Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File:                     6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier:          TJbK9lSyBxjk6Se5SCoruzGfTjEP3VpThAf1OYGfF5s=
Subject key identifier:   10:EE:33:DB:44:7B:97:42:24:E5:14:61:76:B0:37:77:EC:CA:4B:E5
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer:       /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial:       0198D47254ECB66A840675C73B9A1B8AAF48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 01:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:59 +0000
Files and hashes:         1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: zBDd3uiETU4jN/VlQh4gdK1cEZPfh2JUgOdgJq251ts=)
                          2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
                          3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
                          4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:54:ec:b6:6a:84:06:75:c7:3b:9a:1b:8a:af:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
        Validity
            Not Before: Aug 23 01:01:59 2025 GMT
            Not After : Aug 24 01:01:59 2025 GMT
        Subject: CN=10ee33db447b974224e5146176b03777ecca4be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:8a:53:7b:10:44:02:7f:fc:0e:f5:a3:27:
                    dc:77:78:21:ad:02:1a:78:04:f0:cd:1f:5d:a8:23:
                    4f:d5:33:4b:31:0f:02:72:92:3c:d0:83:c2:af:53:
                    7e:67:09:61:2e:ea:b6:00:35:4c:09:24:04:2e:2a:
                    35:31:38:74:3b:27:17:3d:7e:16:99:0a:45:c0:f5:
                    09:19:c4:27:77:fc:8e:c5:a4:10:ca:a2:8d:a1:8f:
                    94:70:5d:b3:66:82:0e:c7:63:57:5d:33:c5:bd:d6:
                    19:53:1a:9b:80:da:5a:aa:a7:2b:96:52:eb:50:9a:
                    cb:f8:dc:d0:f8:5e:eb:a4:3d:b3:00:cf:a2:34:46:
                    6c:7d:c9:ac:20:ed:d1:0d:5b:6a:9a:0b:81:82:5b:
                    37:df:77:4f:0f:58:1d:91:7d:0a:b0:4e:44:eb:43:
                    6b:8d:4b:87:50:23:80:d6:6f:cf:0a:44:be:46:e8:
                    10:d4:f6:b4:ed:d0:07:b5:78:f3:61:2c:91:94:df:
                    54:a3:3f:f9:e9:2b:da:35:80:16:08:dd:33:6a:15:
                    23:9a:ee:3e:94:00:e2:1b:dc:43:ad:19:34:3a:92:
                    84:7e:85:37:78:53:74:52:6e:e2:07:c7:6d:9c:dc:
                    cb:4a:85:2b:84:2e:b7:e4:79:8c:24:8c:1a:8f:c0:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:33:DB:44:7B:97:42:24:E5:14:61:76:B0:37:77:EC:CA:4B:E5
            X509v3 Authority Key Identifier:
                keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:76:14:6e:ca:da:4b:5e:37:a6:d3:93:e2:31:35:d5:17:8c:
         4d:75:88:72:8a:65:96:fc:0e:b2:95:ba:b6:6b:f0:4f:a7:6f:
         cc:ec:1f:43:d9:7d:ad:ed:6c:f4:8a:a4:f9:92:82:0a:53:31:
         1b:4c:0b:b0:1c:6c:31:4b:8d:3b:68:d2:5e:b4:d9:54:98:d8:
         64:2b:ab:16:8d:b0:eb:95:20:75:7b:ce:3f:07:6f:be:84:d9:
         59:9c:24:5b:d5:c2:d1:a3:4c:22:1f:e8:27:c8:bf:bd:1f:23:
         dd:f8:7f:5b:76:48:2a:d9:2c:f1:50:fe:a3:22:78:65:f1:a9:
         a8:f3:49:aa:7c:b2:85:db:82:11:2d:b7:44:16:06:74:ed:81:
         44:23:5f:01:05:c9:d4:3a:33:aa:74:37:86:51:1f:be:99:b4:
         ea:fb:da:72:38:48:60:97:c4:5b:88:aa:7f:7b:29:09:1d:f4:
         81:87:4a:ec:1e:02:6e:f7:7b:2e:c1:0c:22:0c:9b:71:cc:3c:
         be:d9:ff:92:cc:90:17:6c:d4:87:10:db:0f:eb:8b:c5:c1:3a:
         14:74:e8:d7:a6:c9:b8:bb:7b:75:ee:86:b1:6e:b4:eb:e9:26:
         b6:99:e6:7d:14:3f:5b:ae:d1:c8:a0:1a:1c:a3:ea:d1:a9:4a:
         45:c9:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:14 2025 by rpki-client