Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          dsu6IMVnBQenM6n8wYnHu57DJMRFyaHxm2/2UJqwY/U=
Subject key identifier:   48:79:F4:8B:A9:79:DA:EC:85:4E:73:48:51:B3:B8:56:5C:A7:30:F2
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       0198D5BBAAF615C4F8F756C6B2851941192E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:42 +0000
Files and hashes:         1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
                          2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: cWRS4CkOQcqdjAYum2oOJ08jLJzgbNVyYCJ4KKcV8zM=)
                          3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:aa:f6:15:c4:f8:f7:56:c6:b2:85:19:41:19:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: Aug 23 07:01:42 2025 GMT
            Not After : Aug 24 07:01:42 2025 GMT
        Subject: CN=4879f48ba979daec854e734851b3b8565ca730f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:72:72:26:db:bb:82:8f:44:d6:f4:5f:6b:
                    d0:e2:19:84:4b:1f:e7:96:6d:5a:0b:95:ec:29:31:
                    3f:91:bc:24:24:48:21:6f:9b:b1:3a:fe:d0:a9:0c:
                    10:e6:6e:78:f8:72:fe:25:88:1d:14:1b:2e:51:34:
                    2e:bf:82:2a:63:7b:a9:77:f5:79:8c:39:cd:9f:01:
                    2c:57:49:1f:e2:50:5d:94:70:0d:a1:7e:61:7e:74:
                    81:0c:40:b7:6a:9b:aa:b2:a9:71:0f:9f:ee:8d:96:
                    d6:c7:62:a4:d3:45:b4:85:22:aa:44:c0:e8:53:eb:
                    8b:2f:a8:f5:91:11:64:f4:fd:c3:41:31:cc:0e:c4:
                    d6:e3:99:f1:c0:a9:c9:10:81:54:e2:35:90:a3:ec:
                    54:49:56:fc:79:e2:a1:75:14:f5:ea:c2:af:bd:01:
                    02:7d:75:ed:03:5b:51:1e:00:7f:55:58:35:e2:e4:
                    20:98:95:eb:e2:33:32:cd:b5:e3:97:f2:2f:5d:4e:
                    1b:08:24:7a:fd:77:90:ca:37:5d:97:56:e7:8e:3e:
                    9a:db:be:6a:cd:d2:40:27:da:08:fc:01:7b:33:82:
                    7b:15:de:60:58:19:41:b3:3f:03:0b:e1:85:b7:61:
                    11:38:9e:cb:11:61:f4:36:78:b7:a6:8e:18:33:fb:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:F4:8B:A9:79:DA:EC:85:4E:73:48:51:B3:B8:56:5C:A7:30:F2
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:5d:db:00:23:06:a7:44:32:c5:0c:b6:d2:a6:27:c8:fa:
         26:6b:fa:bc:cd:85:36:b7:d7:96:7d:7d:ff:93:e2:4d:96:a7:
         cb:d7:9e:f1:22:d5:e4:26:53:0a:61:b1:be:f7:e4:40:38:b5:
         64:20:e0:6b:af:00:c6:72:4b:53:fa:a2:d0:39:fc:90:f5:53:
         82:e6:8c:30:ba:40:f9:5c:08:b4:9e:d9:47:92:c3:a4:cc:30:
         1c:b3:64:3e:56:d3:67:ab:c7:17:37:78:41:2e:fb:c6:fd:92:
         ce:30:e1:41:29:26:62:90:ea:04:f2:c4:3b:33:d0:18:c7:2b:
         7b:07:f0:79:76:06:c0:97:d4:d7:ce:05:d0:e4:16:68:56:62:
         44:5b:1c:b1:c3:4d:72:3b:e6:dd:b8:05:b0:05:9c:b3:35:34:
         ee:79:b1:2f:61:b5:f5:b4:89:36:e4:4c:f4:66:1e:56:e7:c1:
         21:e8:05:f7:62:66:ec:2b:a3:3d:84:71:8b:ce:fc:80:a4:10:
         61:bd:18:9b:5b:15:44:dc:c6:9f:3a:87:af:e2:03:1c:38:aa:
         c1:23:cf:09:b3:d5:e4:fb:a7:58:ef:05:24:c6:19:57:c0:0f:
         40:ec:78:cb:20:2c:7a:1c:f5:78:67:24:a4:7a:30:0a:d2:90:
         ab:4c:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client