Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File:                     xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier:          US+HjZyGI/YRaCE82YCiuMdLnFitOTN8eygWBb6EFOc=
Subject key identifier:   4F:BF:CB:F3:72:8A:D5:88:01:2A:11:30:FD:E5:04:00:80:52:40:69
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer:       /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial:       0198D85020229850E532461356CA28B4C631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 19:03:06 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:06 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:06 +0000
Files and hashes:         1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
                          2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: Jnqpf+9IwXdOg8AG9EyDuwqcqU25NKwrQ0ebql6J8hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:20:22:98:50:e5:32:46:13:56:ca:28:b4:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
        Validity
            Not Before: Aug 23 19:03:06 2025 GMT
            Not After : Aug 24 19:03:06 2025 GMT
        Subject: CN=4fbfcbf3728ad588012a1130fde5040080524069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:ab:a0:9d:71:c3:b8:11:27:d7:20:70:a5:
                    c2:c3:ac:9c:ef:f9:53:18:06:0d:88:38:9e:79:31:
                    0e:69:0e:fd:a4:47:fd:42:57:4a:0d:1d:b0:dc:2a:
                    6d:ef:4d:88:af:92:5f:c1:de:47:1b:2b:86:de:7a:
                    c5:b4:28:1f:1f:3f:46:86:bf:e4:83:6d:7d:df:5e:
                    03:50:53:0b:65:13:93:f0:0d:a8:b8:8f:05:e5:d0:
                    7e:bb:6a:ab:9f:75:05:8c:2c:81:21:22:35:b9:a0:
                    86:04:d9:b3:5a:bb:82:22:e1:d3:9f:ca:c3:c5:cd:
                    d6:fe:14:aa:d2:d9:b0:30:cb:d1:fb:a2:7a:90:a6:
                    28:9d:a2:18:00:01:62:72:6b:a3:83:95:be:e9:f5:
                    9b:6a:ab:53:37:00:40:26:f5:22:dd:c3:0a:ac:c7:
                    95:46:63:55:f8:b5:f3:74:5c:95:2c:57:16:5b:b6:
                    13:f6:e9:24:61:f0:c4:36:b9:f0:ef:5c:9a:53:b9:
                    9e:3e:9a:e3:3a:8f:61:cd:7c:80:b2:5b:1e:c4:84:
                    1b:d1:2a:ef:1e:a4:69:c7:a9:d1:ca:76:a2:72:26:
                    54:77:62:ea:f6:47:2f:4e:7d:88:a8:3b:19:08:ef:
                    36:6c:3d:62:63:ca:da:69:f9:53:4a:15:e3:40:b4:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BF:CB:F3:72:8A:D5:88:01:2A:11:30:FD:E5:04:00:80:52:40:69
            X509v3 Authority Key Identifier:
                keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:17:74:a1:8c:27:06:34:03:ca:bd:67:55:42:83:ba:8c:
         d4:24:85:96:76:26:c0:e4:8d:4c:64:08:57:2e:ab:12:af:d0:
         90:7e:14:05:70:3c:a5:01:15:5e:56:85:c1:c2:12:15:74:3d:
         9d:d4:54:af:cf:96:28:78:7d:49:7c:ab:4e:a3:e9:f7:11:4a:
         91:8f:c3:c1:e3:ef:36:76:c0:49:e6:b8:c4:56:1a:aa:aa:98:
         ce:4a:41:3e:26:a6:79:ba:4e:ae:48:dd:38:8e:d7:55:6c:d6:
         19:9c:f7:c7:e3:bf:fd:db:c7:a2:8c:ac:cc:ed:f2:9d:bd:fd:
         8a:76:6f:26:c5:aa:dc:76:38:84:66:a5:d6:f7:4b:a2:c6:c2:
         38:2e:e0:07:41:53:eb:e9:c2:96:ce:a6:03:5b:b9:9e:d5:f7:
         37:aa:ed:3c:52:da:e6:09:e4:c9:84:fd:31:31:0f:95:ba:25:
         45:c2:bb:6d:b2:f9:0c:33:bf:a7:2c:f5:5a:2c:a6:83:6b:b7:
         44:a5:8f:fc:7d:5b:26:b6:ff:61:06:0d:bd:62:70:77:f8:c0:
         16:14:c5:17:b1:f3:2a:68:43:9a:6a:a1:0c:43:98:82:d9:b7:
         67:0e:02:c5:7e:d3:3d:0f:12:a5:71:90:f3:4f:e9:c0:63:65:
         88:06:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:03 2025 by rpki-client