Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File:                     4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier:          USkQjQwnr4Ehm62YV/lwlQPnqFqfU6RgEie/q1rhebE=
Subject key identifier:   30:3F:03:CF:C4:48:C4:3F:F1:B4:5C:B7:86:5B:C0:19:E8:55:7D:BA
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer:       /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial:       01987A88B1A596988BCD4E3712CCD551BC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 14:00:35 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:35 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:35 +0000
Files and hashes:         1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: qHQSj6qNK/mEbzyQozQ5cYvWZOwscDy7Nvf5JNWWuk4=)
                          2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:b1:a5:96:98:8b:cd:4e:37:12:cc:d5:51:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
        Validity
            Not Before: Aug  5 14:00:35 2025 GMT
            Not After : Aug  6 14:00:35 2025 GMT
        Subject: CN=303f03cfc448c43ff1b45cb7865bc019e8557dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:12:f6:ed:cb:99:fb:61:6c:a9:98:55:12:
                    bb:50:2d:83:13:1b:4b:71:6e:27:7a:14:fa:a5:39:
                    40:d1:fc:4f:f9:21:4c:fe:d4:ec:7c:a2:bf:3f:bc:
                    a7:e9:6d:ca:68:3b:2e:5a:1b:b1:d8:43:64:77:7c:
                    64:50:d4:a3:f6:56:f9:73:e3:38:7c:ec:3d:75:72:
                    0d:0f:c7:e4:b3:a7:e4:df:24:ef:02:49:e9:7e:be:
                    e4:1f:de:a5:b3:e9:e3:52:10:79:e6:bd:80:22:a3:
                    6c:44:62:bd:39:28:a2:f0:2e:0d:17:67:78:19:e5:
                    f4:47:d9:1e:42:07:5b:5e:df:eb:8c:2e:c3:85:b6:
                    53:75:ac:c3:a6:8c:b9:a6:df:02:71:be:29:9e:2e:
                    0f:78:78:49:4a:14:c1:91:d6:60:b0:57:06:f0:13:
                    d8:e9:86:9f:c0:af:40:57:7d:98:e9:15:69:d9:11:
                    da:d0:db:67:9e:9d:5b:ad:4c:b4:db:e9:b5:1a:0f:
                    6b:ed:61:9a:18:00:9d:25:73:28:b9:24:d9:ec:d7:
                    07:9b:d1:1f:8f:6e:e5:13:a9:86:d7:ef:31:14:11:
                    09:a9:e9:4f:cb:b8:61:b9:76:d7:80:5e:28:63:16:
                    1a:dc:12:ac:06:b9:d6:b2:19:7c:9c:f1:e5:16:9f:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3F:03:CF:C4:48:C4:3F:F1:B4:5C:B7:86:5B:C0:19:E8:55:7D:BA
            X509v3 Authority Key Identifier:
                keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:cd:fc:d7:77:bc:a3:a1:be:2b:60:e6:21:d2:8a:89:cd:e8:
         f9:62:1c:c6:c8:f8:e6:66:3e:86:37:fb:3d:3d:d7:e1:70:45:
         34:a5:77:be:4d:d7:fb:34:61:9f:d5:2c:63:dd:81:39:c3:0f:
         79:94:25:8d:f3:ab:26:d8:14:cd:cb:f8:52:cb:c2:b5:cb:a4:
         ec:c7:be:5a:4c:ec:bc:29:8e:94:a6:88:d0:0b:ca:1e:8f:1b:
         06:fa:ff:33:b1:7c:62:ad:ea:a6:4b:f0:92:21:9a:11:16:8f:
         d7:ae:99:27:56:67:99:d4:03:49:1b:8c:2a:58:bb:a7:b1:b5:
         50:a2:0e:a4:e6:8b:25:7c:2d:0b:3e:c1:31:a3:5e:f2:a0:12:
         b7:a1:e6:a9:41:3a:f8:a8:04:ee:48:d3:f3:d5:99:69:f7:f8:
         ea:2d:f1:95:b7:c3:97:1d:36:f6:e1:3d:03:10:25:f8:9a:d9:
         5d:ca:66:d5:31:e6:a3:8d:0f:98:40:a9:e8:d9:f9:6b:36:b6:
         1f:c9:a4:6a:63:b3:f2:f0:f0:fd:31:1c:c9:ce:82:78:92:7c:
         0d:91:5e:e7:e6:c9:9b:f5:43:e1:eb:7d:b0:32:60:d3:11:b9:
         03:91:cf:b0:50:0f:2e:78:f8:78:47:d2:f3:56:0f:7b:c3:f1:
         67:cb:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:43 2025 by rpki-client