Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          EbZWERq2YbziU6TZluqD1LF4E93rKjphtI90wet1Z9Q=
Subject key identifier:   23:4E:A0:14:B0:D3:D8:C7:28:E2:7E:E0:A6:66:3D:A7:EF:CF:8B:46
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       0198D54DF167FE65B15550623524BA3BC1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 05:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:51 +0000
Files and hashes:         1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
                          2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
                          3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: aQKVNq/9aMoP/ARmOcBxziDy+gz/QnwxhsYRwzgj8wU=)
                          4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:f1:67:fe:65:b1:55:50:62:35:24:ba:3b:c1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Aug 23 05:01:51 2025 GMT
            Not After : Aug 24 05:01:51 2025 GMT
        Subject: CN=234ea014b0d3d8c728e27ee0a6663da7efcf8b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:80:41:f6:7e:d9:d1:09:df:4c:ad:18:fa:
                    cd:bb:84:32:6f:b1:bc:9a:90:b9:38:81:3d:dc:84:
                    d3:62:95:0d:a7:5e:37:9e:bb:ba:b2:46:08:34:c3:
                    4b:a4:f9:90:f4:e4:83:fb:bb:d3:a1:f2:e0:d4:05:
                    55:3e:f6:1f:2e:e2:5d:97:38:c7:3b:fc:0b:81:bd:
                    7d:7e:dc:4a:b7:c9:31:64:f9:09:bc:be:23:27:0a:
                    df:48:ef:2e:bb:6e:fc:db:bf:3a:e1:1c:ac:e2:71:
                    23:27:40:ff:e0:20:3b:67:5c:bd:88:7f:38:c0:10:
                    14:8c:3c:c1:9b:1c:1a:c8:98:d7:90:62:80:a5:c8:
                    a7:39:9d:35:76:2e:cd:d7:12:56:bd:89:b6:3d:0e:
                    0d:7d:f5:46:25:d1:43:d4:9b:97:71:bd:19:ff:c6:
                    e5:53:6d:ea:7c:2a:7e:14:35:59:44:21:06:a7:2d:
                    d4:b3:3f:0b:7f:ee:dd:89:9e:83:ce:28:74:50:83:
                    a8:68:c1:4a:ce:47:c1:f5:8e:17:fb:24:43:82:91:
                    9c:57:21:99:44:48:c9:c4:86:3c:13:90:01:9c:be:
                    96:57:fe:17:3f:fb:7f:34:aa:47:cf:3d:18:93:ac:
                    0c:65:7b:2f:ba:87:c5:d9:d7:e1:ac:4e:87:70:20:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:A0:14:B0:D3:D8:C7:28:E2:7E:E0:A6:66:3D:A7:EF:CF:8B:46
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:a7:20:01:d4:62:36:56:36:d5:e3:50:50:56:c7:4a:b9:
         79:e9:bf:38:83:60:d5:97:ca:09:8f:bd:e8:b9:62:99:e3:3c:
         1f:c2:92:0f:43:e6:32:73:64:6f:46:e4:4f:63:4d:3a:f2:09:
         ac:3d:c6:9b:09:1d:cf:a9:c4:bb:37:4a:3e:ba:3d:34:f2:20:
         01:c7:fa:c8:a9:3c:fb:ca:32:71:e9:12:71:08:3a:4c:a9:54:
         7a:18:f2:8a:92:c8:c5:d1:de:00:dc:e9:26:8a:7b:44:50:52:
         e9:02:89:64:d4:a6:47:ba:ed:89:9c:86:49:c0:ef:97:63:6d:
         08:e9:c1:ea:02:70:9b:b8:87:c0:78:94:b0:8f:b4:b3:db:23:
         9f:ea:20:de:d0:5d:de:05:c4:87:0b:5d:d6:7c:37:02:eb:a4:
         4a:43:77:7d:c1:d7:39:a8:4b:df:67:07:22:e7:79:59:9f:c3:
         bb:79:31:0f:38:eb:99:7f:5a:40:ab:6b:5d:5d:0a:95:8c:5f:
         4f:a1:ee:0d:c3:20:76:d5:ef:1f:c4:bb:7b:93:0e:a2:6c:d0:
         f1:bb:8a:21:8c:dc:e1:f9:85:dd:ea:0f:e4:bb:83:29:e5:8a:
         47:8f:ea:9a:6c:73:7a:8c:1e:81:c5:41:e1:96:f4:b6:d1:ea:
         f4:fa:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:31 2025 by rpki-client