Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          L/8ppTXTemsDckEc4hSilqYIo5bIlZnKgqHuOQWiaOA=
Subject key identifier:   6E:4B:DA:68:6A:27:E4:35:8B:A9:0E:C0:0E:0F:BB:55:72:FC:CF:88
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       01987CE5AED85861B18E923A6861796A6496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 01:01:23 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:23 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:23 +0000
Files and hashes:         1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
                          2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: ZzT9TJLZBJJnunI7WfmDh/6wZqUes87dUlGN+qFHxI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:ae:d8:58:61:b1:8e:92:3a:68:61:79:6a:64:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Aug  6 01:01:23 2025 GMT
            Not After : Aug  7 01:01:23 2025 GMT
        Subject: CN=6e4bda686a27e4358ba90ec00e0fbb5572fccf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:3a:6e:b0:8c:4d:88:5e:26:76:81:9c:83:
                    1b:c8:57:d2:8e:9e:c4:7d:22:b2:e8:20:a9:4c:b7:
                    8b:81:e5:f9:8c:56:c9:8c:e3:34:e2:79:29:e3:a6:
                    2f:36:1a:2a:e0:b3:3e:73:5d:91:d5:c5:c5:82:4d:
                    4d:5b:fe:c4:2e:83:fd:2f:11:78:91:40:f8:3b:58:
                    bc:a8:83:ba:ca:48:09:71:2a:85:b4:4d:a9:bf:90:
                    19:57:5e:be:0d:46:aa:d8:98:30:34:74:64:31:97:
                    71:e8:9f:ee:78:58:0a:5a:aa:2f:95:e8:7e:00:7f:
                    5e:a8:b3:98:a1:9d:e7:63:ff:d1:61:ac:d5:85:17:
                    4b:e2:37:ba:7a:7f:3a:c9:43:a8:fb:a3:b9:08:06:
                    c7:c1:3e:8b:30:0c:09:c6:59:08:57:e3:60:a8:9c:
                    4c:f0:e6:c9:4d:d4:76:cc:f4:98:03:cd:96:46:22:
                    eb:72:67:56:9d:73:52:3f:90:88:9c:bd:05:5a:3b:
                    87:a8:aa:4c:7d:f3:90:3d:e5:a4:71:73:e9:86:9b:
                    f7:e3:bd:81:41:d4:8f:d3:a2:29:dc:05:08:2c:c3:
                    49:a3:d9:43:43:fe:de:73:f2:70:d0:c0:a2:cc:57:
                    c0:42:15:8c:e4:aa:ab:94:0c:43:73:3f:21:e1:2e:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:DA:68:6A:27:E4:35:8B:A9:0E:C0:0E:0F:BB:55:72:FC:CF:88
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a7:54:bb:57:8a:97:66:ab:0d:ae:af:fb:0d:e2:3c:63:bb:
         89:9e:45:66:a2:a4:4e:12:8b:d2:f9:62:a9:7a:db:3c:4c:22:
         1c:3f:f5:07:4b:8e:da:40:eb:97:08:7d:c5:54:19:78:9c:64:
         8b:21:aa:99:27:59:9d:c5:8a:5f:27:9e:00:be:ce:07:b2:79:
         1b:c7:77:1c:b9:06:d1:46:ef:77:ba:03:f5:23:33:b1:1b:2d:
         97:85:59:44:81:32:77:1b:ec:94:cf:e8:ca:ca:ac:b2:e9:b0:
         47:41:4d:df:f3:b5:57:aa:44:23:ef:1c:ec:8a:c8:73:da:b0:
         47:df:ff:78:ea:a7:60:20:a6:1e:8b:e3:11:41:d6:46:d1:1e:
         35:3a:2e:83:f3:87:75:b7:85:fc:fc:84:c4:49:8f:30:0e:3a:
         b2:00:04:6d:d9:88:bb:28:c9:4b:81:43:20:ba:36:ef:26:b1:
         7f:1a:19:c8:f9:02:81:38:31:ed:e9:79:c9:e2:7f:52:37:5a:
         3b:98:d4:92:cc:bb:15:68:1f:7f:73:a5:12:e9:38:9d:d6:43:
         ee:b9:83:1d:10:04:08:b5:ed:f2:46:40:78:9a:de:e6:be:56:
         ac:6c:e6:eb:81:4b:d7:7a:68:80:7f:d2:c9:50:35:3d:cc:72:
         6d:c7:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:04 2025 by rpki-client