Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File:                     41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier:          W55VbXHp0+4e0g3URKX02k2w9G5iN9aw7e+Oumxv9Zo=
Subject key identifier:   DB:AF:6C:51:16:C3:81:B2:39:33:31:ED:74:6B:C7:DB:EF:8B:60:78
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer:       /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial:       0198D65FFD24BFCAC6B33D098FB4577E5A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:01:11 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:11 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:11 +0000
Files and hashes:         1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: cmjD153nlyz3bZE9LXUWdZVudj6gkUYWmI0xSB2lhlM=)
                          2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:fd:24:bf:ca:c6:b3:3d:09:8f:b4:57:7e:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
        Validity
            Not Before: Aug 23 10:01:11 2025 GMT
            Not After : Aug 24 10:01:11 2025 GMT
        Subject: CN=dbaf6c5116c381b2393331ed746bc7dbef8b6078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:26:1f:5d:c2:46:8f:2c:4e:00:5c:a0:39:
                    f2:14:94:25:fc:46:9e:89:d4:f5:f9:f7:88:3a:41:
                    40:bf:56:df:93:f7:8c:83:0f:f8:09:07:96:ab:b5:
                    25:3c:fc:8b:f7:ec:0d:6b:50:bb:b9:0c:62:0b:e9:
                    9e:76:04:a7:c1:c8:0b:44:bf:cd:23:44:df:d6:48:
                    c0:9c:54:b8:ba:b9:da:4e:ee:11:27:dc:90:42:06:
                    b9:34:43:0c:3f:86:fc:c8:fc:78:62:53:ba:4d:65:
                    ea:45:e5:22:9b:b5:47:eb:f8:6a:f5:66:e6:18:b0:
                    f8:29:41:35:ab:83:88:a2:8a:2e:e7:dd:de:81:71:
                    d7:27:c0:1a:b5:4c:aa:2e:b0:6b:e5:7c:28:e4:d4:
                    5c:87:2f:01:b4:db:07:58:fc:ae:7c:5f:36:78:5d:
                    b9:56:4d:b8:6b:9f:53:91:7d:4c:08:33:ef:18:fb:
                    bc:3b:42:75:c5:89:87:4b:b7:da:b9:cc:85:2d:ea:
                    a6:48:ee:3c:ec:fb:af:51:32:72:d8:51:4d:89:33:
                    27:bb:2f:dc:80:f9:4a:ab:61:eb:46:ad:35:09:04:
                    35:a0:3d:25:6e:c8:52:55:7f:68:0e:f9:49:55:0f:
                    d3:b5:39:58:db:c1:66:bf:54:06:98:35:fa:c3:f6:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:6C:51:16:C3:81:B2:39:33:31:ED:74:6B:C7:DB:EF:8B:60:78
            X509v3 Authority Key Identifier:
                keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:9c:70:2b:c3:9a:20:3a:81:fb:c1:c8:47:a5:ed:66:95:
         64:56:59:61:e8:c8:97:6b:c9:4d:0c:2b:91:fa:37:26:4f:99:
         48:1c:00:77:93:b1:2e:5e:64:3c:4d:80:c9:9c:1b:99:e4:7b:
         c4:14:59:cb:88:e4:d6:95:cc:83:92:ec:cd:a7:52:52:9e:37:
         b6:dc:1d:47:77:cd:24:4b:8d:63:ae:41:1a:a1:c7:1c:01:cf:
         55:9c:93:cd:ed:07:7e:fc:41:48:0a:b2:36:89:44:a2:f5:b3:
         c5:64:a1:79:2f:85:6b:96:35:ef:09:f2:aa:38:5c:f5:31:ff:
         e0:b2:6b:32:91:d9:af:87:04:ba:93:41:f4:f9:22:59:43:92:
         ec:64:9e:87:59:bb:59:35:c0:34:e3:24:e0:43:db:7a:fc:f4:
         e8:94:51:34:e0:e9:f4:3a:ec:27:3c:5a:7b:2f:85:7b:ba:22:
         e0:06:5e:96:b4:34:d2:53:42:a3:b9:de:de:9e:cc:62:8d:2e:
         0f:76:f5:6f:8e:d3:2a:c3:96:b8:32:b9:12:99:18:bd:b2:f3:
         25:44:12:53:d2:52:8b:1b:1c:8f:12:aa:ea:73:8b:e3:d0:ab:
         72:3c:d1:a3:68:ca:ba:63:eb:f8:02:9d:6a:30:ab:3c:fa:26:
         5c:3b:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:52 2025 by rpki-client