Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File:                     lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier:          VVLuBkRtE1ooT/ZW7rEe+dXsVxnrJQ99z3uJw5fDL68=
Subject key identifier:   0E:9A:90:E8:B0:CE:7D:D4:BF:6D:57:27:4B:45:BE:EA:A1:BA:41:7A
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer:       /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial:       0198D58397E3B2C78D9EB90E7F7076DDC1CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 06:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:27 +0000
Files and hashes:         1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
                          2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
                          3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
                          4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
                          5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
                          6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
                          7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: WvHG4Xx3ZbbkTiOSBlx6mucgRi95S/IjMnHTDiAnc+A=)
                          8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:97:e3:b2:c7:8d:9e:b9:0e:7f:70:76:dd:c1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
        Validity
            Not Before: Aug 23 06:00:27 2025 GMT
            Not After : Aug 24 06:00:27 2025 GMT
        Subject: CN=0e9a90e8b0ce7dd4bf6d57274b45beeaa1ba417a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:86:ce:2e:9d:a3:60:0c:34:e4:32:3e:d5:
                    c9:96:88:9f:39:9f:b8:f8:c6:b2:68:66:5e:f3:4d:
                    53:54:c9:97:37:55:e2:9b:b3:21:ee:a9:2b:6b:1f:
                    22:dc:d9:43:69:6f:19:d3:b5:d2:7b:57:0c:0b:6c:
                    a8:e7:8b:f5:2a:67:fa:b5:ec:64:1a:10:77:4a:d7:
                    2b:8e:d1:d0:35:b0:d3:5d:51:be:77:89:6b:4c:0d:
                    c6:e8:95:4e:e2:23:28:c2:b4:5e:73:13:9e:16:8b:
                    f0:26:83:91:2b:a3:b3:c6:5e:63:83:2a:0f:d4:ed:
                    22:91:86:ff:8c:21:9c:22:9a:26:b5:1f:b8:b4:fa:
                    3c:dd:1b:e3:ad:4c:0e:bf:72:b1:a0:e5:83:f9:bd:
                    50:bc:68:1b:05:43:d6:e2:2f:40:91:e2:95:d1:84:
                    1d:af:2c:1f:b2:16:b1:bc:bc:65:cd:a7:b5:c7:f6:
                    55:fd:7e:26:62:53:a7:84:94:bb:a1:43:5e:4e:72:
                    91:e8:8f:56:de:ac:5a:6d:c0:c9:62:33:1f:ff:3e:
                    1d:61:eb:8e:37:51:78:97:97:7c:ad:93:27:4a:ca:
                    98:f6:19:e7:3d:8e:30:8e:94:82:2b:aa:7c:33:c3:
                    09:24:d3:62:f1:ff:5e:9b:e9:44:f2:db:15:80:61:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:90:E8:B0:CE:7D:D4:BF:6D:57:27:4B:45:BE:EA:A1:BA:41:7A
            X509v3 Authority Key Identifier:
                keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:cd:47:72:66:3a:92:4f:0b:11:da:07:4e:54:4c:e8:2a:
         b3:eb:cb:b3:d0:73:b9:b4:15:2d:92:d0:0f:0f:67:c9:54:8c:
         d2:27:56:a0:65:1a:2d:8a:9a:1f:0f:ce:64:0d:79:eb:89:44:
         94:5a:3d:86:60:9e:9e:b0:d7:d7:31:02:79:99:66:7f:9b:33:
         d5:ff:ff:a0:d2:46:13:9b:1e:76:dd:5e:e6:dc:22:48:20:99:
         da:7c:ab:d9:fe:86:24:80:dc:ce:46:27:a5:8b:53:bb:bf:c9:
         23:c0:ed:94:9b:f9:ee:08:13:e9:91:bd:b5:c4:39:09:54:7c:
         12:93:34:41:cd:ec:86:c2:d9:bc:1a:d4:3f:1c:ba:25:42:23:
         e3:2e:e3:f0:9b:89:8d:e9:c1:45:ae:2a:de:44:63:82:88:f2:
         65:3b:28:1c:8b:e0:94:5b:8a:7b:3a:7a:c5:3d:12:03:9f:ba:
         a7:e3:bf:7c:77:41:3d:2f:f6:de:a1:72:71:47:17:55:a9:f6:
         b6:cf:47:45:a7:6f:66:6c:14:be:bf:a9:fe:3f:4f:83:bd:f2:
         8c:80:70:fd:9d:b7:eb:0d:8a:02:ac:1b:98:0d:c2:ae:6e:88:
         5e:44:87:7d:79:a9:f3:47:e5:95:57:62:dc:dd:2c:31:3e:63:
         b0:b9:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:39 2025 by rpki-client