Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          NiuwmQqQFwwDT+AqSTOpECCtPKU2RDPYyD2Xac3naJg=
Subject key identifier:   B8:01:2C:E4:57:CA:6A:2B:1C:C1:25:B9:DF:BF:3B:29:61:12:43:BE
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       01987A88BA34E0898F93545975348E35A2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          161F
Signing time:             Tue 05 Aug 2025 14:00:37 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:37 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:37 +0000
Files and hashes:         1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
                          2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
                          3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
                          4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: sEymJP9N2bklhEr8PG6HHc5BApeb+RArZAAbApfmn/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:ba:34:e0:89:8f:93:54:59:75:34:8e:35:a2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Aug  5 14:00:37 2025 GMT
            Not After : Aug  6 14:00:37 2025 GMT
        Subject: CN=b8012ce457ca6a2b1cc125b9dfbf3b29611243be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:f4:39:ad:2a:7a:ee:e4:ee:72:3b:31:91:
                    93:0d:e9:57:26:50:7f:ad:fb:18:f3:69:bc:59:3b:
                    f5:05:2e:3d:86:51:dc:a8:bd:40:30:24:ce:68:ec:
                    c4:1a:62:36:78:44:79:82:f0:89:36:b5:83:95:71:
                    0c:45:eb:a4:63:30:f7:e2:29:bb:85:f3:4b:49:46:
                    75:04:6e:45:01:f6:5b:9f:71:bc:2e:e5:6f:fd:97:
                    0f:bb:82:40:1c:e5:b6:ef:7c:9e:dd:c9:cb:f5:f9:
                    df:4f:eb:6e:35:38:7e:21:12:2f:1a:4a:c6:6c:1c:
                    ad:c3:21:c6:56:04:72:ed:32:32:42:73:fa:66:18:
                    90:34:db:53:7e:33:73:a7:1b:2a:a7:99:d8:c2:63:
                    ce:58:73:52:55:13:a9:8f:ba:fd:be:18:e5:9d:1e:
                    d1:2d:97:08:b4:6a:ce:19:54:31:77:1f:8b:db:c0:
                    05:cf:8f:0f:5d:73:74:6d:78:a0:46:ae:9d:6c:79:
                    d9:51:9f:6e:42:f9:50:74:06:e5:63:9b:50:e2:05:
                    38:5a:1a:3b:b7:49:96:e0:c6:cd:b9:35:d0:c9:6d:
                    0a:e1:e2:5c:ff:64:59:ae:14:d4:e0:eb:e8:bd:f8:
                    3d:71:0f:07:74:30:f8:06:fd:8c:1e:9d:ec:f1:c5:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:01:2C:E4:57:CA:6A:2B:1C:C1:25:B9:DF:BF:3B:29:61:12:43:BE
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:11:d0:d8:af:cf:3a:07:b5:e1:2d:15:ab:f2:f1:cf:b4:4f:
         6e:12:57:d5:97:14:4a:0e:0f:13:99:79:43:84:97:76:2f:c4:
         21:e9:24:51:4e:ca:2e:70:31:f5:12:50:39:dd:42:41:59:c5:
         5f:95:c3:22:72:6a:73:a0:d4:78:b6:59:7c:db:22:ab:be:fd:
         e9:8a:c0:34:e1:2f:09:45:a1:ec:93:9e:52:da:f9:31:e6:25:
         7c:c6:63:3f:81:b3:0b:62:6a:49:a0:22:10:d2:17:6f:83:67:
         4d:eb:24:02:0a:6d:4d:d8:63:90:b3:36:ad:16:5f:67:2a:59:
         16:ab:21:b8:c0:2a:29:82:22:84:b8:5d:61:ba:42:75:69:0f:
         c2:1f:c8:ba:ef:c4:ef:64:93:bb:7a:c9:5a:55:85:d7:a5:10:
         13:de:37:33:58:d1:ce:e5:e7:66:2a:ca:8c:ae:69:42:71:bd:
         f1:84:63:06:96:95:e9:7f:1d:d2:9c:af:84:56:16:17:40:c6:
         0f:62:20:a7:95:46:22:ea:38:ed:b6:e5:08:26:53:2d:48:f9:
         9b:56:d9:f0:f3:94:b4:3c:f1:60:3c:2f:a9:b1:f5:2e:d4:f0:
         5d:72:40:39:58:eb:e1:bc:a5:1f:e9:a0:db:33:47:6d:f0:05:
         23:b3:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:27 2025 by rpki-client