Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File:                     P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier:          DVKUqzIrue7qBKMXWs77ALM6qPDwRgJWLDrnIJf5ls4=
Subject key identifier:   7A:46:EA:56:9D:5A:53:8D:50:76:A7:89:5A:2B:EE:FE:31:05:99:98
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       0198D5F1973A6DC9656B2CA797F651842B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:36 +0000
Files and hashes:         1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: ykuhKIyuzL+yiq2/Nlzb4pirub6pUiKIou7bMbeSkUw=)
                          2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:97:3a:6d:c9:65:6b:2c:a7:97:f6:51:84:2b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: Aug 23 08:00:36 2025 GMT
            Not After : Aug 24 08:00:36 2025 GMT
        Subject: CN=7a46ea569d5a538d5076a7895a2beefe31059998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:c1:3a:71:d9:40:0b:0e:a9:40:cd:c8:3c:
                    f7:2f:c2:21:fd:03:8d:5b:00:83:5f:70:bf:20:91:
                    a7:8a:0c:06:27:27:7b:ae:0b:06:a7:bb:ad:61:9f:
                    23:84:29:ce:3a:a2:8b:ed:f7:20:3e:2b:dc:b5:aa:
                    4a:99:2c:5b:59:6f:2a:2d:68:56:f5:de:87:ae:5a:
                    b5:4b:f2:cc:b1:12:df:bd:08:1e:cf:2b:d8:80:d9:
                    c3:d8:06:e7:a6:d3:4c:45:ec:3a:0f:21:b0:91:be:
                    a2:b5:fb:27:c7:59:81:78:bb:0f:82:7e:c5:db:de:
                    92:57:62:3f:3b:ae:79:8b:b8:82:08:b6:5d:2f:90:
                    f8:75:3c:ff:c4:65:f2:56:2a:28:b7:ef:1e:10:ed:
                    dd:92:da:73:0a:2f:01:e6:ed:db:40:9b:7f:78:f1:
                    87:ca:fd:b0:23:8e:f3:f4:46:4e:fe:a9:5e:8b:b4:
                    da:b9:7c:df:02:e7:aa:4f:ec:d5:c3:af:9a:88:2e:
                    ec:8b:d4:d4:e4:cd:bd:00:42:e0:fa:4c:d8:e8:c1:
                    e9:98:69:43:86:e3:c5:4a:11:87:c9:18:0e:f5:cc:
                    79:e7:4d:c2:c1:1d:c8:7e:c1:d0:c7:0b:84:31:63:
                    71:92:cb:93:5e:27:69:ab:32:8f:14:6d:99:14:39:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:EA:56:9D:5A:53:8D:50:76:A7:89:5A:2B:EE:FE:31:05:99:98
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:15:52:6c:d8:2f:18:eb:a1:d5:05:3b:0b:f8:5a:d5:d7:
         f9:97:82:49:c3:f7:34:97:57:85:4d:c2:58:16:74:8d:94:56:
         63:93:d5:e5:8f:0b:89:87:7d:7d:de:3b:fa:5d:50:8d:f6:21:
         8c:54:ab:60:74:fd:92:51:66:cb:07:6a:9f:6c:4a:84:ad:14:
         e6:d8:59:2c:e1:12:04:aa:62:1a:8c:e4:1c:46:89:c8:30:e2:
         ed:43:8e:86:3a:fd:9b:95:74:a6:5e:63:cb:ee:ae:ab:8c:fe:
         83:68:74:a2:ca:65:51:ce:5f:c5:f9:16:7a:3f:43:24:2b:2c:
         ef:1e:17:55:12:fa:70:aa:53:05:6f:95:aa:8f:27:be:03:57:
         52:11:0e:ea:ed:ca:24:fd:00:fd:3a:42:30:44:a9:88:1b:6d:
         60:d0:07:e2:56:65:a8:dd:e4:fb:38:7c:ce:1f:6c:67:a6:df:
         d5:be:df:3a:01:fd:5b:6c:cd:72:5b:6d:ac:4e:c3:9e:d0:29:
         fe:c7:6f:3e:9e:8c:01:61:f5:94:3b:48:17:7f:1b:9d:d1:dd:
         68:d6:cd:6f:71:b0:f4:6b:a0:d1:f6:a3:8b:99:60:61:36:c7:
         9e:54:d9:2a:1c:79:ee:c9:17:ee:99:b9:5a:06:33:49:24:de:
         e7:53:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:47 2025 by rpki-client