Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File:                     9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier:          Qle/AW/E73CG5numTiE88QsuxOYY5A2JmUiEVbujXXM=
Subject key identifier:   FB:8E:9A:08:43:E2:82:63:4F:20:DC:00:35:F8:D1:0E:8F:C1:B1:EA
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer:       /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial:       0198D66020DD85E55C43BD62AC03E89B5360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:01:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:20 +0000
Files and hashes:         1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: Mcp1pe0VOilGmkYPZBasSM9Lgz883LxkvSBGxBLfuUg=)
                          2: ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa (hash: n7Rzh1zK0MckYzOS9a8lwv/AGXV+Jr0CvxhzGO4UHW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:20:dd:85:e5:5c:43:bd:62:ac:03:e8:9b:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
        Validity
            Not Before: Aug 23 10:01:20 2025 GMT
            Not After : Aug 24 10:01:20 2025 GMT
        Subject: CN=fb8e9a0843e282634f20dc0035f8d10e8fc1b1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:88:ad:7d:f3:d3:5d:74:91:06:7b:9e:db:
                    97:12:c0:c8:72:8c:eb:a9:31:5d:5d:43:d9:6e:ad:
                    2f:a6:23:25:18:b2:52:b3:b2:ef:f0:36:4f:06:64:
                    dd:79:35:3f:bd:54:49:e0:13:5d:b2:22:aa:7e:4b:
                    ac:ad:7e:57:1c:76:63:33:ac:d4:08:d2:5d:a0:82:
                    e9:3f:3d:4e:76:a8:e3:3b:56:d8:d6:60:5d:8e:48:
                    3f:3a:90:54:52:02:46:8d:f6:05:12:da:0f:c7:00:
                    b3:75:47:9d:da:d4:d9:4d:f2:9e:fc:77:dd:28:40:
                    f1:ce:43:01:a4:3e:bf:b2:8d:ec:c9:d5:92:43:b4:
                    62:03:bd:a2:74:b9:85:56:07:10:2a:3a:da:2c:13:
                    13:44:4c:86:ad:b4:e0:e6:b4:5c:fc:85:47:a5:84:
                    70:31:13:ed:63:94:d2:9a:d9:df:8b:33:3d:9f:b5:
                    61:db:69:48:97:17:c3:c5:bd:a4:0f:a7:57:ac:f3:
                    e6:a2:83:25:9a:ab:a7:bd:59:bb:31:54:f2:37:35:
                    51:e1:ae:74:01:39:bb:57:e2:8a:64:7b:82:b5:db:
                    96:32:f6:d2:a6:06:75:e4:62:1c:26:6f:c2:be:24:
                    f6:71:9e:a7:9e:4e:d4:c1:f9:49:6f:9c:23:c1:a3:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:9A:08:43:E2:82:63:4F:20:DC:00:35:F8:D1:0E:8F:C1:B1:EA
            X509v3 Authority Key Identifier:
                keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:52:b0:c7:b0:df:1f:0d:e8:6d:6b:32:59:d7:34:f2:d9:74:
         be:a1:7e:e5:8e:fd:bc:8d:bd:dd:de:55:89:93:25:cf:d9:7a:
         17:aa:bb:86:e1:e1:38:81:c8:26:00:64:e0:8a:ad:c5:6c:29:
         13:26:31:9f:85:8b:2e:c9:0f:79:00:c7:d7:c2:6c:f1:0d:f1:
         0d:4a:3e:c4:2a:d1:eb:e4:ab:87:6c:f0:25:16:58:91:0d:d8:
         f5:26:98:23:f8:18:e5:8d:ea:25:41:06:62:85:46:de:c7:01:
         d9:49:b5:a2:30:b2:a5:a7:5c:a5:88:6e:82:4b:fb:69:74:d9:
         52:1b:de:7a:e5:6c:af:0a:d7:06:ac:65:4c:04:95:f6:c9:8f:
         31:b4:42:1c:db:43:ce:b5:2d:4e:44:b4:71:95:63:b8:7e:8a:
         5f:42:ca:93:a3:f9:7e:6b:60:a3:7e:b5:be:f5:68:ae:c0:61:
         48:db:66:2c:a7:f7:9a:93:c8:be:58:04:eb:9e:32:2f:bd:8f:
         db:02:2b:42:40:b6:e2:58:d5:30:56:6e:f7:c3:9e:3f:0a:93:
         b6:f9:bf:e4:79:a4:54:a5:4f:0c:c8:ce:06:dd:d1:1b:b8:94:
         1b:4c:82:37:1b:db:e1:ae:5e:8a:1a:fe:f9:5d:e0:bb:26:ea:
         f0:5b:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:41 2025 by rpki-client