Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          mxzPln0gLeEy4LXN/BZJQTkpov6MYJnGekw3g/82N4I=
Subject key identifier:   48:C2:4A:08:7E:FF:2F:E2:6B:15:29:79:84:AB:30:84:FF:3E:1C:3E
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       0198D5839DF5363D177052D43C515A546AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:29 +0000
Files and hashes:         1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: ksGO3iluUzLguqpd8WxoD2fWLM30gW9bLdY82QsGPko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:9d:f5:36:3d:17:70:52:d4:3c:51:5a:54:6a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Aug 23 06:00:29 2025 GMT
            Not After : Aug 24 06:00:29 2025 GMT
        Subject: CN=48c24a087eff2fe26b15297984ab3084ff3e1c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:13:c1:ec:9e:5a:45:85:1a:da:bf:1e:b4:
                    96:77:a2:23:28:bf:0c:7f:83:02:24:93:bb:3d:f5:
                    b9:f0:d8:1c:ae:9c:75:51:6d:46:b1:7c:36:5d:43:
                    ae:bc:0e:fe:c3:c9:b8:64:2c:19:a1:b5:e4:76:9a:
                    71:4b:94:b4:41:4c:28:0f:a5:1e:0b:38:91:32:42:
                    80:b0:70:a9:92:ee:53:f2:3e:dd:5d:55:d5:1c:58:
                    1e:b7:7f:f9:e0:c0:1d:30:24:f9:de:08:f9:12:1f:
                    b0:61:19:96:6e:6c:26:0a:30:cb:36:c0:bd:4a:ae:
                    d9:4b:81:3f:b4:cb:c7:66:3e:41:ec:2d:65:fe:18:
                    fa:62:48:f7:77:8a:fa:72:ca:e7:af:7c:e1:1d:29:
                    6b:dd:17:63:19:9c:dd:83:da:e0:bb:42:bd:94:51:
                    9f:81:fe:8b:7c:06:e6:b9:67:36:74:7d:4d:4b:72:
                    12:47:2f:0a:34:96:70:ce:57:f3:c5:71:67:76:cc:
                    4f:ec:a5:02:54:c3:89:70:0d:8d:6f:52:0d:07:ae:
                    04:30:08:f5:db:d0:c5:4e:2b:c9:f3:56:fd:40:dc:
                    ad:4a:c4:71:30:67:8b:95:bb:17:be:92:82:f0:c0:
                    57:68:60:8c:5d:db:c6:7e:55:0a:2c:be:8c:b5:cf:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:4A:08:7E:FF:2F:E2:6B:15:29:79:84:AB:30:84:FF:3E:1C:3E
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:44:21:ef:f1:5f:61:e7:f8:c5:e0:c1:05:80:bf:06:17:
         8b:0a:d7:63:1c:b1:0c:32:c7:0d:90:95:36:5b:97:7c:f3:d0:
         da:4e:05:6b:a7:42:13:f9:44:a3:42:a0:30:50:d5:c6:82:dc:
         93:7c:e2:62:e4:53:ce:98:7a:97:06:26:95:91:5f:df:65:d2:
         d1:7a:74:e9:f2:49:09:e7:4a:1e:ff:f0:41:43:bb:df:39:cc:
         e5:39:bc:76:a1:eb:c8:9d:1b:cc:5b:5d:d7:ed:14:4d:51:7d:
         01:79:20:dd:fe:19:44:e8:6f:49:45:6f:7f:7b:70:6c:18:17:
         97:6a:4f:f6:e6:00:b9:1b:7d:ab:fe:1d:36:04:87:f3:b2:98:
         3a:62:2f:30:e5:ee:d8:8a:31:32:95:9a:a0:b3:0e:91:41:9f:
         5f:fd:fb:7b:32:1d:f9:10:36:a4:db:f2:44:41:8f:82:cc:e6:
         bb:d5:ce:0a:e5:76:9e:e1:85:b4:aa:10:5a:0f:85:8b:25:5e:
         89:3e:16:84:65:90:0c:15:7c:16:eb:78:2e:de:e8:1d:a8:60:
         93:fd:b4:51:c8:b1:f5:d7:21:ce:4c:6a:0a:2a:e7:94:50:02:
         4f:de:41:e2:1c:ad:36:e2:bc:02:e9:f8:a7:a2:9b:c4:41:50:
         8a:7f:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:56 2025 by rpki-client