Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File:                     M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier:          RVgUfaJZrzjKwnfBOtePW8fEDzE3XpyBWm1UDenvGkM=
Subject key identifier:   98:68:8A:53:3E:DB:57:45:A9:B2:0C:74:80:AA:64:0B:7C:FA:A7:A6
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer:       /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial:       0198D5BB8B2264C209290911A4FF1895F839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:34 +0000
Files and hashes:         1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
                          2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: qxpwKigYNptK86YeCU6uYNuVvfSFQSj/DlQDqVCs7BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:8b:22:64:c2:09:29:09:11:a4:ff:18:95:f8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
        Validity
            Not Before: Aug 23 07:01:34 2025 GMT
            Not After : Aug 24 07:01:34 2025 GMT
        Subject: CN=98688a533edb5745a9b20c7480aa640b7cfaa7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:6f:89:02:fe:ad:cc:04:db:a2:d8:f6:0f:
                    df:0e:9a:6d:e4:ba:2b:5a:4d:37:57:96:be:6c:a7:
                    1a:d6:5d:4c:5a:2e:da:c4:0d:ee:66:68:67:6e:fc:
                    40:c2:00:26:fb:9c:f4:c2:53:d7:5c:d2:41:db:7a:
                    75:16:ed:8f:77:b0:1e:a3:a8:f8:3b:ff:2c:12:dd:
                    65:ee:c8:a2:2c:f5:f5:81:44:86:3d:2e:19:a5:b5:
                    13:d6:bb:1f:08:e4:d5:3a:a8:76:a1:a4:fc:c3:88:
                    9b:65:99:57:af:81:cb:59:f9:7d:f6:a2:d1:79:3c:
                    2b:ca:b5:87:e1:75:53:25:e6:4a:2f:25:56:e9:da:
                    1a:40:22:9b:32:c2:f8:40:e4:d8:af:3e:dc:51:30:
                    d5:0d:f1:8a:ae:4d:b1:46:60:c0:da:ee:06:59:ee:
                    6b:9f:ef:00:67:59:85:72:53:80:94:d8:82:97:1d:
                    c9:16:07:7d:46:b0:2e:bc:45:4c:24:7c:27:5b:9c:
                    29:2c:b3:76:16:78:53:46:6f:e1:a9:e2:df:4c:78:
                    ac:6b:a6:8a:82:03:a6:1d:bd:a2:bd:f4:98:3f:3e:
                    31:72:f8:03:e0:ad:57:5c:f7:6a:eb:09:e4:47:32:
                    c9:df:9a:e1:8c:b1:3c:94:15:a7:cf:1d:4f:7b:7e:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:8A:53:3E:DB:57:45:A9:B2:0C:74:80:AA:64:0B:7C:FA:A7:A6
            X509v3 Authority Key Identifier:
                keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:f2:5f:7b:ea:d6:61:31:8c:5f:e1:ff:bb:26:ba:61:49:
         e8:ee:e8:5f:db:85:aa:75:36:df:c0:9a:0e:fc:fd:2b:36:b0:
         f4:cf:dc:21:f3:ec:60:a8:10:26:1a:f8:64:58:94:03:60:3b:
         bb:db:07:c8:1f:c3:c0:ab:ec:a6:d1:5e:e5:74:f8:b3:6d:4c:
         e7:be:50:ce:f9:3f:a4:d2:e6:25:cc:a5:58:fc:ac:da:7b:c6:
         39:df:6b:7a:44:3e:6f:8c:53:97:e9:a0:eb:e6:c7:6b:d1:74:
         51:ff:f2:79:f3:a8:be:b2:3e:ef:bc:69:a8:94:a9:06:3f:29:
         fe:22:09:39:62:d8:2d:a5:fe:4f:70:d4:7b:e0:85:3b:67:a8:
         bc:0d:f5:da:f8:1d:67:97:76:cd:b0:56:c8:d1:0a:98:0a:4a:
         9b:fd:fd:55:ea:83:5c:8b:bd:b3:a4:62:c6:bf:b8:35:84:f9:
         6e:9a:bb:be:88:18:d7:86:17:de:fb:3f:a9:9e:cb:08:6f:1e:
         cb:1f:c6:f9:50:3a:b5:93:3e:77:85:e6:de:73:e8:f9:85:9a:
         8a:69:3f:10:cd:77:58:11:de:d8:5a:67:77:35:fe:b4:79:48:
         fc:4d:d7:e6:1e:e9:6d:48:c2:15:22:c1:6f:75:a4:39:4f:a7:
         c6:ea:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:35 2025 by rpki-client