Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
File:                     tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json)
Hash identifier:          XPTvECwO/0+G/u3BfG7tHxzVl0sUOQRYPqe8IGDENOA=
Subject key identifier:   55:C5:3E:6B:45:F0:F9:5D:E7:57:41:6B:C8:B3:75:EF:D1:60:CD:FB
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Certificate issuer:       /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial:       0198A04E135CE72E55922F1C89ACB2F89D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
Manifest number:          162E
Signing time:             Tue 12 Aug 2025 22:02:07 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:07 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:07 +0000
Files and hashes:         1: M5_-d1GdbRA2RUGO5npOtRSNEB8.roa (hash: DYZ2j8UdvivRy1b6Q4G0ZdvY6U48+tpNnHP/gql8rCo=)
                          2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: dNfLdPlUCLZepJ41/RP+GZ7fISlO/XwPLiLnQZ91YaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:13:5c:e7:2e:55:92:2f:1c:89:ac:b2:f8:9d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
        Validity
            Not Before: Aug 12 22:02:07 2025 GMT
            Not After : Aug 13 22:02:07 2025 GMT
        Subject: CN=55c53e6b45f0f95de757416bc8b375efd160cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:e3:6b:3e:f4:0b:ad:24:04:db:3c:f3:01:
                    6f:03:c9:dc:7b:80:9c:01:45:7e:31:30:c8:5e:75:
                    6f:14:7f:2a:50:1f:c8:51:d8:54:ac:6f:95:f9:c2:
                    ca:2f:18:1a:a3:67:ed:34:3c:ad:c6:b9:a7:5f:cd:
                    07:4f:d9:6e:78:00:94:eb:5d:94:e9:52:ac:cf:e4:
                    9a:d9:50:73:89:56:06:c2:ed:3e:b9:8f:66:f2:36:
                    9e:75:1f:93:0b:11:d3:4a:16:75:2f:ca:de:03:3d:
                    39:5e:c1:ab:d5:fd:75:c9:40:47:23:a8:2d:9e:80:
                    15:98:f3:7f:d8:2e:65:b4:99:28:df:d8:f2:77:16:
                    62:7f:61:4b:a9:f6:ee:c0:31:84:20:50:d8:70:1b:
                    11:f5:2c:12:5b:e3:3d:4d:53:34:2d:cd:28:1b:cd:
                    87:c0:2f:47:91:b8:af:10:d0:1b:51:fc:01:10:19:
                    3c:d6:c4:b1:d5:09:2d:9f:c5:46:11:7a:fe:3d:32:
                    c7:48:e0:7f:30:f6:6a:eb:5a:e4:5f:7c:90:5b:f6:
                    f3:8d:7d:e6:62:db:0e:a9:89:64:88:fc:e2:6d:49:
                    05:eb:c0:a3:e9:44:62:b4:2a:9f:24:af:b3:a9:56:
                    97:f7:8c:ed:f5:a3:4c:1b:30:e1:57:55:07:ed:9e:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:3E:6B:45:F0:F9:5D:E7:57:41:6B:C8:B3:75:EF:D1:60:CD:FB
            X509v3 Authority Key Identifier:
                keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:d6:67:00:de:c6:04:6f:5a:3b:8b:b6:02:3a:d8:ad:79:
         62:43:c3:e8:9e:16:20:a6:1d:34:91:57:94:68:5d:2d:38:96:
         4a:01:41:f8:65:0a:c2:18:e3:fb:7f:35:c6:b4:2d:4d:a5:a9:
         5b:54:7e:ea:9c:98:91:99:30:94:c6:7e:5b:f2:05:f5:47:b4:
         28:54:91:e9:4c:aa:00:7c:e4:36:3a:64:5e:8c:cf:c0:75:d0:
         35:c9:8c:e4:2e:b6:3d:e9:54:62:3c:2f:0d:81:b1:d9:b1:7c:
         a6:53:75:cd:f0:cb:f0:dc:13:fb:d0:09:00:bd:ba:1e:ac:d4:
         58:27:1f:94:a6:c1:e2:f3:57:a5:2a:5f:60:90:be:b6:7b:69:
         e6:d5:17:de:68:9e:5d:d9:90:31:15:82:cc:a1:d8:e1:49:84:
         2a:3e:de:26:df:b2:d9:30:07:2b:72:3b:97:a8:0d:fa:e7:f9:
         2b:8b:14:76:46:ba:3f:2e:4a:62:2f:a2:86:3b:98:63:f8:f9:
         4a:9b:8a:97:65:bf:14:05:42:69:c8:9d:13:bb:2c:9b:f7:d1:
         6f:a9:11:a7:4b:bc:bb:05:d9:3e:30:72:d9:e0:7e:13:86:2c:
         36:61:ee:e7:dc:f3:75:5f:bb:f9:6b:65:6e:9b:b8:2b:96:0c:
         d7:ce:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:04 2025 by rpki-client