Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File:                     2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier:          s4Sx6ELVU4fisMdLAI1PUHRoKX88CwAzquUORh9AurM=
Subject key identifier:   17:5A:B0:3B:3A:C0:67:76:52:81:0D:45:E2:C9:56:BF:84:74:BC:62
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       0198D47278424C7A3745119D78478C39F331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 01:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:08 +0000
Files and hashes:         1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=)
                          2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: SuFvQFaaCq2T13ICbqJ4WNOw00I7QaFXyXq+0lm6XVA=)
                          3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=)
                          4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=)
                          5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=)
                          6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:78:42:4c:7a:37:45:11:9d:78:47:8c:39:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Aug 23 01:02:08 2025 GMT
            Not After : Aug 24 01:02:08 2025 GMT
        Subject: CN=175ab03b3ac0677652810d45e2c956bf8474bc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:aa:ed:67:8c:53:a7:5a:47:02:7b:22:87:
                    f7:69:48:0e:01:53:63:15:dd:85:d9:90:00:e0:39:
                    24:8e:c0:c7:1a:ca:8a:5b:53:a3:77:e2:83:5c:21:
                    7f:86:64:d5:32:59:1c:36:26:59:e0:5c:7d:54:a2:
                    4f:06:77:d1:40:a9:93:d6:70:5e:bf:28:c1:f9:1e:
                    b0:1e:70:09:e3:e1:e5:ec:d1:2f:fd:51:ef:31:51:
                    aa:01:01:7b:55:96:4b:32:70:60:16:4b:68:1b:fd:
                    73:30:19:b4:4d:f4:78:8a:97:71:bd:92:7b:99:81:
                    06:04:52:a4:89:64:6c:15:01:3e:36:89:be:14:6d:
                    e8:9b:35:f6:af:c8:8e:28:1c:e4:36:05:be:19:e6:
                    25:32:82:93:5b:13:29:33:88:46:4c:db:2f:34:42:
                    c1:5a:d4:ce:47:b5:ed:c0:02:dc:43:8f:38:14:82:
                    1b:5e:d9:92:ed:f3:85:10:0d:60:b1:87:1a:7e:69:
                    7e:0d:33:6c:d8:1b:e8:d5:71:d2:d2:ad:7b:23:33:
                    96:a0:d9:72:3e:09:d2:16:d7:71:26:62:5d:e4:b9:
                    6c:82:9e:d2:52:76:4e:2b:4b:1d:2c:b1:16:25:9d:
                    29:ad:15:3a:ba:30:e3:36:b6:c6:56:35:20:12:5e:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:B0:3B:3A:C0:67:76:52:81:0D:45:E2:C9:56:BF:84:74:BC:62
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:12:bb:73:2d:a7:95:84:e0:26:bb:50:63:35:99:af:b4:
         84:fc:b2:7b:e5:ef:f5:00:71:1c:4f:0a:dd:90:40:62:90:0a:
         72:bb:e4:76:b0:64:f5:b1:89:83:96:d3:1a:28:cb:89:9e:2e:
         5c:cd:a6:1b:c0:4d:29:7e:95:e8:42:e8:eb:c9:cf:4e:ce:ff:
         5e:f0:18:e3:0e:9f:5b:71:d8:6e:f6:a7:84:80:de:54:e4:a0:
         0a:50:6d:b1:a4:9c:0a:cc:12:8e:a5:79:d8:c4:de:37:90:98:
         17:07:3a:57:33:2b:5e:b1:bd:13:50:02:23:12:d9:28:cd:45:
         69:2a:6c:da:78:ed:8b:bd:21:78:cd:80:a8:27:3c:37:37:ea:
         bf:ec:d6:57:ab:3f:e3:aa:2a:ac:83:f6:fa:f3:0b:60:1a:9b:
         0c:16:bd:b7:b0:3a:ca:ee:bb:16:36:16:9b:6b:c1:fb:69:cd:
         ca:ef:33:0e:81:9e:2a:b9:79:98:05:73:2e:4c:3b:e8:eb:c9:
         70:55:b1:31:1a:7a:bd:70:97:fc:f5:14:ee:d2:e8:a4:5c:f1:
         40:ef:24:1c:e8:b1:fe:3b:f6:12:78:f0:03:8a:6a:d6:47:ba:
         e7:65:4b:30:8c:d4:09:bd:5e:22:d3:13:a4:7e:5b:72:89:d1:
         12:1f:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:35 2025 by rpki-client