Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File:                     kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier:          Yf7asHVbKs/sr0IkXZT5L5Wuu/0AmBAEROPiUwIAlNI=
Subject key identifier:   6A:92:E3:87:51:7A:9C:8B:21:6B:E6:27:36:2C:A1:E4:66:B8:33:94
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer:       /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial:       01987306BD17FA073FE223F1EC94ADB1C0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 03:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:18 +0000
Files and hashes:         1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
                          2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
                          3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
                          4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
                          5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
                          6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
                          7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
                          8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: 3VEd6ee0iShaMCIpJPS8ogPwwmbn/+nUhWSfAoyOz7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:bd:17:fa:07:3f:e2:23:f1:ec:94:ad:b1:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
        Validity
            Not Before: Aug  4 03:01:18 2025 GMT
            Not After : Aug  5 03:01:18 2025 GMT
        Subject: CN=6a92e387517a9c8b216be627362ca1e466b83394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:13:83:eb:67:a8:a4:58:fc:70:f8:bf:e3:
                    80:e5:91:46:90:ab:3a:9e:87:da:12:34:27:07:6f:
                    a1:7d:04:9f:42:7d:ec:b0:a7:f6:80:51:c0:83:9c:
                    a1:57:ce:13:81:87:de:8c:ce:d1:6a:39:74:51:9f:
                    42:9e:6f:42:aa:6e:37:1c:40:8f:e5:40:84:91:cd:
                    8e:ed:2e:d3:32:b9:b3:c7:9a:1f:6a:87:20:cf:64:
                    4a:e6:08:1a:ad:33:fa:fb:16:bf:e1:91:59:0a:e6:
                    47:5b:23:d7:bd:32:c4:34:b2:90:27:89:89:26:00:
                    b4:6f:f8:fe:5b:dc:71:a8:ed:50:11:44:c5:41:d4:
                    2b:58:7f:61:97:d1:db:63:7b:e8:eb:4f:4e:5e:1f:
                    fb:5d:ac:a0:1e:da:2c:3a:b4:e8:ea:cc:da:74:3f:
                    89:fc:70:c0:35:f0:9a:de:9e:7a:c8:04:3b:22:7a:
                    fd:e2:e8:17:ab:15:ad:59:76:1f:b4:e2:72:a3:08:
                    f6:2d:53:18:0b:81:7a:8b:85:b9:05:cf:08:bc:70:
                    48:26:01:a4:a4:3b:ec:8a:69:21:eb:3b:3b:e0:31:
                    ef:f6:12:55:b6:cb:26:a1:71:f4:3d:1f:9a:a2:bd:
                    cc:40:de:44:63:0c:ad:b7:54:54:d8:0f:37:06:60:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:E3:87:51:7A:9C:8B:21:6B:E6:27:36:2C:A1:E4:66:B8:33:94
            X509v3 Authority Key Identifier:
                keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:4c:07:9f:18:63:b4:a1:fb:07:08:83:01:5d:55:cb:c1:
         01:69:ea:45:ec:a8:91:62:e2:33:06:92:1f:c4:ca:86:d0:88:
         c8:e2:35:fc:24:a6:4c:0b:1b:cf:7e:70:24:54:aa:1a:a8:b0:
         aa:95:c7:6d:08:97:71:d7:ce:42:c7:b9:1e:af:a4:89:e0:cc:
         12:9f:6b:54:ce:cf:f1:4f:6d:32:0b:07:c1:21:1c:1c:7a:46:
         88:ec:0f:05:96:3c:70:c2:b3:18:1b:4e:fc:12:4a:9a:d1:cb:
         bc:23:35:3f:67:24:94:a0:f0:0c:1e:af:e8:9d:7e:ae:12:88:
         7e:74:d2:26:90:4b:4b:63:f0:41:32:47:4c:0b:76:ed:6c:8f:
         e9:d9:eb:25:d7:39:a8:0c:37:5c:37:2e:0b:92:ce:d5:be:a6:
         db:00:0c:f2:90:d4:14:cd:10:d7:be:8b:f1:be:25:6a:50:ea:
         1f:f9:0d:cd:63:8a:5b:4e:5e:47:24:10:63:5a:ba:a4:04:d4:
         01:58:30:7d:4c:64:0a:0f:07:13:30:07:6b:52:cc:22:cf:fb:
         77:b6:7a:e4:ec:16:1b:79:52:c0:db:ac:7c:41:c7:a7:08:7c:
         84:f4:93:bd:bc:ec:e2:28:8c:8c:68:c8:10:1b:e9:93:62:b0:
         20:ae:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:35 2025 by rpki-client