Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          n3dKjB9WlUvLsv255AHWs2r6Fv2IiDPxzENDPthIkBo=
Subject key identifier:   F7:D2:01:CE:A5:53:76:3A:0D:AA:22:92:02:DE:07:02:A5:D6:5F:9F
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       0198733DBCE50978370CC0534E08A4B259D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 04:01:22 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:22 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:22 +0000
Files and hashes:         1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=)
                          2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=)
                          3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: ImN0HCueBkNu5kLiuclum81H/YOliixcuckjyj2TZow=)
                          4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:bc:e5:09:78:37:0c:c0:53:4e:08:a4:b2:59:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Aug  4 04:01:22 2025 GMT
            Not After : Aug  5 04:01:22 2025 GMT
        Subject: CN=f7d201cea553763a0daa229202de0702a5d65f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:c4:fc:b4:66:d8:ca:ff:30:9c:8c:96:a7:
                    d2:6f:77:fb:b1:3a:c6:fd:bd:50:d4:c6:94:69:fd:
                    31:08:58:e3:9a:78:5d:2e:c4:e3:0e:32:8b:2b:a3:
                    a4:6f:65:04:73:87:35:8b:38:2a:78:55:ab:35:ef:
                    7d:38:ec:bf:c2:01:19:ea:94:fb:47:ae:01:cf:82:
                    65:11:c4:45:59:b8:61:84:18:24:0a:44:4c:0b:92:
                    51:d2:77:c3:88:71:d7:be:ea:4a:4e:5a:88:b0:a1:
                    e3:0b:33:61:0b:b5:b4:3a:06:93:0c:54:ac:ce:7b:
                    b8:19:c1:92:2f:dc:dc:2d:10:d3:d9:73:8b:30:5f:
                    78:8c:23:08:63:12:2b:06:6c:4c:36:94:89:df:b0:
                    99:02:9d:fc:c7:30:8b:a4:bf:06:91:8e:70:e0:a7:
                    b3:df:cd:db:52:fc:59:79:54:ac:01:ba:e6:c6:b5:
                    40:25:50:08:af:f0:0d:48:ce:4d:b0:58:39:ed:de:
                    a7:3c:c2:7a:a6:8f:fe:bf:7d:d0:a5:3a:a4:e3:89:
                    58:68:98:f0:d3:e7:2e:e5:dd:83:17:9d:aa:94:91:
                    44:fb:b1:f8:f2:2c:6d:fb:28:0c:51:d7:7b:22:a9:
                    1d:da:70:c7:cb:9d:fc:7d:bf:c6:c8:e9:c7:c0:51:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:01:CE:A5:53:76:3A:0D:AA:22:92:02:DE:07:02:A5:D6:5F:9F
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2c:57:66:5a:f1:b7:90:5a:4c:1f:43:e0:d1:8b:37:7c:2b:
         78:2f:08:ad:04:b6:1d:19:14:00:50:0e:35:87:99:4c:b6:23:
         84:7a:08:d6:7b:f3:b1:e0:11:d7:13:bf:68:6c:39:40:e2:dd:
         49:36:be:86:db:40:68:f0:d0:ae:8b:30:ba:85:3e:5b:8b:70:
         f3:3c:91:4c:40:ae:90:28:c5:e3:02:3e:19:d0:dc:98:82:22:
         cd:2a:00:ba:9e:37:d9:4f:b8:87:0e:18:b4:da:4f:94:a8:4c:
         0e:52:5e:91:60:2a:c1:b8:9c:b1:1c:46:82:79:48:d3:b9:b3:
         0d:09:bb:dc:3c:88:e9:6b:48:6b:e9:5d:12:00:4d:15:a6:8e:
         c5:9e:36:ce:c3:55:e6:89:dd:d0:4f:8b:19:c1:9d:33:c4:35:
         7d:73:1a:7d:a9:4b:a8:bc:7e:ec:bc:9e:6e:eb:90:90:46:6e:
         fe:6c:a8:97:0e:de:4a:4f:b6:38:3b:0b:4c:72:51:d2:97:3a:
         d7:3e:d3:4d:ab:83:35:9c:a5:4a:5a:76:53:d6:8a:6c:5a:77:
         f0:6d:f5:e0:a3:0b:a4:2c:1b:aa:1b:bd:7f:d3:76:ff:a7:54:
         bc:02:f9:19:6b:99:b1:7b:4a:60:ef:dd:ee:9a:9c:d0:3a:ab:
         ce:32:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:00 2025 by rpki-client