Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File:                     aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier:          jepD+kpOM66dGBHmMvr1GdZK0hHa06SBIc/76+u6UnU=
Subject key identifier:   37:82:E7:46:15:9D:03:28:C9:F1:06:D0:02:4F:0A:F0:26:5A:73:EC
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer:       /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial:       0198D66111512E9863AD3CAF942C24FECE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:22 +0000
Files and hashes:         1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
                          2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: X9JIGGpkU36BBOcQjc2ufr7m2IvkpFjj/RY/hor3d84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:11:51:2e:98:63:ad:3c:af:94:2c:24:fe:ce:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
        Validity
            Not Before: Aug 23 10:02:22 2025 GMT
            Not After : Aug 24 10:02:22 2025 GMT
        Subject: CN=3782e746159d0328c9f106d0024f0af0265a73ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:1e:92:dd:70:e3:07:15:a4:ad:b0:a9:89:
                    a7:cb:55:b0:8b:04:4d:b4:37:8e:42:ce:3c:6e:00:
                    0b:4b:85:9e:52:17:0f:89:65:76:21:f8:4c:04:11:
                    85:38:44:37:86:c2:be:a2:5b:73:55:86:76:cf:73:
                    bd:15:27:ab:37:c1:14:37:87:5d:7e:07:fd:cc:85:
                    82:88:b2:46:43:84:54:c8:ac:69:a0:e3:b7:0c:a4:
                    16:37:dd:13:e3:90:24:eb:41:94:17:58:65:40:87:
                    6b:a2:7f:dc:04:ce:c5:0c:29:2e:64:5b:96:cd:6d:
                    ee:0f:48:d9:31:1e:21:e0:e5:a1:10:7a:86:6f:3b:
                    c6:00:65:e9:48:f8:61:ca:ef:14:25:23:64:5a:9d:
                    7e:39:cb:24:49:75:28:0c:57:59:70:9c:e8:2d:43:
                    1e:a0:2a:8c:76:98:f7:09:28:8c:fe:c2:53:20:f8:
                    b0:44:46:22:bc:1a:8a:f7:66:92:a7:8a:71:1e:13:
                    24:f5:fc:cc:d3:a6:dd:7d:16:99:f1:d7:ad:a9:0e:
                    fd:a5:37:bb:0e:aa:62:be:a0:6b:d8:72:5c:e4:ec:
                    52:95:d8:10:bc:de:0c:2e:9c:81:ba:17:95:a9:76:
                    b8:66:38:14:be:11:86:ce:bc:65:e9:81:34:11:a7:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:82:E7:46:15:9D:03:28:C9:F1:06:D0:02:4F:0A:F0:26:5A:73:EC
            X509v3 Authority Key Identifier:
                keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:b3:50:ba:53:9e:25:a1:da:39:28:24:ee:fc:28:31:6c:
         dc:07:42:dd:c9:7b:4c:b4:77:99:fd:06:88:a6:ee:9b:1c:0f:
         7e:be:0c:f8:18:34:4e:ed:75:dd:fd:21:4a:2e:a9:d9:07:85:
         ea:e6:6e:78:bd:07:8f:cc:8b:ec:39:99:14:4d:4b:a9:31:cb:
         ca:db:35:20:4c:63:a4:ad:e0:18:9d:d7:30:87:a3:8f:c4:28:
         30:08:10:68:0c:ed:d8:5e:8e:48:49:4f:e9:fa:94:21:1b:d5:
         76:dd:91:0b:ac:f4:9c:5f:a3:c5:e8:9b:69:b5:b8:22:9c:dc:
         75:d4:53:c2:52:6b:d2:b6:12:95:4c:be:58:20:2b:d6:52:4b:
         94:b6:ca:f3:09:27:db:70:13:4f:cb:aa:7e:21:75:51:4d:f9:
         2f:e5:ea:56:92:16:47:75:1f:bb:79:91:15:5b:67:ee:be:70:
         f7:fa:66:58:45:bf:bd:54:a3:24:dd:3c:4d:de:a9:34:8b:73:
         79:db:16:20:6e:2c:d5:9b:f3:d2:cb:2e:74:81:d1:af:c0:21:
         e9:b7:c3:ab:c8:d6:b9:67:4d:ce:26:ff:10:c5:d8:4e:cd:18:
         28:1b:8e:a0:5f:6e:87:1c:96:b1:6d:9e:45:b5:9f:98:a4:6d:
         10:5e:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:19 2025 by rpki-client