Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File:                     xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier:          gRXrcReIbTXcCBNXoacQ4NfyDxShrd3SKnWwPYmA/I4=
Subject key identifier:   2F:B0:79:7D:EF:BC:22:3F:0C:90:79:EA:EB:F2:17:A8:C1:FF:28:6C
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer:       /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial:       0198D65F06EF2C6879A945A760B55A512008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:08 +0000
Files and hashes:         1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
                          2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: xjUgHEotn6jHq7KNmX83P9OcnxRgHxyQuLjMSxY/gro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:06:ef:2c:68:79:a9:45:a7:60:b5:5a:51:20:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
        Validity
            Not Before: Aug 23 10:00:08 2025 GMT
            Not After : Aug 24 10:00:08 2025 GMT
        Subject: CN=2fb0797defbc223f0c9079eaebf217a8c1ff286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:72:fd:cf:de:43:fe:1d:a9:fc:25:e9:7a:
                    e6:88:32:11:d0:6a:32:34:6b:08:08:58:d4:b6:a0:
                    77:83:a5:f9:59:d0:e6:a1:62:0e:a8:f5:43:8e:b6:
                    22:41:ac:67:5e:73:48:dd:25:cb:58:9f:e1:52:25:
                    76:da:a5:e2:52:70:84:d5:40:4f:d1:85:28:9d:bd:
                    d4:8b:70:11:b8:60:a2:b0:16:c0:cc:0e:1e:17:26:
                    a2:53:9d:a3:9b:ed:0e:d7:94:21:ff:30:e8:2c:c3:
                    e2:d1:04:6a:4d:08:24:4c:66:d0:da:7c:50:1c:a3:
                    7d:37:fb:0f:06:05:94:dc:f1:8b:a3:e4:0d:e9:6a:
                    35:33:8e:18:9a:c7:38:d5:be:ae:9f:22:f6:77:29:
                    ce:ab:32:4f:bc:75:ec:a3:48:e9:ab:7b:61:ee:a4:
                    0b:33:7e:e0:72:8e:92:62:2b:ac:53:62:69:99:c8:
                    8b:7d:2c:64:c1:53:84:ff:42:b5:44:76:68:5a:a9:
                    03:86:79:65:f5:73:05:7b:23:8b:7c:11:12:ee:27:
                    4d:c4:15:99:d6:84:8f:7b:61:0a:b8:d9:46:0a:bb:
                    aa:57:3f:82:74:2c:9d:72:a1:f3:0e:3c:47:68:59:
                    aa:cc:43:81:f6:d4:1b:a2:31:25:0b:98:3d:f4:f7:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:79:7D:EF:BC:22:3F:0C:90:79:EA:EB:F2:17:A8:C1:FF:28:6C
            X509v3 Authority Key Identifier:
                keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f6:86:0d:24:0a:8f:9b:cb:09:56:91:6a:c0:d0:c8:73:ae:
         f2:85:c2:a5:dd:48:c3:87:4a:36:7b:c4:87:e6:98:be:a3:7b:
         7c:22:95:e3:7e:e2:12:9b:53:ec:54:89:36:9d:d5:e7:6e:2f:
         a4:b7:05:8d:35:77:ea:eb:c5:e5:ad:90:52:24:b8:00:8a:51:
         e1:a6:e8:e3:92:ee:06:09:9b:ab:f9:e0:87:22:30:7f:00:0f:
         f3:dd:ff:a4:6a:ed:1f:0a:dd:8c:66:65:27:af:d8:01:95:86:
         24:06:30:70:12:94:ff:23:4a:47:6e:11:ba:72:85:88:5e:96:
         d6:7d:a7:47:3f:71:38:bf:a6:a2:eb:20:06:46:a6:94:0c:6e:
         5a:f2:8e:3a:01:4d:c3:91:9a:50:5f:14:47:a3:2a:8f:8f:dc:
         d5:e4:b2:b0:f4:f4:57:29:fb:e9:7b:10:e0:cb:e4:a4:52:79:
         04:16:93:eb:21:67:90:3d:54:32:94:e2:d3:12:8e:d7:e5:87:
         fa:d9:f8:e2:9c:6b:5b:8f:6d:ac:b6:25:e2:82:f4:98:f3:b8:
         4c:15:e7:16:fa:c8:08:98:51:31:0c:ea:80:99:b7:66:fc:e2:
         50:cc:90:30:b8:af:dd:48:b6:3e:09:4a:f7:94:7d:ca:6b:7a:
         33:b1:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:39 2025 by rpki-client