Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File:                     bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier:          n9SPrpFH5lnpQ1bFNlZiCKDmBWV0XtnShuJJ1Y50zXg=
Subject key identifier:   23:96:9B:05:B1:14:19:E2:D7:F5:09:41:08:B3:71:87:CC:DD:16:3D
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer:       /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial:       01987B9B55699CF17E2F9B13FFFAAFDFFD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 19:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 19:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 19:00:34 +0000
Files and hashes:         1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
                          2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: naabrGXgW7nkFXKsXZDG4ruRWxnyN6m3lYsTd4FP5jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:55:69:9c:f1:7e:2f:9b:13:ff:fa:af:df:fd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
        Validity
            Not Before: Aug  5 19:00:34 2025 GMT
            Not After : Aug  6 19:00:34 2025 GMT
        Subject: CN=23969b05b11419e2d7f5094108b37187ccdd163d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:c9:91:09:56:a0:b1:8c:e4:aa:c3:2d:d7:
                    74:10:ad:0b:06:59:70:3a:c3:2e:99:47:4b:df:ee:
                    13:84:cc:d5:1e:d3:4e:9d:eb:1a:c2:f0:19:37:fe:
                    21:6e:ed:d2:3d:d1:7f:ba:c9:2f:8a:e3:5c:23:c9:
                    ed:33:0b:df:2b:fa:45:4b:22:bb:8b:cd:04:40:09:
                    ef:49:7b:c4:d2:3a:4b:0d:11:69:74:77:1b:84:5d:
                    3b:21:cb:ec:13:b8:d8:1a:29:67:20:f6:76:12:7d:
                    8c:a1:d4:ad:26:97:25:30:02:48:1b:83:84:f3:65:
                    50:07:00:ff:a9:42:39:25:c4:a0:04:86:b0:e1:b6:
                    5f:4f:6f:50:e2:52:e6:5c:43:67:eb:64:54:a3:00:
                    04:c3:6d:4f:26:bb:9b:10:d7:b6:e0:0c:23:20:e3:
                    3c:ad:a8:62:74:f1:47:68:c1:c2:76:e1:ec:82:bc:
                    99:dd:16:8c:7f:c7:6c:e7:b8:fc:dc:c8:16:f1:5b:
                    7f:f3:f3:8d:2d:82:32:2e:ba:11:57:c2:3b:68:a3:
                    fa:cf:5d:63:0f:af:a2:65:b3:b2:76:7d:5a:3a:91:
                    a0:72:16:c1:b5:1d:13:ed:74:6c:95:3f:b0:52:91:
                    60:98:e5:93:65:a3:98:0b:8e:63:1d:90:c0:9f:3f:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:9B:05:B1:14:19:E2:D7:F5:09:41:08:B3:71:87:CC:DD:16:3D
            X509v3 Authority Key Identifier:
                keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:9f:2d:4a:da:85:6c:1d:08:55:32:fb:c5:d4:dc:c9:cc:
         e9:de:18:59:5b:3b:46:b6:dc:09:ff:11:55:f7:7a:a2:1d:97:
         bd:84:1e:bd:a1:a4:d0:77:0a:51:64:2e:00:53:f5:53:7a:21:
         36:4b:35:c0:1b:44:ed:12:27:ae:1e:51:2a:1f:ce:a2:0d:a6:
         dd:19:86:e3:91:0f:b7:c1:ed:85:ad:0b:68:51:66:1e:14:e0:
         cd:72:09:46:0e:4c:05:66:fb:9a:e9:02:3a:a7:7c:e4:87:51:
         f3:d2:c5:f0:ca:59:45:26:5a:cd:3b:7f:94:78:a5:7f:ab:8b:
         e1:e6:5d:ba:d1:bf:e2:53:ef:83:50:64:ff:38:c7:ac:28:83:
         f0:79:30:a6:ca:ee:d3:ac:d6:2b:26:21:b6:8d:f8:50:df:33:
         fc:96:84:96:af:46:c8:af:30:e8:19:69:57:f4:20:65:7f:2c:
         5b:88:28:27:a0:91:05:e7:87:a8:f7:77:0b:12:81:7f:21:4b:
         b5:4d:25:73:e5:27:87:39:ef:1a:8d:ee:eb:b0:f1:27:d7:56:
         96:29:75:ff:54:42:1c:e8:1a:a8:de:48:69:a1:26:0c:f9:95:
         68:30:df:96:0c:37:67:ec:d2:45:04:31:3d:4e:83:1e:2d:1c:
         73:d3:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:54 2025 by rpki-client