Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File:                     noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier:          Q0T5CPDbbd8CxJ8W00shdIYvf4awAVJwLzeHYW41xIQ=
Subject key identifier:   5B:40:27:B0:0F:48:75:1E:5D:CC:62:33:48:AC:68:4C:EB:DC:E0:5C
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer:       /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial:       0198D7A90B1072CDE325862CB7F3957BC282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 16:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:36 +0000
Files and hashes:         1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=)
                          2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: h03LbJvDglziHeu/oMEkMA88SioPScIlwscFuUiVLFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:0b:10:72:cd:e3:25:86:2c:b7:f3:95:7b:c2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
        Validity
            Not Before: Aug 23 16:00:36 2025 GMT
            Not After : Aug 24 16:00:36 2025 GMT
        Subject: CN=5b4027b00f48751e5dcc623348ac684cebdce05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:e9:99:3b:2b:49:b1:87:50:e8:b8:a5:fe:
                    31:58:2f:51:93:63:ec:2d:63:81:73:4f:65:eb:fc:
                    55:0b:7c:5c:b5:ea:2b:9d:ed:f0:f1:a0:f8:4a:c9:
                    8c:3b:be:2f:3b:6d:65:aa:4a:12:0f:b8:7f:a9:42:
                    40:e2:97:9d:be:52:a7:0c:cd:5f:50:e6:3c:81:cb:
                    f1:6d:02:1b:12:5e:60:21:bf:8a:0c:40:9e:af:95:
                    62:2e:a6:01:d4:65:94:a6:d1:80:9f:17:b3:4d:1a:
                    58:81:24:93:b1:2d:99:cc:2e:bc:1c:a9:53:1e:c4:
                    90:d8:12:b7:22:4b:78:56:a7:15:41:32:59:26:01:
                    1b:32:f0:f4:96:85:4c:d4:b6:b0:8d:6b:9a:2a:fe:
                    ed:e3:a4:dc:63:bc:d0:6e:10:48:7f:8a:33:7b:94:
                    ad:8a:55:a4:fc:4e:0f:96:0f:0e:16:26:82:5c:01:
                    28:f2:3a:68:27:13:23:a7:f3:03:9b:2d:bd:b2:f6:
                    7e:47:cc:52:52:cd:d1:ad:af:1e:cf:e6:74:a3:4e:
                    41:8c:23:84:91:55:dc:fd:4a:1e:c4:c7:61:38:89:
                    b2:46:ab:e8:17:d7:6d:d4:37:3a:4c:e5:d1:50:40:
                    17:ff:62:b7:06:55:e3:b8:e2:cd:01:d6:2a:a5:09:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:27:B0:0F:48:75:1E:5D:CC:62:33:48:AC:68:4C:EB:DC:E0:5C
            X509v3 Authority Key Identifier:
                keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:58:76:0f:05:13:e9:33:52:0b:ab:2b:c2:5c:a0:5a:15:d5:
         a3:66:14:8e:f9:81:c8:b7:32:e4:ee:ea:2c:e7:5c:7b:9d:0c:
         49:be:f8:46:86:4e:1b:4d:44:7f:b5:99:70:35:d1:ae:02:1b:
         ee:23:ef:e3:71:10:b1:72:b9:70:22:11:1e:e4:31:fb:df:02:
         0f:b6:b3:ef:dd:37:73:83:42:bb:ba:8a:97:c4:2f:c1:8e:df:
         7c:10:0a:e7:33:44:85:e9:ef:9e:c5:3b:40:8e:c2:70:21:93:
         51:a1:a7:75:32:55:d2:b9:c7:bf:bd:7d:c6:64:d9:f0:31:7e:
         22:7d:2b:03:cc:21:d0:d0:e7:e7:0c:a3:d4:af:92:56:fb:77:
         fd:ae:67:4c:a6:73:dd:68:bc:37:de:37:fa:c9:92:99:30:db:
         38:19:74:99:f1:4d:31:63:18:c5:b6:16:c9:1c:2d:5e:63:76:
         c3:20:35:20:09:4c:a0:73:d6:08:f7:a9:84:15:da:95:e3:eb:
         63:5c:36:e8:a7:bf:0f:b3:62:61:97:2a:f9:5d:5a:fc:bc:d8:
         97:48:aa:2b:37:25:d0:8d:2c:d3:14:6b:f9:9f:50:45:ad:0a:
         cb:d7:f0:cb:b2:46:c7:82:f8:a2:fd:c5:48:44:55:08:88:a0:
         25:7e:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:54 2025 by rpki-client