Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          hpLqCYcpd8VNhZfCJiIEQiqSJxQb9kCieCErt78fvQQ=
Subject key identifier:   80:AA:35:51:18:4B:09:2D:CD:FB:A2:40:1B:D2:5E:8B:6C:F4:AB:F4
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       0198D5F12CA26789C41A4290F64C59DC4251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:09 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: 6w2f6D03d7joJJTTvHSG4gAEYKA10/PWTMsu9wWImOI=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:2c:a2:67:89:c4:1a:42:90:f6:4c:59:dc:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Aug 23 08:00:09 2025 GMT
            Not After : Aug 24 08:00:09 2025 GMT
        Subject: CN=80aa3551184b092dcdfba2401bd25e8b6cf4abf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:aa:85:3e:74:72:ca:ed:ad:f0:42:ad:88:
                    1c:23:60:3d:19:0a:23:70:66:e7:5b:10:9c:30:1d:
                    e1:95:97:5c:75:40:6d:fa:d0:89:76:08:74:e1:fe:
                    b8:3b:c6:8b:40:88:f4:c0:33:d3:59:20:5c:62:6b:
                    b5:85:be:78:ee:2b:3b:50:2d:7d:57:6d:d0:22:39:
                    c8:ab:48:56:dd:5a:3c:f1:98:a8:8d:03:84:49:3e:
                    50:20:fe:64:4c:4b:6f:5f:15:be:63:6d:cd:73:cb:
                    cf:32:64:ee:95:66:dd:01:1c:44:62:59:77:4c:21:
                    e8:81:e7:ef:73:2c:46:30:36:0b:15:83:2b:2c:2f:
                    ac:1f:51:96:69:87:c7:7e:e2:2f:d8:3a:e0:42:ba:
                    27:13:3e:7e:c0:a6:e7:81:66:40:42:49:74:79:66:
                    d1:70:aa:2c:ca:82:89:aa:11:7a:7c:34:04:ad:c7:
                    79:b1:4f:7b:d5:d2:9c:ae:87:f7:76:3a:01:00:7f:
                    f7:fa:24:de:b9:e7:a8:68:12:4b:37:66:9d:3f:42:
                    56:53:9a:7b:56:2a:c0:f1:18:e9:29:86:10:c5:83:
                    ad:69:2b:63:a7:fd:93:33:82:4d:b3:58:16:03:ef:
                    38:69:79:79:b9:fa:65:8c:68:54:48:07:f5:37:c9:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:35:51:18:4B:09:2D:CD:FB:A2:40:1B:D2:5E:8B:6C:F4:AB:F4
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:b8:dc:65:f0:1c:32:10:16:56:05:3c:24:01:16:dc:25:
         6b:4d:f6:71:21:f6:23:34:7e:84:89:a5:96:df:c6:40:20:6b:
         0d:a9:d0:4a:59:ba:47:33:89:5c:7f:0d:16:96:81:1e:69:3f:
         3c:98:46:3b:6f:35:97:70:60:67:1a:a2:ff:11:4f:41:88:ce:
         be:ac:73:6a:dd:fe:d8:b4:3c:d1:f1:55:c8:49:45:a1:c1:36:
         29:ef:cf:51:50:c1:2c:3a:2e:1e:2e:4d:14:c4:20:9a:30:5f:
         05:26:2a:bf:1a:5d:a5:2b:52:55:21:ff:fb:d3:a0:51:63:64:
         7f:41:4c:60:c4:f0:4e:b1:08:2b:72:db:6a:fa:f8:cd:60:2b:
         1b:5e:75:04:8b:a6:1a:92:3d:99:2f:73:2b:c2:cf:da:66:0f:
         8f:3e:6c:3e:3c:fa:af:5e:ad:e0:23:b3:15:a6:03:91:c0:d8:
         95:c4:ed:cb:86:13:df:48:d9:18:13:17:68:bb:bb:e3:ba:19:
         c0:09:88:cd:12:3c:66:e3:f1:f7:85:61:de:98:85:26:b6:18:
         75:78:f3:78:06:04:69:80:35:07:0a:42:5d:17:08:31:8a:1b:
         a7:b0:e8:77:1e:c3:38:d2:8f:42:0f:d1:6a:a9:4b:04:2e:02:
         dd:c0:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:51 2025 by rpki-client