Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File:                     _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier:          Xhf1OHhTLfEB6ggyfV3mjUYmt25rY+1OJNvPmNtpCT4=
Subject key identifier:   E1:2D:8B:E7:74:76:42:A7:06:09:FA:04:E4:F7:DD:DE:B8:32:7D:89
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer:       /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial:       0198D54DDF6D9876DA4FEC48F1686848E916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 05:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:47 +0000
Files and hashes:         1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: DyfqAgKVK/ZMh5GHi6PdyJPd9tzbbaBX9NP/J2vpQQE=)
                          2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=)
                          3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=)
                          4: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:df:6d:98:76:da:4f:ec:48:f1:68:68:48:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
        Validity
            Not Before: Aug 23 05:01:47 2025 GMT
            Not After : Aug 24 05:01:47 2025 GMT
        Subject: CN=e12d8be7747642a70609fa04e4f7dddeb8327d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:66:0e:e2:55:c1:f7:10:6b:17:8d:f7:76:
                    94:98:35:3d:37:49:f9:31:2b:69:de:a9:7a:ac:ab:
                    74:f7:1c:00:02:15:b5:f4:2b:10:94:7a:c6:73:ab:
                    c1:dc:93:e6:83:63:2b:9c:4b:44:8a:0f:64:22:bd:
                    d4:7e:42:5d:ae:5a:df:55:00:94:4a:9f:b4:da:80:
                    e2:57:a9:f3:a8:fa:bc:7e:ce:52:09:ce:55:fc:13:
                    e8:d0:e6:ab:80:80:3f:94:27:6c:7a:bc:0d:87:af:
                    14:af:ae:7e:1d:95:6d:b2:0c:5f:61:36:e9:7f:c5:
                    c2:05:d3:e9:c8:29:79:35:ba:32:75:73:94:d3:0d:
                    6f:a8:15:51:40:56:17:85:92:f1:46:2b:55:2d:7e:
                    60:a0:53:60:f9:a2:cd:7b:0b:9e:61:b2:f2:df:b0:
                    cf:86:95:24:5a:7c:04:c4:de:b8:c2:ad:6b:0e:e1:
                    2a:4e:26:00:68:90:f7:cb:c1:0d:d9:c7:15:b6:e7:
                    80:f5:44:08:0f:73:8f:75:25:e9:30:9b:89:03:ee:
                    f6:ec:a3:fd:3e:70:75:7c:e4:ac:38:99:84:a0:42:
                    9e:54:ff:49:1c:b0:08:7e:1b:8b:75:8b:a0:cb:3e:
                    e0:0a:1e:1a:e1:32:8b:8d:c6:f8:5e:a3:05:ca:b3:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:8B:E7:74:76:42:A7:06:09:FA:04:E4:F7:DD:DE:B8:32:7D:89
            X509v3 Authority Key Identifier:
                keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:89:e6:ef:fb:22:d8:53:3a:07:88:cd:03:21:f7:6b:68:
         4e:e3:2f:aa:38:55:10:29:47:9b:49:67:e1:f3:f6:3b:d7:89:
         c9:17:b4:41:d2:30:b4:a9:d8:bf:6c:b0:c1:b2:94:10:45:4e:
         7e:6c:4a:21:6b:5b:7d:dc:27:71:16:fe:0b:52:c0:55:53:c8:
         8c:93:65:28:0f:65:af:ef:24:c8:40:ff:98:ed:fd:82:3e:66:
         87:6a:14:d1:35:1f:b7:0e:b0:56:f7:0b:a8:b7:97:f1:7f:30:
         e8:45:a9:8e:5b:fc:0f:a4:0c:68:47:f4:25:9e:cc:73:a5:76:
         b5:94:50:07:9e:d7:96:2e:f4:94:4f:f6:80:b6:f9:f7:52:1a:
         8b:e3:59:08:cb:5c:78:4c:54:cb:6d:a2:2d:1b:d4:2c:32:67:
         76:78:b6:7b:f8:fa:f0:db:a4:9e:82:bf:fa:03:1b:5a:d6:82:
         99:14:10:f4:c9:2c:f9:a4:c5:23:f6:63:a6:f8:b3:5f:40:62:
         42:1e:98:49:13:ae:85:e8:24:29:e0:c5:5b:7f:f4:84:0d:ba:
         61:24:46:c0:ee:d3:3f:26:9c:3c:6a:df:11:a2:08:30:c8:8f:
         bb:26:20:68:f5:b7:33:b4:90:8a:c4:05:90:93:f3:c6:f1:6b:
         2f:72:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:47 2025 by rpki-client