Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          JmmY6bqA5Rxaj+rq6muOCmKgsdhB2i/4mDekz0JhZ44=
Subject key identifier:   6C:62:4E:97:8F:A8:0E:D9:D8:8D:13:95:2B:07:5A:3C:1B:0A:45:A7
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       01992D4725CBCF918282E882CF496F824294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          167A
Signing time:             Tue 09 Sep 2025 07:01:01 +0000
Manifest this update:     Tue 09 Sep 2025 07:01:01 +0000
Manifest next update:     Wed 10 Sep 2025 07:01:01 +0000
Files and hashes:         1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
                          2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
                          3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
                          4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: iCj6cqdbRC/sZf8dHfqBdNukVspfLJSS2etEGiqHl3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:47:25:cb:cf:91:82:82:e8:82:cf:49:6f:82:42:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Sep  9 07:01:01 2025 GMT
            Not After : Sep 10 07:01:01 2025 GMT
        Subject: CN=6c624e978fa80ed9d88d13952b075a3c1b0a45a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:76:0f:0e:5c:d0:99:10:56:42:41:03:66:
                    d6:1b:c5:96:aa:0e:9b:cb:34:62:dc:fd:a1:ca:db:
                    34:d0:8e:1b:66:44:9d:a3:f0:ce:49:a4:d8:7c:c3:
                    dc:c4:f2:84:ed:fb:ce:67:3b:df:68:49:ff:c3:ab:
                    d5:bf:6a:1c:2e:22:25:aa:e0:ff:62:19:f5:5a:82:
                    c4:44:39:dd:2e:51:89:30:a2:c9:22:48:86:c0:d5:
                    37:0c:b4:be:05:17:20:ec:ce:5f:31:e0:3e:51:9d:
                    74:7a:49:37:87:20:8f:ca:dc:05:93:d1:32:a6:eb:
                    40:56:fa:32:94:d4:0b:36:aa:02:e2:79:01:43:0b:
                    1a:47:5c:6e:18:c1:a7:d9:93:d9:88:15:65:6a:3e:
                    7b:1e:26:bc:bf:17:69:e4:c0:12:c7:e7:5c:99:05:
                    1c:a3:8c:3c:7c:d0:89:2f:8a:08:00:91:06:60:69:
                    1f:6a:2c:e8:ad:d5:27:96:20:b1:25:2b:b3:93:08:
                    98:09:2b:55:f5:c4:3b:3e:f1:85:e1:64:f0:c9:8b:
                    30:a5:10:87:1a:6c:27:fc:27:d6:1c:ba:97:71:75:
                    7b:ae:78:54:bc:c4:fa:67:74:2a:6c:52:bf:75:1d:
                    e8:74:d8:e4:a2:aa:77:dc:70:80:3f:8a:17:a6:9e:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:4E:97:8F:A8:0E:D9:D8:8D:13:95:2B:07:5A:3C:1B:0A:45:A7
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:7b:84:97:6e:a1:f6:96:2d:99:32:7c:6b:1c:19:08:9c:
         84:08:23:c2:bb:62:96:f2:13:db:8d:8f:e9:e1:89:d0:d4:de:
         70:3a:a6:ad:2d:6c:8b:b5:35:35:9c:d7:f2:08:d7:a1:67:e3:
         b6:a4:fc:5b:21:82:aa:9c:5d:5b:48:5b:52:78:8a:b5:0f:e4:
         75:f7:df:69:39:5e:64:d3:ca:d5:68:7e:e1:a3:32:37:67:d4:
         36:cf:45:c0:7f:2b:fc:ed:1a:9f:9b:8f:54:3c:7f:61:96:5b:
         92:41:05:e3:1d:31:4b:b2:10:87:cd:06:36:67:23:a1:ff:df:
         c0:31:93:07:df:33:98:a8:c3:7e:5e:ad:58:37:f7:15:6a:13:
         3e:65:e3:8c:22:1d:1c:32:ad:0e:bb:ad:58:f3:03:3c:e5:85:
         14:48:c9:a2:df:bc:a3:67:5e:5b:b9:0c:85:f9:e0:05:0b:a0:
         6f:d2:f3:36:03:cd:92:53:7d:15:03:be:a0:83:ed:f5:e4:12:
         a6:84:b0:f6:e5:54:b9:2f:c5:0e:57:ae:13:55:46:7c:6d:3e:
         89:41:5a:24:34:4b:5a:c9:11:c6:97:e6:6a:57:07:7e:41:2f:
         b8:c2:6d:b0:69:f7:c2:9d:d9:15:3f:f5:84:00:75:43:03:46:
         95:78:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:21:20 2025 by rpki-client