Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          +2wn17Fiz4YbcOPvkkJITWNAiaYAfpAlDlhVnxi+dfw=
Subject key identifier:   B0:04:A9:46:25:78:22:D1:B8:E3:0B:62:67:5B:30:9D:7A:63:F6:1A
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       0198D51608CF068E4DB8401BA6E47FE7999F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 04:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:47 +0000
Files and hashes:         1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: LBLQLOUAT8ERaNaklMTWqonPUy7u8tfFSonJV3Axvc8=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:08:cf:06:8e:4d:b8:40:1b:a6:e4:7f:e7:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Aug 23 04:00:47 2025 GMT
            Not After : Aug 24 04:00:47 2025 GMT
        Subject: CN=b004a946257822d1b8e30b62675b309d7a63f61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:09:2e:01:7e:41:8c:0f:d5:04:72:16:ed:
                    90:93:40:2d:fb:a9:a4:d8:1c:62:a9:d5:e4:d0:c5:
                    9c:68:fd:a8:ba:70:3e:98:e7:35:b0:53:06:83:fb:
                    50:90:e0:ad:75:74:9f:d3:f8:69:78:90:f9:bf:3c:
                    b6:52:0c:cf:23:05:59:79:e2:dd:c7:ea:c9:3f:03:
                    49:2e:d7:b6:82:5f:fb:6e:bd:48:7d:b7:db:fc:83:
                    9b:f1:61:29:a9:68:7c:ea:eb:09:e8:02:04:9f:f6:
                    2a:05:8f:42:ce:24:17:35:bd:80:1b:a3:b2:5c:41:
                    06:8f:fa:46:19:c5:64:5c:36:d3:a3:83:5e:e7:9a:
                    4a:48:b3:e1:19:f4:d6:7e:48:5d:0c:2c:66:ab:37:
                    23:a7:16:9a:e2:3b:e7:e7:27:e6:23:bf:e0:ee:83:
                    29:d7:35:ce:af:ae:2d:3a:60:3d:b9:ad:ba:19:ef:
                    63:ac:ed:a9:e9:fe:47:bd:93:5e:14:18:9b:23:3f:
                    11:39:f8:b9:89:f2:a7:de:ba:1b:21:e7:53:65:59:
                    ad:cd:43:98:0d:38:a5:45:81:24:d5:5d:9c:da:4b:
                    60:8f:c3:b1:59:36:99:2a:57:04:1e:ee:7f:0e:bf:
                    b8:19:9a:10:d1:c2:b9:0c:77:38:ac:06:74:7f:83:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:04:A9:46:25:78:22:D1:B8:E3:0B:62:67:5B:30:9D:7A:63:F6:1A
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:15:60:e7:8e:fc:64:82:85:4f:f5:2f:41:db:73:13:99:57:
         1e:9e:70:19:cd:61:a4:9a:c0:ef:c4:df:7a:e0:26:14:a6:dc:
         f3:6f:2a:af:bc:d9:e5:a1:8b:2c:60:44:fb:66:88:89:53:33:
         92:fb:03:c2:28:61:a5:43:57:fc:6a:a3:4b:7b:50:af:7d:89:
         cc:9e:5b:60:7d:4b:f2:c4:34:f0:49:d9:d6:14:bf:52:fc:5d:
         65:c7:8f:e2:c9:b2:7e:06:67:9f:2a:7f:c2:df:40:63:57:31:
         fd:ba:0c:a2:a8:2c:08:cc:13:00:7c:01:ff:73:95:80:2a:f9:
         7f:7e:82:6d:e6:9d:44:db:f2:42:bf:d0:31:ab:64:7b:da:91:
         29:ed:30:79:1c:f9:d2:f0:25:8e:e9:a4:46:00:52:95:ba:c0:
         64:e5:0d:c8:9a:42:64:71:46:5f:57:2a:46:95:da:58:ae:00:
         05:08:dd:72:fb:fd:9b:cc:f5:a7:ff:77:d4:5a:6f:36:33:60:
         43:f8:9a:fb:58:c8:00:d9:be:7a:9a:ef:dd:6f:66:c8:00:b3:
         e5:c1:45:32:d2:a5:2c:86:cc:03:b0:96:82:a7:57:11:f7:64:
         1f:48:14:9c:07:55:09:c6:ac:19:f0:a3:b2:66:63:4c:49:01:
         86:01:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:16 2025 by rpki-client