Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          q6GjsuNjRDUDsvHVevIyHjTFirCfc59wG86tWLzNip8=
Subject key identifier:   1F:A5:92:AD:7C:EA:85:F9:75:D2:C2:B8:85:1F:0A:B2:7D:57:9A:AF
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       01988D33D60F705E7BBA73A55A2D9CCDC7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          162A
Signing time:             Sat 09 Aug 2025 05:00:41 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:41 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:41 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: t3dkhblMTNLFd+wmrQMj0SZmzGlhHpUF9iFEYW4MY0E=)
                          2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
                          3: Ldu8n54C9B8B8Wt49KChsByoqAA.roa (hash: 9Bo0XFNwzOCG1aXQe+ZW1KylJOUm4nJ5O0zxj8c2Lzk=)
                          4: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
                          5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:33:d6:0f:70:5e:7b:ba:73:a5:5a:2d:9c:cd:c7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Aug  9 05:00:41 2025 GMT
            Not After : Aug 10 05:00:41 2025 GMT
        Subject: CN=1fa592ad7cea85f975d2c2b8851f0ab27d579aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:16:83:e0:b1:17:b0:2e:6f:7f:95:59:2d:53:
                    3e:bf:a7:cd:41:e2:a6:3b:4c:97:b2:9d:72:a1:83:
                    4b:7e:4c:ce:20:e7:aa:d3:fe:7c:5b:61:6a:ce:dc:
                    33:48:e3:7c:ad:a7:31:eb:7d:67:e4:53:89:74:53:
                    c7:1d:b5:90:55:10:f3:1d:ca:2b:3f:28:89:27:8d:
                    18:29:dc:28:37:86:67:c7:8e:ae:2f:59:d0:dd:0e:
                    32:b1:4e:bc:f3:58:38:db:9f:01:41:5d:c5:d2:26:
                    1f:cd:66:e9:35:da:87:7c:50:71:7e:26:90:11:0a:
                    fe:65:eb:c5:e4:f2:26:9c:0d:f5:b2:aa:c3:fe:fc:
                    64:70:58:5a:a8:b0:b3:14:ce:50:bf:3e:c3:77:58:
                    e6:96:f8:89:1d:1f:0d:28:92:67:b8:21:71:ae:e5:
                    f9:94:87:35:2f:b2:cf:89:b2:cc:8b:8a:ce:3b:99:
                    ce:3e:7b:4e:6e:b0:45:5e:05:df:d5:db:cc:03:17:
                    56:c4:78:56:c5:b3:22:47:60:c5:20:eb:fc:2a:52:
                    5b:57:71:45:45:9c:8a:b4:bc:30:fe:52:b9:2f:71:
                    cc:ac:63:53:17:41:56:39:d0:a5:99:5a:00:5a:76:
                    40:bf:4b:9a:3a:80:93:cf:0f:55:d0:96:19:ea:1a:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:92:AD:7C:EA:85:F9:75:D2:C2:B8:85:1F:0A:B2:7D:57:9A:AF
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:9e:9e:09:51:7a:0f:b0:3b:3c:a2:4d:83:16:55:b2:b2:
         16:af:5e:b6:c5:7e:e0:75:df:21:b2:7d:db:24:db:9a:03:c3:
         0c:74:8e:5c:cd:4d:97:59:47:71:e8:41:db:29:2e:23:72:b9:
         bc:31:2a:7a:0c:19:3f:31:3c:67:3e:f5:b0:30:be:47:58:6b:
         27:24:72:6e:3b:6d:4f:2d:54:a8:eb:0f:5e:ac:66:ab:18:d8:
         bf:77:94:d7:f8:8a:ad:3b:eb:f4:f6:9d:6b:1d:a8:03:b0:df:
         6b:87:b8:2d:de:94:18:1c:00:a3:18:0d:1f:f9:8e:02:1c:8f:
         cf:a6:37:a9:05:23:f9:fc:3e:a5:8c:c5:a5:6e:f0:39:32:b5:
         eb:be:ba:60:4c:72:7a:0c:41:d0:15:32:78:54:0a:07:93:32:
         77:42:ef:aa:f8:3c:7a:ec:e7:95:db:55:19:c6:99:80:e5:b3:
         1f:28:57:04:5d:cd:1b:c0:7f:4e:fc:2c:02:17:f6:28:7d:db:
         75:31:0e:be:4e:cf:ce:16:9c:e4:75:fc:ae:f8:cc:ee:ba:07:
         bd:fc:1b:74:f5:19:f2:ae:76:f8:8f:35:3b:6a:12:98:3b:19:
         ee:34:c0:0c:a4:8d:37:de:a2:de:0b:2f:e3:31:28:e9:b2:3a:
         31:8f:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:51 2025 by rpki-client