Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File:                     sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier:          iZprkv0S5n4WU7PQ+xDaTtCCPhKVpRig5ltswThl7Wg=
Subject key identifier:   AA:CE:D8:C9:3B:0E:D7:92:D3:20:9C:CC:7D:90:AA:EE:41:71:E5:38
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       0198D404C02595DB3F36C7301B1447C245AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number:          164F
Signing time:             Fri 22 Aug 2025 23:02:17 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:17 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:17 +0000
Files and hashes:         1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
                          2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
                          3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
                          4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=)
                          5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
                          6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: 2eAbcWWCujRkeqys38W7HIc+ZySqQjiSOOBkcdTeWeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:c0:25:95:db:3f:36:c7:30:1b:14:47:c2:45:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Aug 22 23:02:17 2025 GMT
            Not After : Aug 23 23:02:17 2025 GMT
        Subject: CN=aaced8c93b0ed792d3209ccc7d90aaee4171e538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:7f:c2:58:ff:ed:c4:52:95:92:d0:02:ba:
                    f5:ae:8b:38:50:04:3d:02:de:ec:f9:93:00:eb:01:
                    5f:66:94:a6:72:18:a4:ee:88:98:6b:b9:74:f5:cb:
                    25:8e:2e:60:4b:54:d6:f4:ec:16:b9:b6:88:75:c5:
                    0f:49:4f:28:1d:ec:12:be:5d:db:81:a6:f3:3c:cf:
                    61:a2:db:03:e5:54:ee:6c:f1:5a:9b:b8:ec:37:10:
                    35:1e:42:8a:56:36:1e:ff:e5:33:93:71:d9:bc:d5:
                    ae:95:44:ac:a8:7d:b3:5a:c2:47:7e:0a:c9:bc:e4:
                    49:cc:2a:cf:52:ef:55:18:0b:bc:58:56:60:07:81:
                    8b:e7:47:e7:57:15:4f:73:62:a9:33:dc:99:0e:c3:
                    74:21:25:77:f2:da:32:f4:9b:2a:d5:18:ec:89:4c:
                    29:ef:80:bc:d4:4c:b1:ca:2f:eb:9e:73:7a:df:08:
                    4d:95:c4:33:76:56:b8:d0:b3:4b:1b:be:91:91:a3:
                    7c:3d:5d:57:1c:41:fa:a6:39:a4:02:fd:e0:1d:38:
                    9a:89:4c:5a:8f:f8:35:b1:80:1e:f9:73:63:9d:05:
                    45:85:26:d9:6d:e9:49:c4:23:df:86:19:d0:03:2c:
                    18:c4:0d:1c:c6:01:be:10:55:b0:d5:6c:64:e1:83:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:D8:C9:3B:0E:D7:92:D3:20:9C:CC:7D:90:AA:EE:41:71:E5:38
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:05:0f:8e:3c:04:5a:eb:94:6d:b8:55:1f:38:be:01:b8:51:
         ab:26:6c:46:5e:5f:04:27:0b:38:2e:1b:84:61:27:76:c2:f8:
         86:56:10:fd:37:9a:73:8f:9a:81:1d:59:1c:17:3e:0f:5a:40:
         4a:f2:e7:aa:f1:18:17:d0:b0:d7:60:9c:19:d2:fb:88:7a:8e:
         ef:e5:f6:8d:eb:74:1e:09:30:f2:7d:10:99:15:2a:10:c3:81:
         a4:22:df:16:c8:cd:85:96:25:ac:fb:9e:87:42:70:7a:a0:32:
         c4:2d:d3:2d:cf:fb:59:fe:36:3a:53:3f:12:66:5f:15:7a:7c:
         3c:3a:e6:82:81:bf:d8:ff:8d:d4:4f:60:de:63:01:2e:0c:5a:
         3e:b7:a5:28:73:98:eb:71:be:b8:4c:da:ac:c4:91:13:bd:d3:
         de:8a:24:1f:d1:21:74:9a:9b:c0:28:97:ae:d5:e3:ac:03:6c:
         8f:85:85:bd:a7:84:a1:02:36:c5:02:31:6b:f5:fe:8a:c3:5e:
         0a:07:59:20:a8:cc:f0:c2:3e:25:d1:d8:87:b1:00:a4:a1:be:
         34:e2:c4:15:b2:33:17:99:9b:58:63:e0:fb:67:b3:89:50:82:
         61:37:fb:d3:d9:60:50:90:a7:32:fc:67:41:18:cd:9d:3d:ff:
         b4:0a:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:40 2025 by rpki-client