Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          MV3a55khcUe6qXogfPtv2dUTQT88g5u1kZ8oZOBnohw=
Subject key identifier:   A8:1A:2B:50:49:24:38:AD:2E:69:DE:AD:8B:C0:82:38:BA:04:84:1B
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       0198A04DD2ADEE45F2D588DFBD387A818A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          162F
Signing time:             Tue 12 Aug 2025 22:01:51 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:51 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:51 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: pWfPYjfqgrXK1oNHtH3gPQTpLciyexoqSwM/Y7gP2Rw=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:d2:ad:ee:45:f2:d5:88:df:bd:38:7a:81:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Aug 12 22:01:51 2025 GMT
            Not After : Aug 13 22:01:51 2025 GMT
        Subject: CN=a81a2b50492438ad2e69dead8bc08238ba04841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:62:22:d3:e8:a5:9e:39:c5:61:66:46:da:
                    19:84:ac:96:5d:44:47:b3:57:01:2b:01:65:ca:7b:
                    ed:65:e6:bd:18:c1:f9:3c:a4:40:5c:48:30:d5:4f:
                    16:a2:8e:61:80:f9:03:1c:70:61:67:5b:a0:91:77:
                    9a:8f:8a:d3:f6:96:33:0d:8f:40:40:9b:23:62:72:
                    d9:07:6e:9a:9d:dc:12:59:a6:4e:07:bf:80:b1:91:
                    b8:20:ca:cc:5d:ea:49:a6:d4:95:8f:55:55:50:96:
                    aa:69:3a:27:15:8d:35:44:0c:8c:16:98:22:5c:03:
                    26:40:17:1d:2b:06:14:54:88:77:d5:45:2c:fd:80:
                    6d:6e:92:d2:93:c3:3e:4c:28:af:ed:c2:f4:9f:48:
                    87:2a:55:84:76:b4:82:a0:af:d9:d5:23:27:fe:4e:
                    68:f3:10:02:88:f4:99:e3:f0:c0:88:09:fa:77:dd:
                    e5:a9:2f:a0:a2:e8:ac:84:e7:4e:ba:d6:0a:30:c7:
                    43:fb:1b:8c:48:d8:fb:c3:c9:cc:28:42:80:12:d6:
                    da:e4:9c:6a:64:fd:eb:d9:88:ff:69:70:c0:56:cc:
                    27:ed:0b:87:1b:f3:4c:5c:13:c7:dd:ee:9e:04:52:
                    ae:f4:1c:77:5d:fd:44:f9:b0:cb:c2:a6:a4:83:c7:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:2B:50:49:24:38:AD:2E:69:DE:AD:8B:C0:82:38:BA:04:84:1B
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:e1:25:8a:43:a7:2b:fd:4d:f9:27:4a:8e:67:cc:51:48:
         5d:27:a4:59:1e:9e:70:ab:ed:dc:e7:69:34:81:da:03:7c:85:
         ee:c9:4b:0f:28:b2:f1:48:d1:55:81:8d:35:7f:f9:32:5a:29:
         77:76:8f:f1:b3:8b:2b:2c:74:e1:a1:02:39:7d:d9:16:7e:2b:
         46:2b:8e:9a:ae:ca:27:53:bc:28:c7:ba:02:5b:34:78:95:c3:
         28:aa:2a:7e:47:f2:02:3b:20:88:9d:29:ed:78:fb:c1:ea:93:
         8f:27:c4:ef:97:7e:4d:cf:2a:11:dd:db:16:cf:f6:8b:3f:b3:
         5e:95:37:b3:90:8a:8a:79:bf:88:36:c9:be:be:eb:8d:a6:31:
         d3:ce:cd:4e:f3:73:ba:95:c8:1e:09:37:dd:cc:ed:95:51:bb:
         cd:c8:a1:17:9b:ed:50:d6:da:42:33:8b:fd:7f:5d:b5:06:44:
         74:e7:20:d9:54:30:68:66:91:f3:36:d5:57:ba:40:b6:31:88:
         55:ad:72:36:7b:7f:2e:e1:0d:e6:df:98:52:f6:37:55:82:fb:
         f9:1e:9f:a5:72:e6:3a:6d:72:af:39:0d:8e:ae:97:df:eb:80:
         ae:67:74:24:1f:0e:5f:d9:23:0c:ae:d8:9c:45:f9:06:94:24:
         e4:de:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:31 2025 by rpki-client