Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          it8TfAMzt4YVP/zQHE754610OaeEIR1x0mCFPs1+6rg=
Subject key identifier:   70:0F:DA:F9:6A:ED:24:5A:B9:F4:18:27:CE:2A:61:47:30:93:42:74
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       0198D6CCFA671964FA9BF043BE3D03180135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 12:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:14 +0000
Files and hashes:         1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=)
                          2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: UDekuX5/fJVIj2DuIRq9tQSAVs8eYnXnN+gdve8GWjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:fa:67:19:64:fa:9b:f0:43:be:3d:03:18:01:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Aug 23 12:00:14 2025 GMT
            Not After : Aug 24 12:00:14 2025 GMT
        Subject: CN=700fdaf96aed245ab9f41827ce2a614730934274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:63:e9:9d:c0:fb:d1:a8:13:b5:03:44:b0:
                    f3:d0:e6:2e:11:c7:fa:cf:f7:1e:0d:b4:1c:cb:1b:
                    9e:ce:bd:86:01:f7:97:a0:3f:9e:d4:b6:47:9c:17:
                    2d:e2:71:d4:44:2c:51:27:40:c2:63:66:0f:50:4b:
                    40:c8:64:b2:29:03:83:3d:64:ce:e3:dd:b7:d5:db:
                    fe:fc:6e:8f:82:e1:c7:2d:9a:c5:22:52:4e:d5:61:
                    1e:44:64:03:f3:fb:6d:d3:a2:e1:ce:2b:a2:df:5b:
                    54:a7:ae:6c:30:23:0b:c6:92:ea:e8:ce:5e:a8:33:
                    22:6c:e9:25:03:ec:ae:76:d3:88:a9:49:97:bb:47:
                    68:b2:1d:98:a9:54:76:96:2d:05:9e:4e:1b:1b:c5:
                    b5:35:ae:c7:33:a1:e3:0c:72:39:69:59:12:2b:c2:
                    db:e9:f2:dd:76:ae:1f:31:39:93:78:4c:61:9c:06:
                    86:1d:57:0f:e9:e9:18:b4:66:42:a7:ea:3b:20:c0:
                    86:75:eb:fb:9a:6e:4f:a7:d5:52:0c:06:b6:f0:d0:
                    23:c9:a3:ff:3c:31:c8:ad:bd:d6:e7:a7:1b:c3:09:
                    e3:58:8d:e8:d2:3f:4f:dd:af:a3:72:f8:c0:5f:2d:
                    8d:2a:10:a4:86:22:eb:80:d6:0d:cf:c0:b5:77:3c:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:DA:F9:6A:ED:24:5A:B9:F4:18:27:CE:2A:61:47:30:93:42:74
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:6d:14:66:b5:c3:7c:d9:fe:58:d9:46:49:df:fa:3b:0e:
         dd:ed:91:fa:14:3c:1f:58:48:09:d9:9e:7c:cb:2c:98:d2:f6:
         57:0a:35:4d:45:98:93:73:85:16:fd:e7:83:d6:5a:57:e8:c6:
         46:be:57:c4:d5:b7:d9:89:fc:12:4f:f1:9e:e4:30:f4:0c:f5:
         11:ab:5c:fd:21:65:7f:85:9b:6e:a0:86:93:a9:e5:e4:12:53:
         d6:ab:3d:c5:09:69:35:df:5f:96:20:15:92:09:94:3f:6f:9e:
         7f:a2:95:d6:8f:6e:7e:02:57:9b:76:bc:75:e1:f8:d3:00:01:
         b8:95:34:f1:e5:5a:15:b9:b8:ad:a3:2d:76:ff:66:5e:21:da:
         e3:42:5d:68:ae:b1:6d:ee:d8:65:a4:ec:38:bf:00:f8:5a:87:
         60:69:58:46:cb:1e:a2:9d:16:68:da:5c:89:97:e4:11:12:5f:
         d5:dd:05:04:fa:2c:44:10:98:a4:21:a1:8b:95:81:24:e7:a7:
         e8:41:02:16:e5:ff:15:31:8c:98:38:6e:c3:98:e8:a0:a8:66:
         49:91:56:ab:a7:4b:3f:6a:7c:60:f9:e4:57:b9:11:7b:bd:4b:
         98:33:72:08:f3:fb:4b:12:85:b5:ec:69:45:32:02:b8:ba:2b:
         97:81:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:42 2025 by rpki-client