Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          GRSn7RKFuBAIe+sJZwK7JAD+jJFS3gf1uJBeqbXqZ0s=
Subject key identifier:   AA:F8:00:4C:81:34:B2:D5:BD:9D:62:AA:B9:72:52:2F:EF:52:B7:55
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       0198733D9FBA987C84C37F06AA77B94F5979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 04:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:15 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: UJ1dwWIfA1fP6dtmStGQF7BOB2KadRrYB5tQnAwNCAc=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:9f:ba:98:7c:84:c3:7f:06:aa:77:b9:4f:59:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Aug  4 04:01:15 2025 GMT
            Not After : Aug  5 04:01:15 2025 GMT
        Subject: CN=aaf8004c8134b2d5bd9d62aab972522fef52b755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:f4:29:2f:fe:7d:dd:4d:0a:d3:d9:33:84:
                    86:dd:16:98:df:9e:bc:1f:65:00:db:00:bf:2e:07:
                    cd:ad:6b:ef:bc:74:e0:b5:b9:73:3a:49:d1:40:c4:
                    c5:6a:14:a6:de:8d:37:02:9b:88:62:ff:68:63:a4:
                    a2:91:44:13:ce:38:8c:30:93:a1:10:d8:b3:09:e9:
                    51:c2:0b:b0:0d:d4:85:5b:f4:45:b3:9b:61:d2:ef:
                    03:3d:83:2d:99:a4:d8:73:9c:dd:39:30:91:25:99:
                    1f:cb:ca:b6:bd:d4:58:86:f5:7a:f8:8f:b1:f0:4f:
                    4c:8d:2d:4b:03:6b:66:bc:41:2d:90:69:ff:55:98:
                    c4:e4:f6:bd:ed:a8:cd:d5:71:86:f8:cb:a7:74:7f:
                    f1:1f:70:85:61:8d:69:f6:8a:6d:76:eb:91:f9:3f:
                    87:ac:0c:aa:ac:32:b8:c5:5a:b2:27:7b:30:77:c6:
                    9c:d6:b4:e3:29:d8:b6:50:48:7b:55:4b:29:70:d3:
                    a6:eb:fb:d0:18:2d:ee:ff:e7:e8:42:5b:cb:8b:9a:
                    51:d0:14:ec:12:60:e2:ae:b0:44:e6:17:01:35:c4:
                    5d:5e:ed:fa:63:3d:e7:b2:23:08:97:80:45:bf:60:
                    33:1f:d6:2a:dd:46:ac:c2:07:5b:f9:9a:e1:63:79:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:00:4C:81:34:B2:D5:BD:9D:62:AA:B9:72:52:2F:EF:52:B7:55
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:6b:c3:7e:29:92:8a:44:93:1c:b7:50:31:4e:4a:d3:d6:
         76:2f:c7:15:92:5e:48:28:e6:bd:74:96:09:44:87:ae:d4:94:
         7b:10:bf:54:a1:d4:29:9f:51:e5:00:84:f7:43:d2:4d:14:9a:
         14:6b:10:e9:18:0b:a3:0e:6a:1c:1f:b9:7f:a3:3c:c1:b0:fa:
         a6:fa:7a:4b:86:eb:be:d8:f2:19:29:e0:62:69:cb:2f:94:9d:
         77:ea:25:7b:25:ad:89:8e:47:68:98:f7:93:4b:bf:31:3a:c6:
         bb:12:b6:b1:7d:e9:2d:6b:53:8a:c4:1b:0d:ce:95:30:98:aa:
         5b:5e:2c:48:00:7d:da:78:c6:22:2e:48:57:1f:2f:06:0a:30:
         40:38:09:0f:45:79:99:ef:de:0d:45:44:90:ca:10:59:d4:b1:
         60:49:db:22:13:a1:57:d1:c5:b4:6e:75:25:0c:f3:5d:6e:50:
         98:c5:66:d4:0f:9f:ae:13:c8:dd:ec:d1:7e:2b:c1:c1:99:b9:
         e8:64:fd:06:86:ac:5c:ac:22:09:86:95:8d:a9:42:90:32:eb:
         1e:cf:ad:5c:e9:da:33:57:01:79:84:da:dc:56:6b:d8:30:78:
         25:4b:b9:f3:88:6e:9a:7f:e3:d7:20:4f:2f:aa:a6:35:52:3c:
         57:cf:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:23 2025 by rpki-client