Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
File:                     7qArGX269963Tgon2dTs0_rh6O0.mft (raw, json)
Hash identifier:          neTVPnJItgbft8PXRQfOOkqYDSe9RuC4notCjKnqki4=
Subject key identifier:   1D:53:18:93:D3:44:A9:77:2D:30:09:5D:69:65:4F:29:5A:E3:BC:22
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       0198D583BAB4FB40436D4210968ECC4F43E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
Manifest number:          166A
Signing time:             Sat 23 Aug 2025 06:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:36 +0000
Files and hashes:         1: 7qArGX269963Tgon2dTs0_rh6O0.crl (hash: Clrr7d4/kSHMgitEGEzPFV7cSXruW1VLYKY7Wmi/Rsw=)
                          2: FxWebtYYlGe-nsvzX4oDF8uD6mE.roa (hash: k4FRn4gBtVdswS2WfZGMM+Vy5KwCdhuYYS+n70PWeoU=)
                          3: NxsBpjDsWy9v0RWMdQHyTsw07lc.roa (hash: leheEhbDI4XfsGyTiSLU6x5xDwKD07q9ll4YmYgHG4Q=)
                          4: W2y7ILyVjCj4EaeyqbQeC_Dcd1M.roa (hash: Zefjs5+cQyH8QCnVGn+TztucGEd7H6R6h5c8uGrlYWM=)
                          5: aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa (hash: yU020JUGihSFwGMLXiDxQbplODmP3bvw7D4/kPZyPGs=)
                          6: qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa (hash: KF47TtbdP48u62TLuuhtCoJv1ZVOVKI3VHzg8tm8ZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ba:b4:fb:40:43:6d:42:10:96:8e:cc:4f:43:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Aug 23 06:00:36 2025 GMT
            Not After : Aug 24 06:00:36 2025 GMT
        Subject: CN=1d531893d344a9772d30095d69654f295ae3bc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:6f:5a:8e:ba:cf:e9:44:e2:eb:66:18:8a:
                    75:00:08:3a:5a:1d:fd:20:5e:77:5d:72:1b:e2:43:
                    24:ff:52:0d:1e:5d:4b:19:6f:1b:b7:4f:c2:6f:c5:
                    91:3b:e5:1b:34:e6:4e:66:10:36:02:d6:3f:19:c4:
                    62:5b:82:ca:40:6a:2c:88:4a:5d:ba:bb:e8:e2:29:
                    ed:99:d9:d8:7d:3c:62:89:ca:db:64:fc:7e:78:40:
                    10:f0:65:50:83:e4:a3:6d:5d:f0:7a:d7:96:e7:c0:
                    79:83:de:91:e0:6f:cf:85:76:3f:56:b5:a4:03:3e:
                    aa:3a:11:d0:55:92:e6:57:2c:51:d9:57:f2:ed:73:
                    a2:5e:17:6d:9e:27:ec:e5:d9:ef:62:aa:81:51:9e:
                    b8:1a:0b:ef:ca:d3:5c:98:6c:50:a1:2f:28:24:21:
                    cc:5a:d3:e8:16:20:a7:11:a1:37:f8:6e:0f:90:38:
                    ad:39:aa:33:44:41:98:83:b3:14:41:e2:2e:66:c6:
                    47:cd:e9:e3:c0:69:31:44:97:3c:c2:a7:5b:a6:14:
                    eb:20:2f:8c:58:c2:8d:8d:90:1d:51:6f:87:5c:89:
                    de:14:c5:52:a0:65:2b:11:3a:36:c3:ae:de:34:c9:
                    21:c2:f8:55:56:22:a4:7e:4a:db:1c:ff:0f:5a:8b:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:18:93:D3:44:A9:77:2D:30:09:5D:69:65:4F:29:5A:E3:BC:22
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:71:f0:52:09:31:5c:7a:2c:e4:d5:ed:59:7e:28:27:40:
         0f:72:3c:9d:b2:f8:43:99:dd:1f:51:ef:4f:89:2b:cf:f8:01:
         3c:56:de:b4:8f:50:ba:4b:c7:39:bd:ca:5c:6b:80:22:c3:b4:
         94:0c:5b:54:a5:c6:41:cc:4c:b8:f1:03:8c:6a:71:ca:5b:b7:
         1d:5e:ce:cd:68:00:ba:e3:48:46:08:6e:40:76:69:25:e5:09:
         99:72:3f:27:ad:3d:90:32:c8:f1:1e:ea:dd:ab:27:09:47:cd:
         dc:64:e4:c6:db:72:3f:97:92:4c:5b:14:4b:25:23:fd:da:a1:
         89:9a:27:bc:e3:56:80:11:c3:43:ac:d4:d4:09:c2:35:97:e1:
         a0:e3:d9:02:01:76:69:01:ff:06:8a:9e:3b:3f:0b:b9:f7:3b:
         9b:5f:45:0d:2f:36:39:0b:df:b1:42:2b:ea:c8:b4:5f:65:02:
         6d:c5:ea:9e:4d:ad:89:1e:b0:95:a3:9e:b1:f7:bf:21:80:2d:
         f9:13:c1:d8:1a:5f:45:13:8d:01:22:db:a8:ab:b6:f4:e5:73:
         07:2c:e0:58:19:d0:49:db:ff:f7:7c:3c:47:4e:65:24:6b:51:
         5c:95:89:5a:51:d8:b6:e4:7b:d3:3e:3d:e1:33:77:5f:3e:23:
         07:6a:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:00 2025 by rpki-client