Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier:          WJaNWyUi9DxvZNg5nPdcqKbBppPEvMMFgZV8py/i6S4=
Subject key identifier:   B6:5C:6E:A3:49:CD:0B:6D:31:65:25:1F:78:2E:D9:73:F1:47:1B:93
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer:       /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial:       0198D65F68299A27957D1776C62B5878F1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:33 +0000
Files and hashes:         1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
                          2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: gsvS2tZUXJJkreeRlhztTMtHSg3x1Z4/oJldWFrt2Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:68:29:9a:27:95:7d:17:76:c6:2b:58:78:f1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
        Validity
            Not Before: Aug 23 10:00:33 2025 GMT
            Not After : Aug 24 10:00:33 2025 GMT
        Subject: CN=b65c6ea349cd0b6d3165251f782ed973f1471b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:29:17:69:04:17:03:87:58:9b:17:9d:8c:
                    9e:ff:23:2c:5b:13:33:55:a9:b8:68:5e:af:92:01:
                    aa:99:af:4c:7a:11:46:56:64:fc:18:b6:8a:90:ae:
                    c8:43:4f:4d:3e:b9:d6:71:2a:9a:e2:b2:1f:42:53:
                    07:40:f7:60:34:67:c2:75:b9:4c:29:75:0d:fb:da:
                    04:1c:af:0f:93:43:69:84:2b:7a:16:14:88:4d:c8:
                    57:48:01:8c:22:f4:9e:df:9c:87:11:67:52:9d:9f:
                    a6:f5:8c:5a:23:b9:29:18:7e:24:84:b3:79:75:1c:
                    c6:39:03:cb:f8:42:06:cf:96:39:b6:7e:53:2d:06:
                    ef:18:16:23:cc:28:51:19:b9:56:c8:12:0d:f3:f6:
                    93:21:b2:d9:fb:73:c3:33:ed:73:51:81:c1:96:ca:
                    ba:7c:e9:d2:c9:64:20:c7:75:5d:ee:22:92:5e:6f:
                    66:fb:02:4d:0d:0b:bc:30:d6:b5:13:07:1c:ac:a4:
                    cd:a2:56:c0:af:a1:e8:1f:44:90:bb:6e:2a:6e:46:
                    c4:12:f8:5d:80:e4:0b:1e:37:6a:46:8e:3a:15:1a:
                    21:5d:49:dd:39:f4:a6:2a:73:f6:e0:28:e5:a7:39:
                    5b:11:ca:b4:cd:94:fb:9a:1f:b7:0c:35:81:5b:f2:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5C:6E:A3:49:CD:0B:6D:31:65:25:1F:78:2E:D9:73:F1:47:1B:93
            X509v3 Authority Key Identifier:
                keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:bd:4a:96:a3:33:24:0d:49:b3:c6:6d:93:d3:f4:d0:a5:
         69:10:5b:a8:eb:54:d9:98:6a:dc:bd:12:c2:0f:b7:e9:70:a1:
         2d:3e:8a:47:34:ab:6f:1a:2a:84:4d:e3:4f:9b:52:45:f2:02:
         23:17:0b:55:c9:9c:5d:19:d1:69:b9:87:c4:cc:ff:0a:87:c3:
         0a:a0:1c:73:80:c8:73:df:35:51:1f:e0:12:f8:18:51:e0:82:
         77:9d:59:a9:dd:a7:08:50:c4:64:ef:a9:4d:80:c7:13:92:83:
         8c:6c:d1:97:08:aa:c7:ef:0b:a1:93:f7:a0:75:82:8c:24:76:
         30:50:7a:e0:21:d8:b7:2c:b3:87:f4:12:3b:71:5a:a1:cd:3e:
         71:4a:8f:b6:31:78:1d:23:d1:c5:84:b7:f0:1a:b1:bc:e4:7b:
         bf:e0:80:34:0c:69:ca:0a:fb:bc:92:20:1d:fb:1b:60:f3:48:
         7f:b9:db:ae:ab:ba:19:32:0d:8f:24:4b:7e:55:9f:7c:6f:9f:
         b1:7b:f5:9e:a9:44:a7:8a:63:04:6f:07:a5:fc:3a:01:1c:2f:
         64:2b:46:84:0a:08:6f:4b:e0:6f:c2:b6:7c:5a:53:2e:3e:03:
         f7:fe:6e:01:ee:5b:f1:31:25:24:8e:76:f0:b6:95:d4:75:da:
         87:78:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:40 2025 by rpki-client