Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File:                     hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier:          HZq5aDuDgVXZrvB5AIZefY0LBriZ58xpZPye4JqZMWs=
Subject key identifier:   A5:A7:0C:C1:3D:3A:43:00:C7:C4:85:7C:52:3F:76:9D:DF:0E:71:F5
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer:       /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial:       0198D515E23444301C8C990BCEBB816AB2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number:          016C
Signing time:             Sat 23 Aug 2025 04:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:37 +0000
Files and hashes:         1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
                          2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: 3+6XIt/uN02ItH8ndYJTJMm2O0CxikJW41+tR/xoujs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e2:34:44:30:1c:8c:99:0b:ce:bb:81:6a:b2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
        Validity
            Not Before: Aug 23 04:00:37 2025 GMT
            Not After : Aug 24 04:00:37 2025 GMT
        Subject: CN=a5a70cc13d3a4300c7c4857c523f769ddf0e71f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:92:5e:f6:63:28:4e:e7:14:55:71:45:d8:4a:
                    1b:5b:92:73:57:36:47:f7:45:70:e7:f0:b0:2c:21:
                    b5:9a:34:97:f4:84:83:0e:06:88:ab:ac:3c:1d:6d:
                    87:e0:00:86:fc:bf:a8:42:b1:63:6b:bd:09:08:7b:
                    55:7e:72:e6:83:f7:4c:f1:ad:6f:58:fd:bd:e2:bc:
                    9f:ba:1d:e2:ce:06:0d:b1:fe:af:7e:83:d0:b6:fb:
                    f7:56:a2:a8:03:fa:20:60:ad:3d:af:f9:e6:ba:2b:
                    d9:17:1f:f0:0b:4d:73:6d:77:fb:44:9f:dc:9b:5e:
                    99:df:30:4b:c1:11:87:3c:70:ba:29:cf:34:46:dc:
                    20:86:e9:8d:ce:af:57:63:04:a1:df:fb:2c:99:18:
                    72:84:0b:a3:15:ed:c4:de:c0:ba:2e:cd:ed:89:33:
                    f6:e5:7f:01:a0:fd:81:2e:b6:ac:91:58:cf:e5:c3:
                    0f:3b:0a:36:04:cb:90:1c:3f:0c:d0:9e:a7:67:9a:
                    d1:04:d5:d4:8e:39:ff:53:e3:3a:d0:45:b9:da:85:
                    ff:76:a5:6d:15:eb:ec:e4:ba:87:f7:29:1d:be:7a:
                    e9:09:5d:96:43:9e:37:4f:eb:b5:7d:e3:4d:7e:d8:
                    21:e2:b5:7c:8a:33:0f:d9:ea:cb:d3:f1:f3:b2:bb:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:0C:C1:3D:3A:43:00:C7:C4:85:7C:52:3F:76:9D:DF:0E:71:F5
            X509v3 Authority Key Identifier:
                keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:19:0e:85:0a:39:0a:df:76:bd:cf:6b:18:e2:94:69:59:d9:
         0b:e1:2d:45:d7:65:b5:bd:1e:df:e7:4b:5c:f1:7d:0b:b1:de:
         25:48:f9:d4:e6:7f:bb:49:ec:95:eb:24:27:41:29:a7:02:af:
         17:8f:80:27:56:82:72:15:27:00:54:c3:2d:0a:80:db:78:bd:
         8a:3b:a5:28:18:c2:68:ed:cf:4d:b6:d5:32:a1:ca:5b:c5:d8:
         d8:ac:f6:4f:5f:9f:d5:92:f7:20:48:88:c3:f7:ec:03:f6:ce:
         97:3b:1d:0f:36:b8:3a:33:97:74:74:d4:c8:ec:33:2f:99:1e:
         ae:21:b5:77:ef:ef:64:73:73:1a:0c:89:b6:e1:1a:6a:a8:20:
         21:1c:8b:b4:b2:a9:87:b6:e9:94:ef:87:32:3a:bc:84:29:05:
         49:f9:30:44:42:9d:3e:a4:5f:28:c3:a3:ed:28:06:c9:4d:1a:
         41:f2:6d:06:db:34:75:ae:08:dd:fd:98:5c:ca:79:4e:77:03:
         50:8d:ed:0e:06:02:3c:11:ba:11:4a:24:18:29:dd:2e:f7:bd:
         d1:eb:79:a9:c9:6a:22:71:7c:cc:49:ff:7d:12:81:aa:3c:c6:
         11:df:03:3b:4b:0c:76:d6:9f:af:4e:37:14:6c:45:2f:47:35:
         a7:ec:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:08 2025 by rpki-client