Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File:                     cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier:          oYaWwKyYfLRAWnKwdWtaNL70VImgY28/1HhWx8R51JI=
Subject key identifier:   24:F2:F0:06:3E:EE:F4:15:DA:68:37:31:53:13:D5:91:EF:80:84:37
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       01987418FA8E53DFA94B97A3863FF600C1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 08:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:50 +0000
Files and hashes:         1: 9GpBlLtfTSGwtwmapQ1fHjDSL74.roa (hash: cQGV65QLMLrxeunkDqMGv2/A1B8DKG8uRXwHYjzRdog=)
                          2: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
                          3: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: Xqrh+/sxuEjJ9xa6Ivu3VBXNcWPvPquLLqF4hUmDbE4=)
                          4: fxey-d2NI5gsqRXb0UikDcRQ4Hk.roa (hash: mnGLtOe1Pde5CCQx8NNLqfN+Rs/Jpu9t/4yCNDHWIJo=)
                          5: k2cy-dpR9M4bnBgU53KrEJqTZ6Q.roa (hash: 8tyXNOmPdOoM3Bxwfs7taxKxeuKoZ5xeHwq+hSOSI5I=)
                          6: qOUhVI1G4SW4_rAdHVZjiGEJEhc.roa (hash: mLpbGQvUh3BNlZYktMPLqJ4KDfxwOCyR9t25dQjnDY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:fa:8e:53:df:a9:4b:97:a3:86:3f:f6:00:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Aug  4 08:00:50 2025 GMT
            Not After : Aug  5 08:00:50 2025 GMT
        Subject: CN=24f2f0063eeef415da6837315313d591ef808437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:b7:ee:54:24:42:05:dc:22:86:9e:29:53:
                    99:db:d7:98:e3:21:da:d3:e8:95:57:79:80:f4:f3:
                    32:f1:2c:cf:f4:0e:80:35:38:44:83:b9:9c:41:fe:
                    25:83:fc:64:9b:62:18:3b:89:35:14:82:94:f1:36:
                    68:76:6a:f5:65:14:e4:52:b6:d4:b8:97:04:d1:f4:
                    5f:19:3e:06:0a:34:c4:40:ee:78:b1:ad:51:3e:67:
                    4a:0d:e2:f9:ad:61:19:31:18:df:0d:e6:e8:1f:02:
                    e6:f6:ec:2b:86:30:1d:72:84:2a:4c:30:97:08:69:
                    b9:13:1f:db:ff:f3:b7:2b:90:b4:c2:31:02:58:eb:
                    b1:7d:3a:08:8a:ca:60:a0:35:8e:b0:1f:6f:6c:68:
                    41:5e:a5:64:1c:48:71:f6:a3:86:04:5e:fc:4b:08:
                    00:ce:f6:3b:09:5a:76:e5:db:a9:6d:aa:2d:b8:5a:
                    ec:bd:a1:70:88:da:cf:0d:2a:d5:31:07:16:6d:5f:
                    b9:be:68:1b:86:d7:ae:64:bc:f5:71:58:ef:1f:e2:
                    e6:2d:30:ea:02:02:46:8b:3e:92:ac:f6:86:6e:98:
                    21:14:f3:09:fe:28:f7:68:3d:f0:23:0e:3c:f3:fc:
                    6c:6e:b5:05:e2:90:2a:01:46:a4:20:db:6f:c4:00:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:F0:06:3E:EE:F4:15:DA:68:37:31:53:13:D5:91:EF:80:84:37
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:b4:60:f3:57:b8:26:e3:88:58:ca:e3:61:01:b1:31:11:
         8c:f2:1c:8b:14:97:63:ef:c7:43:79:78:90:e2:1a:63:50:07:
         94:15:4b:eb:f5:55:d3:68:8f:27:27:6b:ee:8b:3e:0d:21:ce:
         3d:e5:12:b1:f8:54:18:99:6a:c7:af:29:32:92:b6:75:b7:84:
         25:18:54:39:33:a8:2b:1d:a8:35:c6:f6:d8:21:6b:46:8b:17:
         a1:df:9b:b1:7c:76:d3:82:20:81:31:3c:f5:a6:38:ee:8a:63:
         83:b0:0b:1e:6f:ba:bd:4f:38:56:2d:ef:39:17:af:f7:b2:a6:
         d5:d3:1c:f1:a9:e2:1b:63:96:5c:c6:27:7e:de:3b:48:cb:58:
         dc:50:40:c0:ba:e6:69:c8:94:a5:3c:30:fd:5c:7e:60:56:d7:
         0b:31:59:27:0a:2c:61:b5:02:82:2b:c8:c9:58:b2:11:d3:4d:
         81:bc:31:ee:2d:77:54:6f:bd:29:ef:5a:55:01:67:06:b1:9d:
         84:83:89:f5:5f:38:33:44:5e:f8:6a:08:72:2d:1d:49:20:b2:
         a7:0b:44:63:39:0b:68:d3:95:8a:9c:17:f8:6d:fd:c4:d4:a8:
         f3:7a:d6:1b:3d:a6:5e:44:b5:49:07:77:b1:6f:93:fc:27:f0:
         4f:2a:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:31 2025 by rpki-client