Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          Yv3sM6aQ8fpKFX5Zw2XW+Eg+14kOVto391fyuaAS2Bo=
Subject key identifier:   15:9E:D4:78:49:28:17:64:8A:5A:7A:4A:AE:E0:FA:76:7C:32:34:B2
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0198D4740B133AF14C862B45F2594548B937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 01:03:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:51 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:51 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: V+LNxdAWGy762xgjgnFbLY9Sqdy4+KiXSwFZbBucMXE=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0b:13:3a:f1:4c:86:2b:45:f2:59:45:48:b9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Aug 23 01:03:51 2025 GMT
            Not After : Aug 24 01:03:51 2025 GMT
        Subject: CN=159ed478492817648a5a7a4aaee0fa767c3234b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:68:de:8b:4f:5c:66:4e:f1:d0:1d:b3:98:
                    8c:ac:72:c4:40:b9:55:61:dc:be:c7:5e:32:94:36:
                    72:16:30:7d:74:b7:db:78:2b:3b:de:ba:cf:7e:29:
                    b4:25:d4:6e:4c:d5:f5:33:db:f6:77:41:f4:84:c7:
                    d6:33:79:84:89:48:0a:a5:7b:c4:3d:5b:d2:7e:7b:
                    37:c1:fa:7e:89:be:4c:08:85:94:4e:c6:3f:1a:8c:
                    ee:2a:53:53:dc:87:c1:01:52:66:b1:f3:23:1c:5c:
                    dc:9f:14:ad:ec:04:14:2b:cf:b8:cc:c9:fc:7c:d8:
                    2f:59:68:04:1e:78:30:7f:d5:eb:b4:ab:d1:c9:da:
                    b8:c9:3d:c6:07:e5:38:d7:bc:d6:3a:2e:10:25:07:
                    fb:38:93:f2:ae:a3:3f:72:85:5a:f7:21:69:d3:c7:
                    fe:80:06:2e:57:e6:a4:18:fc:a8:6a:4c:74:ca:d5:
                    5a:12:f2:27:36:67:e3:a2:a1:c7:94:60:06:4b:12:
                    fc:32:fc:2b:56:d7:37:92:9b:7e:20:8e:7b:a6:f9:
                    9a:e2:18:cc:e8:ca:e2:1d:20:98:d4:56:1e:19:31:
                    d5:01:b5:de:30:cd:ca:9a:ac:6b:a5:7f:6b:bc:6a:
                    db:e2:4c:62:2c:99:0b:9e:07:b8:6f:3f:01:c9:a4:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:D4:78:49:28:17:64:8A:5A:7A:4A:AE:E0:FA:76:7C:32:34:B2
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:c8:d9:87:b1:9d:bd:a8:dd:a9:24:3b:2c:ee:e7:74:c4:
         2b:3a:03:b2:a4:a9:f6:75:3a:ab:23:3d:c7:e7:be:12:a8:11:
         6c:aa:2f:2d:43:34:5c:58:2e:3a:32:a4:58:c1:f3:3b:9a:19:
         1f:e2:0f:56:5f:f6:c5:a3:56:53:9f:fb:1f:58:b4:4c:97:7a:
         40:96:af:08:dd:08:ea:c3:46:c7:af:dc:ed:71:95:b2:d6:a6:
         0c:d4:bc:38:22:8b:e4:ad:df:04:bd:7e:66:0f:f1:78:5c:ed:
         e2:7b:1a:55:1f:fe:6b:f8:44:6d:a2:d0:c6:61:d0:87:b1:1e:
         35:46:16:fe:42:05:17:66:af:7a:e5:1d:07:72:77:d3:ea:67:
         ca:92:e3:18:62:03:0c:d2:3e:61:d3:92:7f:7a:87:45:40:d6:
         c5:4c:54:a0:0d:95:7c:f3:86:f4:35:7e:6e:50:f9:8d:08:fd:
         8f:c9:bd:f7:ea:f6:16:cc:8b:98:cb:3e:c9:be:e0:c8:27:89:
         f3:c7:6f:fb:2a:dc:08:78:77:af:ea:44:af:dd:47:28:e9:c8:
         3f:6f:2e:90:4b:8a:0e:19:12:7a:23:9c:7a:b8:c6:c1:40:2f:
         ae:ce:bb:c3:e0:6d:28:05:14:dc:28:a1:3c:f0:3f:ab:d3:07:
         90:4a:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:43 2025 by rpki-client