Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          +loyPrJXOagveedJVSojhlplLZI4kge+8Yodb2sPtzM=
Subject key identifier:   45:CB:D6:45:5B:5F:8F:60:CB:04:C8:9D:2C:62:8F:E5:7B:4B:C7:4B
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       0198D9CE6B8028C599A961B1F87E2342A174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          164D
Signing time:             Sun 24 Aug 2025 02:00:40 +0000
Manifest this update:     Sun 24 Aug 2025 02:00:40 +0000
Manifest next update:     Mon 25 Aug 2025 02:00:40 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: QP4G2hS7ni+IViAD6jQupqH9JA672/UA5tLeyK/00mQ=)
                          2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:ce:6b:80:28:c5:99:a9:61:b1:f8:7e:23:42:a1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Aug 24 02:00:40 2025 GMT
            Not After : Aug 25 02:00:40 2025 GMT
        Subject: CN=45cbd6455b5f8f60cb04c89d2c628fe57b4bc74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:0c:23:b8:7c:13:99:c4:8d:01:b4:02:32:
                    89:f9:33:dd:e0:18:40:52:63:d6:19:8e:67:df:e3:
                    a2:5f:1d:1f:13:86:4e:fe:b2:1f:87:0d:97:e1:fc:
                    2a:50:97:2f:3e:d4:9b:85:19:87:db:15:53:08:a8:
                    04:2f:b7:f7:49:7d:16:22:38:56:d5:df:19:86:a4:
                    a7:c7:69:bf:75:2e:60:8d:8c:f9:92:88:13:f6:48:
                    bd:69:9c:c1:56:ca:8b:a5:34:82:ad:10:a1:e1:77:
                    30:e7:54:60:40:ed:87:04:97:0d:6f:93:c1:4e:f4:
                    1b:a7:f2:82:a8:16:9f:65:21:51:2a:81:0b:e9:6a:
                    f3:9d:13:59:92:fd:35:d0:ba:83:f6:6d:39:9f:4e:
                    39:75:86:19:9b:18:6b:8d:bf:92:f7:4b:d0:1b:ac:
                    ac:b9:13:be:3d:3c:9e:a0:a7:af:39:11:7b:9c:43:
                    89:16:98:f2:ad:87:8f:c6:ca:13:26:f4:8c:7c:2e:
                    ff:4d:0a:40:d1:ac:95:56:d4:4f:49:2a:61:bc:68:
                    89:ba:db:d0:b6:e7:a2:53:9e:56:58:64:40:04:80:
                    19:d6:8f:44:61:3e:90:2a:7e:6b:bc:21:e0:1d:bf:
                    a5:81:ee:f1:17:bc:d9:b7:05:08:db:0d:57:7f:29:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CB:D6:45:5B:5F:8F:60:CB:04:C8:9D:2C:62:8F:E5:7B:4B:C7:4B
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:50:4b:51:5c:c7:84:86:05:ac:33:8d:4f:f1:e2:62:d1:e7:
         5b:10:d2:1d:d9:b8:dd:b0:6d:c7:3f:4f:3b:4e:5f:10:b7:a2:
         a5:d3:a0:94:7e:11:89:11:0f:b6:10:13:12:77:78:1b:85:88:
         13:ff:54:d7:2a:93:61:37:d2:ce:9e:64:df:f1:fb:96:42:b4:
         38:54:f6:57:65:8c:ae:da:2b:26:71:4b:90:e7:c8:bf:5c:f0:
         44:26:2e:36:16:cb:b0:ac:f4:85:50:b2:57:68:27:b8:07:68:
         c8:58:c2:14:07:ee:a1:64:e0:8c:e8:5c:86:fe:13:b4:85:4a:
         07:47:8c:12:3e:3b:57:32:a6:9e:13:d1:55:bc:33:de:f4:3e:
         2c:9c:4a:a7:b1:5c:cc:ca:ea:af:db:20:98:e9:b9:85:fd:af:
         e9:26:7d:78:71:61:82:70:f3:fa:56:39:6e:d4:02:e9:23:bc:
         29:28:5e:11:ff:71:92:35:94:cc:ee:30:1b:12:81:ca:e3:10:
         5a:fd:10:c0:34:a2:56:49:00:cb:18:0a:b2:95:a9:80:50:55:
         fa:94:06:a5:b9:83:c1:02:e7:64:db:59:c4:11:cd:9b:6f:29:
         21:6c:7f:d0:ec:f0:48:e5:6c:6b:4a:79:48:c9:3d:8c:fb:59:
         52:6f:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:37:39 2025 by rpki-client