Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          eehT6OrZRyhL59obAdKT+YzNWyLQvMYZ9KenhClApKA=
Subject key identifier:   CA:15:D0:F2:B2:BF:24:9E:FF:1B:BC:D0:76:20:93:0A:0D:73:38:14
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       0198D5BC1818F2C4463DE4169CE5364A94F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 07:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:10 +0000
Files and hashes:         1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
                          2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: zP7aDUvv2gGOHv8YW2AQIDCCRuiMlsiwiET36ue1bX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:18:18:f2:c4:46:3d:e4:16:9c:e5:36:4a:94:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Aug 23 07:02:10 2025 GMT
            Not After : Aug 24 07:02:10 2025 GMT
        Subject: CN=ca15d0f2b2bf249eff1bbcd07620930a0d733814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:8f:83:a0:9a:7b:a2:bc:69:63:07:2d:de:
                    13:ee:c0:57:b5:f5:25:99:da:95:53:eb:6d:90:a3:
                    39:b1:90:42:44:32:1a:7b:d3:0c:e7:5d:1e:d3:18:
                    97:2c:2e:96:3c:ae:18:46:73:f8:b4:e6:ae:58:a3:
                    74:84:31:92:0a:40:ec:bc:bc:b6:67:d9:21:06:98:
                    b2:c1:20:3c:e2:43:c6:fb:56:df:cb:8a:f9:13:28:
                    a7:7b:d3:e5:2b:ab:5e:15:fd:e7:d4:57:76:0d:db:
                    66:9d:00:bf:41:2d:e9:73:21:5c:5e:2d:61:0a:81:
                    cd:ad:06:43:62:5c:96:8c:e5:87:ae:49:7f:90:07:
                    ec:73:12:1c:80:c2:5e:ce:1e:eb:a5:0f:7d:0a:3c:
                    1d:dd:bf:f0:1d:dc:e9:76:51:19:da:fa:66:17:15:
                    00:34:2b:00:18:8a:4c:f5:07:36:30:49:8b:1f:c6:
                    df:48:f0:b3:d6:f4:01:8c:1b:7f:6a:80:23:49:47:
                    72:4b:19:86:d9:54:63:39:72:84:a2:4a:26:68:c3:
                    ca:c6:6c:f6:65:ca:8a:e7:57:03:9f:c5:64:c4:cc:
                    6e:fa:78:94:58:cf:70:3d:19:53:2e:82:62:0e:9b:
                    3d:88:f1:0e:81:ee:84:49:70:c4:d6:08:61:77:40:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:D0:F2:B2:BF:24:9E:FF:1B:BC:D0:76:20:93:0A:0D:73:38:14
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:62:38:4d:e9:41:33:cb:d7:4d:33:37:9c:97:4e:05:e7:
         07:8d:f6:11:fc:0a:3e:94:69:0c:a6:80:17:94:5c:a9:5f:58:
         ac:0c:43:17:c9:36:98:e1:1c:49:2b:c6:69:e8:14:00:b5:2f:
         18:b5:3a:6b:b2:a1:73:36:ec:a3:03:56:d4:7c:82:39:65:75:
         b9:53:b3:a6:62:a4:f8:4c:26:81:68:03:d1:47:23:31:d7:57:
         9e:de:71:4d:05:10:5d:67:1e:b7:cc:b4:6d:f4:eb:9c:ec:29:
         83:d6:22:f0:a2:63:84:bd:cd:8d:a3:a2:a4:27:55:e5:13:be:
         ce:e4:f8:c2:37:fe:e4:25:a2:cd:31:66:71:be:9f:cf:7d:39:
         f0:23:74:cf:85:1a:dc:98:fd:ba:90:6c:75:8c:d0:48:d1:c0:
         43:12:26:06:83:0a:b6:98:de:01:79:b1:29:0a:1d:6d:a5:b8:
         ad:d2:58:98:59:4d:94:ff:f7:7d:c3:15:06:95:9b:f0:97:83:
         41:a4:a2:85:98:73:e8:42:57:64:1d:7f:4e:88:d0:79:78:b1:
         a7:b8:ad:ad:7f:de:ca:cc:6c:ab:ba:00:51:98:02:f9:9f:07:
         81:b0:ad:5a:54:80:54:6a:93:e2:06:7e:cd:38:d3:20:ca:76:
         2e:38:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:42 2025 by rpki-client