Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          kEx/YCnGQ2oCYpMq91NEsiRVG4IjoYG5v2zSg7/WHns=
Subject key identifier:   AF:7B:7C:3E:35:1F:9F:A3:58:6C:7F:10:BD:37:9C:40:F0:AA:02:77
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       0198D5834919C8BAB499BCA23D99AC025903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:07 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: 4q4uwO1GS67KJkQ+G0So1/L010ht8LvfL8w+2S9iyxY=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:49:19:c8:ba:b4:99:bc:a2:3d:99:ac:02:59:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: Aug 23 06:00:07 2025 GMT
            Not After : Aug 24 06:00:07 2025 GMT
        Subject: CN=af7b7c3e351f9fa3586c7f10bd379c40f0aa0277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:85:10:46:75:5e:e7:31:35:9a:2f:c1:b5:
                    2e:c7:0f:43:11:1b:30:a6:e6:18:38:c8:50:e2:54:
                    bc:65:a3:f4:bd:0a:b9:6a:84:34:d7:19:e4:c7:e2:
                    2d:88:92:4f:b9:cd:1a:32:e9:bc:4b:02:be:d5:bd:
                    b5:94:9f:b0:a4:9b:b6:fe:34:a7:ca:6d:0a:82:49:
                    a0:3c:79:07:e1:ba:2a:67:c9:bc:92:62:9d:80:dd:
                    7e:10:e9:21:4a:cc:2e:df:5f:2a:7a:3c:2a:18:06:
                    fe:b9:ed:5d:b3:37:50:f0:37:71:da:5a:fa:c5:f4:
                    1e:90:76:14:08:90:10:f2:93:b7:d6:09:14:e9:51:
                    f7:bb:cb:fc:37:75:3b:f4:37:bc:ee:60:92:6f:4e:
                    06:57:d7:3f:27:c8:52:a4:d8:ca:05:54:a9:8f:5b:
                    80:4c:71:04:3f:6e:83:93:ff:a4:d9:af:ce:3b:f5:
                    ea:cd:d8:a7:a6:bb:ed:b6:16:c2:e7:e0:82:b9:d7:
                    55:98:39:a5:03:f5:7b:b9:89:6b:b0:eb:81:fd:18:
                    1e:c8:37:35:93:44:b5:1c:59:03:a2:48:e4:aa:95:
                    8b:38:47:2b:30:f4:85:69:52:15:3c:dd:09:33:55:
                    c7:5e:99:79:6f:49:b5:2a:7f:ff:13:47:ff:27:2e:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7B:7C:3E:35:1F:9F:A3:58:6C:7F:10:BD:37:9C:40:F0:AA:02:77
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9c:cf:9c:e0:fa:1f:dd:0a:20:b7:ad:26:7a:3c:6f:94:3d:
         c1:29:b0:79:fb:02:20:3b:9b:c8:43:a2:6b:a2:95:d7:d0:20:
         c5:53:1d:74:1f:39:e4:64:41:bf:c7:b7:a2:c6:17:2c:35:45:
         ea:11:8f:af:be:35:7e:af:85:c5:6d:c7:c4:f4:4e:ed:9a:5f:
         2e:21:b0:c3:c8:1d:a9:0f:6b:06:2d:86:35:b3:95:95:76:48:
         a4:b4:4c:ec:08:a5:01:ca:dc:39:6b:02:77:89:f1:a2:f9:18:
         97:07:4a:70:12:30:ba:c7:00:10:96:1b:dc:2d:46:14:37:c3:
         fd:98:6b:57:f7:7f:ba:b6:57:33:38:aa:50:83:91:04:28:9f:
         15:79:9d:5b:b2:11:17:d6:f1:4c:2a:ef:bb:e0:a5:ea:73:c9:
         9e:b1:13:ad:98:da:3a:95:38:6e:a1:29:ea:50:30:b9:4f:6b:
         9c:b0:0f:f5:17:5a:5f:1c:4a:b8:9d:bc:2a:01:cc:3b:f6:05:
         0b:e8:a8:4c:e3:47:cb:16:23:0b:9c:b6:a9:73:e0:34:60:38:
         b7:e6:1b:31:f7:30:ea:1b:84:f1:be:09:fa:20:b0:33:4a:00:
         56:b8:b7:d6:18:78:b2:eb:5d:73:b9:ce:4f:52:ae:7b:64:b0:
         01:a3:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:55 2025 by rpki-client