02:64:79:94:65:2b:30:d9:f1:b8:c2:83:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
        Validity
            Not Before: Jul 26 00:01:00 2025 GMT
            Not After : Jul 27 00:01:00 2025 GMT
        Subject: CN=46d96cf3673ff94e32c9a1bee154994cfea08417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:2a:17:b5:82:c9:4d:47:49:ae:57:50:1b:
                    cd:55:4a:e3:57:09:74:f5:a1:79:db:4a:29:5f:ef:
                    49:9c:71:b2:68:96:93:11:d8:08:a6:d4:88:8d:52:
                    8c:46:0c:5f:41:44:59:7d:a4:a8:0c:66:37:96:d6:
                    b0:e0:fe:11:4b:07:87:af:98:62:28:7b:7b:df:c0:
                    5f:61:ec:4a:79:45:4d:49:63:6c:e7:ed:db:ba:e4:
                    63:90:7b:7e:10:ea:95:55:0c:0a:e1:9b:ed:03:7c:
                    9a:48:08:d1:6b:27:76:6a:81:08:d3:18:72:8f:95:
                    89:6a:f1:05:fe:a7:5a:99:85:f6:10:6a:b6:ba:4b:
                    60:4a:79:83:d1:1e:3b:c4:cc:88:34:53:50:5c:08:
                    0e:20:39:58:5d:e9:08:25:4f:18:88:e2:fd:c5:69:
                    d3:8e:58:d7:d1:25:6c:8c:cf:35:c9:45:15:ad:ff:
                    bb:1c:1d:fc:a2:58:56:7a:8b:1a:87:8a:da:fe:90:
                    57:69:6e:d3:a2:b2:ca:9a:2f:d5:0d:da:a5:31:29:
                    8c:4f:35:0a:a7:ef:c8:ad:c4:15:d6:89:43:4a:2e:
                    14:b2:5a:9d:a5:1a:50:af:23:dc:ac:6d:f1:5c:45:
                    e4:36:c6:f0:65:2d:44:b6:ea:d2:38:e7:cd:c9:fc:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:6C:F3:67:3F:F9:4E:32:C9:A1:BE:E1:54:99:4C:FE:A0:84:17
            X509v3 Authority Key Identifier:
                keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:87:4c:e8:25:b0:3e:ab:bf:34:a8:5b:09:b5:97:45:06:
         3e:e4:52:9d:fd:7d:e0:bc:b4:fb:8d:9a:da:b8:24:64:c8:8e:
         4d:35:5c:cc:43:cc:c2:7a:18:83:7a:7e:ee:bd:eb:10:69:af:
         f1:dd:3f:83:15:46:c6:77:ff:e7:9d:e0:9b:01:1e:b0:e2:11:
         e9:69:cc:3b:d9:42:87:af:b0:bd:73:a9:a8:ab:8e:d9:98:76:
         0c:b9:d2:57:c2:96:97:ed:fb:1c:db:80:ad:8e:7e:43:db:a6:
         0b:4e:53:c8:8c:ab:90:f5:39:38:eb:e1:a1:f4:b3:1b:47:e9:
         97:b0:cd:54:ca:79:03:a9:c0:20:43:50:13:81:0f:eb:0d:70:
         37:f1:1e:82:2e:77:f5:ef:76:34:30:51:a0:94:b0:21:93:18:
         e8:72:37:1f:0a:02:7d:d9:11:48:fd:2e:c0:c7:af:cb:53:55:
         5d:06:d3:f1:8c:44:26:21:b2:e2:96:7f:31:d7:09:8a:b5:4c:
         d1:5a:58:af:92:f0:84:cc:56:6b:e0:0f:71:27:07:92:d3:14:
         10:5b:d5:99:1a:4e:e1:a4:94:73:b7:d2:2a:d5:9f:ce:cc:22:
         e0:da:e1:46:f2:4f:6d:74:c6:f6:a0:d2:dd:2f:a2:a9:d5:00:
         70:32:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:08:24 2025 by rpki-client