Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          Pw1Imh6ROY5/OZuJJ5+JGTg15zo7YOLcD/Kebi32og0=
Subject key identifier:   F7:69:9A:AE:3D:AD:C8:C0:72:4C:C4:9C:23:43:D0:93:4F:BB:64:8B
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       0198D660C7A910E8AE28F18F34BFDE46AEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:03 +0000
Files and hashes:         1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: J2rSI1+R1kcxGbI/4OHO05bu5lazLIkzg/30SQoXAdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:c7:a9:10:e8:ae:28:f1:8f:34:bf:de:46:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Aug 23 10:02:03 2025 GMT
            Not After : Aug 24 10:02:03 2025 GMT
        Subject: CN=f7699aae3dadc8c0724cc49c2343d0934fbb648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:02:03:1b:8b:9b:ea:0d:7d:b6:8d:38:c3:
                    f0:2f:0f:ee:65:7a:91:32:40:58:c3:40:ba:f2:53:
                    83:82:bc:28:ca:06:4c:ad:c2:3e:cf:66:23:27:67:
                    8c:32:fc:9d:a9:b5:50:30:43:d9:7b:70:24:e4:d4:
                    3a:f0:94:31:b8:26:ba:32:30:14:f0:85:87:b0:30:
                    36:3e:32:65:e3:42:af:50:06:ed:cb:9d:8b:c6:45:
                    bd:d4:7e:a5:f1:fb:02:eb:c5:0a:97:93:fb:84:a7:
                    9c:13:a4:6a:a8:6f:2c:df:e2:bc:27:0f:fd:49:a2:
                    b5:34:9b:1a:8d:85:ea:64:c3:8c:05:99:c5:f8:2b:
                    b7:6b:f3:b2:8e:f3:e5:d1:c5:33:c2:8b:a1:a6:bc:
                    01:88:65:c8:dd:c1:9c:94:6e:89:8b:2e:38:c8:6e:
                    81:86:3c:a9:01:67:65:1d:57:a2:1d:c9:fd:ae:24:
                    7b:1d:f1:a1:e5:52:e1:93:61:6c:3a:73:55:32:35:
                    8d:cc:d6:e4:58:6f:a3:b1:60:68:6e:a9:fb:dd:2e:
                    80:3a:5c:61:8e:02:ee:0b:b0:a6:77:fa:3c:e3:3e:
                    45:30:bc:5b:e1:1f:08:36:63:d6:d7:2a:44:cd:d6:
                    5a:60:4c:aa:92:3e:35:86:d2:d7:d4:3d:aa:d5:fb:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:9A:AE:3D:AD:C8:C0:72:4C:C4:9C:23:43:D0:93:4F:BB:64:8B
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:7e:da:2f:d1:5b:6c:19:73:cb:ab:01:95:eb:43:6a:9b:
         a4:48:bc:d6:f8:8a:f1:b0:b7:59:56:82:ed:66:33:27:04:fc:
         e4:75:9e:af:71:b4:8d:2b:b1:2e:13:fa:ec:85:ec:b2:e3:7f:
         c7:cc:5b:52:ea:89:9e:26:f7:37:52:c1:1d:35:05:d3:e6:4b:
         81:84:4a:db:86:65:c8:8b:c1:e0:25:49:72:59:3a:c9:78:90:
         8a:ff:f1:7f:42:44:2c:2f:8a:d6:bf:0e:28:d9:1e:e3:49:7c:
         8c:1f:02:6e:c0:e4:72:5a:19:90:d9:2c:e0:10:78:3a:31:d8:
         05:e0:4c:ff:a7:65:f1:1c:af:00:01:4c:ab:b3:1a:78:b7:6a:
         25:be:2c:b7:31:c4:a9:37:1e:62:71:7f:94:3d:de:56:49:5a:
         e7:b1:9b:f6:c7:6c:ac:e0:62:c6:82:48:b3:ff:ac:0d:15:d5:
         47:38:8c:e9:5c:c2:07:55:84:65:a3:a3:f2:96:47:11:f5:2e:
         5c:e9:5b:5b:6c:49:18:06:06:b1:7c:2b:5d:b2:ca:8a:e0:a4:
         59:38:51:0a:e8:86:e8:ae:bb:10:d7:77:a9:b5:34:3f:64:a7:
         cc:83:c0:6d:c0:12:3b:ad:66:21:22:4a:63:97:0b:f5:60:21:
         85:a4:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:42 2025 by rpki-client