Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File:                     AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier:          xQzQ19OPtAytKwwqIcge1R/zxcB/dQdfKKyaiycEVrI=
Subject key identifier:   90:FC:05:DA:89:B7:FB:2E:F6:A9:B6:B0:C6:6E:44:03:EF:8E:A7:81
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer:       /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial:       01987DC0A5BCDB04C74BC12392DE3F1DC6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 05:00:33 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:33 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:33 +0000
Files and hashes:         1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
                          2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: Otob+s5Cnz2aXoo72dKyZfEODl0r1PWr2aAYmNoSJ44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:a5:bc:db:04:c7:4b:c1:23:92:de:3f:1d:c6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
        Validity
            Not Before: Aug  6 05:00:33 2025 GMT
            Not After : Aug  7 05:00:33 2025 GMT
        Subject: CN=90fc05da89b7fb2ef6a9b6b0c66e4403ef8ea781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:a7:42:f5:86:8f:d7:48:4b:46:d1:ea:f6:
                    89:46:1c:10:15:5b:4d:05:3c:f1:c5:9e:68:a5:70:
                    f3:f2:46:8f:d1:b6:6e:9c:96:96:8a:01:d2:32:e9:
                    e3:b7:7c:c3:7b:62:7a:df:cb:b0:c4:3d:de:54:da:
                    f0:0b:9e:96:b4:aa:c2:95:77:02:1a:6d:ef:36:48:
                    e7:3c:ad:e7:ec:9b:23:81:b6:39:62:44:f6:43:9e:
                    bd:e6:4e:43:c1:31:94:f1:68:58:88:d0:d9:62:cc:
                    da:82:0f:e7:fb:ce:b7:b9:5b:99:58:76:4f:0e:50:
                    a2:b4:68:1b:b4:ce:fc:a3:66:e6:89:26:ac:a1:5f:
                    19:85:ef:02:5c:9f:1d:bb:c6:45:5e:2a:8d:8f:b5:
                    87:fc:da:21:7b:0c:72:4d:51:41:49:0d:ba:9f:fa:
                    c9:35:09:f3:aa:2b:03:3e:f0:e9:80:cb:ec:e8:16:
                    80:98:5c:b8:ae:89:6e:c4:be:35:45:47:50:18:be:
                    dc:5f:ba:0b:4b:58:be:13:c6:21:ab:dd:2c:80:41:
                    40:c9:4e:7f:3a:18:a1:6c:ea:06:c4:c1:45:eb:8f:
                    20:6e:31:b2:9f:b4:18:88:df:eb:f7:13:f7:04:e0:
                    9b:55:00:ef:c1:ea:0b:66:68:27:8d:80:f1:10:93:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:05:DA:89:B7:FB:2E:F6:A9:B6:B0:C6:6E:44:03:EF:8E:A7:81
            X509v3 Authority Key Identifier:
                keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:09:b6:93:01:25:9e:08:60:68:e5:d9:70:af:aa:69:7b:
         ba:c5:ab:22:63:7a:4b:62:b1:2f:c2:81:69:c2:ab:f0:3f:7c:
         39:65:b3:e0:8c:d6:dc:f8:72:ea:cc:10:f0:8d:e0:d2:89:86:
         49:26:d4:bc:11:73:48:a0:f1:8d:d8:f3:bc:b6:79:85:94:58:
         82:60:5e:87:aa:dd:a7:f8:f7:45:ca:8c:29:5e:20:ea:ee:f5:
         b8:96:f5:76:18:cb:f9:92:a6:68:af:23:00:2c:fb:4e:a4:0a:
         9e:f8:7f:84:00:41:97:7c:06:89:e2:16:ad:e3:df:8e:40:8a:
         ea:63:9b:6a:96:07:bd:f6:9a:30:04:ca:19:ca:27:ac:dd:ee:
         55:99:fc:e4:27:8c:1a:2c:fe:47:e3:e3:2e:3c:8e:d1:f7:02:
         3f:80:32:44:68:4b:be:d9:a7:9d:e1:08:8f:e8:7d:e8:e5:82:
         b5:ad:09:6d:d8:7b:ce:97:33:99:fc:1a:07:5b:65:b7:5a:a5:
         2b:a4:0e:04:b1:64:97:a1:08:36:52:4d:c6:7d:6d:66:a2:e1:
         56:67:31:f3:80:3f:70:d3:df:ff:40:01:2e:1f:b1:7e:87:83:
         54:42:96:de:f7:e4:99:90:d7:1e:99:87:9a:f4:ee:3d:a9:52:
         7c:a7:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:10 2025 by rpki-client