Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          7FQxhlLWPwLkagIoQISJ7j9u03J1cQpOvOqv8GZj+ZQ=
Subject key identifier:   8D:DD:EE:3A:BA:5F:FA:82:D3:4B:76:BF:85:E4:0C:CD:B7:07:A4:F3
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       0198D5161E36A71D1603BBBA120AF4B3AB8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:53 +0000
Files and hashes:         1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: jJlIvsVf2UXrGjt1JnhE/GZpjKgcFbAP8crPWycTdjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1e:36:a7:1d:16:03:bb:ba:12:0a:f4:b3:ab:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Aug 23 04:00:53 2025 GMT
            Not After : Aug 24 04:00:53 2025 GMT
        Subject: CN=8dddee3aba5ffa82d34b76bf85e40ccdb707a4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:bf:31:a6:e5:65:c9:65:07:91:cf:05:ff:
                    54:85:e9:9c:6c:13:d1:0b:f1:5c:56:38:69:4c:b2:
                    ca:d3:1a:d3:a7:6e:44:cd:23:4f:15:3a:3d:b2:42:
                    f6:41:c1:72:b1:e9:da:64:64:c8:e4:71:18:bc:df:
                    4e:46:24:90:14:a2:71:c1:ca:0a:7a:31:6c:8d:0e:
                    99:e0:89:ff:a0:93:5b:e4:b5:04:e5:a1:84:91:b4:
                    d5:6f:33:c5:0c:8a:af:f0:2d:d1:b1:f7:6b:72:73:
                    12:51:4f:92:c8:ea:32:21:f2:18:64:9b:51:9f:7e:
                    5c:f7:61:ae:69:75:ac:8e:f5:bb:b5:5f:bc:f6:bd:
                    4f:a4:49:d8:6a:a2:46:8f:0b:e1:ee:7e:68:60:40:
                    ca:f9:8b:12:c2:45:fa:bf:6e:10:7d:e8:76:26:61:
                    4c:49:ac:f7:d1:03:e0:89:29:60:03:b6:e5:a9:ad:
                    88:72:62:78:df:70:05:77:32:32:64:58:64:7b:c6:
                    02:42:e3:6a:3b:e0:91:4b:ec:9a:95:c3:28:56:0d:
                    a1:76:ab:8b:cb:78:a7:40:91:3d:b9:6a:ae:b5:f8:
                    33:20:2e:3b:a0:76:18:86:df:53:b2:91:26:a8:66:
                    c6:48:ed:fc:1d:d6:b6:c5:dc:ee:43:cf:16:34:96:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:EE:3A:BA:5F:FA:82:D3:4B:76:BF:85:E4:0C:CD:B7:07:A4:F3
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:c7:6d:a9:6c:8f:5e:f2:fb:0f:8e:63:13:e8:76:80:7d:
         34:48:b8:57:a0:89:21:34:e5:d5:d9:44:1f:f9:3c:a0:25:63:
         3b:37:72:6b:d1:15:cf:76:b9:ac:7d:e9:36:c5:80:84:97:3a:
         f8:ed:58:0e:14:be:e4:37:01:02:67:e2:7e:62:66:8a:2a:84:
         cc:07:61:a7:52:3f:d2:e5:fb:f2:bc:c5:f7:5d:53:af:7b:75:
         40:a3:4e:c9:bc:b4:03:d6:e8:43:29:06:44:74:46:03:50:12:
         bb:df:b2:b1:63:d8:49:7c:90:2e:b2:37:2a:b8:24:07:d3:97:
         3c:a8:7d:f8:40:ac:59:d7:88:ba:de:08:c3:3b:65:7a:11:83:
         b4:09:0d:8a:01:7d:b7:d1:72:23:e5:15:4f:38:07:24:b3:2f:
         f3:47:b2:60:a9:65:47:be:e6:92:5c:11:36:8a:a2:1e:aa:5d:
         84:f8:84:a7:5c:2f:0c:35:4f:d4:01:5f:c1:dc:72:f1:6e:df:
         2a:af:71:b3:0b:f2:44:21:12:8b:c2:d0:f3:de:11:20:e8:5c:
         1e:76:05:5a:0b:f3:f2:a1:03:75:bf:22:12:1c:6f:c7:4f:a2:
         de:f1:28:e9:e6:ce:8b:e6:87:c3:41:f1:54:7c:b8:1c:c6:1c:
         29:38:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:42 2025 by rpki-client