Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          xn/FrodYh6c/tZLnB32cmmx2pca9Om7+AVypCM0jZXg=
Subject key identifier:   21:14:5D:CA:6C:FE:0F:CF:D2:9A:34:EA:2A:B6:2E:E1:03:9C:D1:B4
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       0198D473C1E33FB320DF83E4C593C4B86016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          165A
Signing time:             Sat 23 Aug 2025 01:03:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:32 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:32 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=)
                          3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=)
                          5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: eGFGSbjwBkAMgjdAsgsBrIgYaS2V+KgLS964x09Jq/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:c1:e3:3f:b3:20:df:83:e4:c5:93:c4:b8:60:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Aug 23 01:03:32 2025 GMT
            Not After : Aug 24 01:03:32 2025 GMT
        Subject: CN=21145dca6cfe0fcfd29a34ea2ab62ee1039cd1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:06:39:76:fb:ed:44:b5:ba:a3:7f:94:c1:
                    14:9d:31:0c:0b:57:42:0a:19:a5:21:2c:ac:da:cc:
                    19:f9:25:f1:68:f5:07:0c:65:a6:63:b3:9d:77:da:
                    52:15:c0:bf:19:da:9b:d2:d3:8e:18:fa:26:b3:44:
                    a4:8c:eb:c1:2e:bf:c6:a1:1a:48:ad:e8:b1:02:c7:
                    30:56:7e:db:94:ff:41:68:1a:c5:49:d9:66:86:c6:
                    59:5c:11:94:17:a0:3c:8e:11:86:70:dd:4a:a3:28:
                    33:d6:e3:40:e2:d0:86:3e:8b:1c:c8:13:8d:40:b1:
                    ca:c6:36:13:43:ed:ea:be:ed:74:c8:37:01:dd:cc:
                    69:63:0f:7c:96:be:6d:b9:a8:83:9a:01:f6:f8:9c:
                    5a:74:20:9e:d4:5a:fe:7b:c0:1c:9a:1a:a5:ad:3b:
                    f1:7f:47:ac:83:51:e7:32:fd:0d:8b:c2:bd:77:75:
                    1e:46:48:87:fd:0a:c6:40:31:4f:ca:96:de:b8:c0:
                    d1:60:96:63:49:22:4c:df:47:18:eb:aa:fc:80:fa:
                    10:e2:0a:81:93:0d:3d:2b:9f:59:1a:49:cc:38:10:
                    56:7a:9b:f8:cf:23:27:85:ac:fa:db:1e:11:d3:f9:
                    aa:4b:a9:24:85:62:db:fc:48:34:f9:50:d6:30:a3:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:14:5D:CA:6C:FE:0F:CF:D2:9A:34:EA:2A:B6:2E:E1:03:9C:D1:B4
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4e:42:92:42:83:6a:83:19:a9:4a:e4:e1:4e:f2:4a:d4:69:
         6f:93:3a:d8:58:06:1b:83:e6:90:e8:49:16:dd:b7:1b:f5:3f:
         e6:7c:85:ad:67:fc:02:fb:f2:eb:74:39:d6:c4:3d:cf:46:2e:
         23:95:63:5f:86:9c:63:50:b9:a2:74:c4:e4:6c:4b:75:3f:c8:
         3f:ba:3f:2e:46:ed:d2:ca:d9:7d:0d:3c:9a:09:ab:6b:db:de:
         d4:35:5e:c1:f0:c1:7b:45:74:ec:d3:d4:55:cd:c3:b6:14:7a:
         a0:9e:3a:43:7c:15:0b:ff:a8:54:e4:16:85:b1:4d:98:ba:81:
         74:fa:0d:46:07:62:1f:00:90:6e:62:f4:5b:58:77:b3:32:dd:
         29:73:0d:f0:22:e0:88:8b:69:a8:e8:e2:85:17:6d:36:c6:5b:
         81:00:f7:59:10:3f:62:4f:22:96:bf:c4:4c:c8:2d:74:47:62:
         2b:c1:08:29:fe:e8:df:6e:28:15:12:e3:b2:5a:99:b6:1a:ff:
         2e:0c:80:f3:85:0d:a0:b0:4e:88:12:f8:c7:37:9b:9c:c2:ef:
         e3:8a:6f:57:69:42:84:cd:8a:bd:10:2a:22:64:61:b0:3d:46:
         b3:9a:4a:d1:7c:e5:c8:3d:7f:d4:f5:d3:96:b0:83:c7:26:22:
         f3:ae:4b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:20 2025 by rpki-client