Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          u4Uq5vaukzfijJE88HQtgVYIr1M1zWb03Fr1C7zIvGY=
Subject key identifier:   07:50:81:FB:C0:9F:49:97:CF:2F:94:96:61:22:B6:58:3E:54:01:A0
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       0198D7A8A24212C845605BA1D3258113FCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 16:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:09 +0000
Files and hashes:         1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: laFq6Zmiex5AdOMyWeYi42JBBVCRRoQM4nxJ7bWL/5c=)
                          2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
                          3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
                          4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
                          5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
                          6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:a2:42:12:c8:45:60:5b:a1:d3:25:81:13:fc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Aug 23 16:00:09 2025 GMT
            Not After : Aug 24 16:00:09 2025 GMT
        Subject: CN=075081fbc09f4997cf2f94966122b6583e5401a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:4e:d2:9c:66:59:ab:0e:63:82:2e:90:25:
                    00:c2:3c:36:20:b1:a3:30:0d:a1:76:d5:b0:2f:88:
                    cf:45:9f:ff:89:de:52:4b:7a:42:06:dc:aa:8b:a2:
                    58:28:c9:46:37:5f:2f:04:be:a3:ad:49:2a:e7:0f:
                    fe:d5:73:19:5f:80:7c:f2:6a:ed:fd:63:ff:9b:3c:
                    08:7d:dd:23:3f:39:be:19:70:ca:59:39:1d:07:b2:
                    40:68:06:13:3b:6e:b8:5e:a7:cb:52:26:dc:8b:31:
                    d6:1c:ee:30:5a:27:87:eb:a4:fb:25:8b:e1:23:7a:
                    97:6a:2a:69:a7:c4:7c:12:cb:78:51:09:db:e8:b5:
                    29:32:79:e9:84:c7:c0:d2:6e:e6:8d:ae:3c:69:83:
                    70:b3:4a:4e:e1:4e:bc:6d:6d:45:0f:ad:55:15:24:
                    23:11:d6:54:c5:44:00:8a:e8:b9:70:20:11:11:f8:
                    56:81:59:24:62:41:87:6b:be:64:52:fb:5c:72:73:
                    1a:0f:f2:a6:de:46:d8:bb:ca:91:77:eb:1b:09:b5:
                    04:0a:69:6a:cd:94:04:2f:69:c9:1a:1e:18:71:84:
                    5c:0b:2f:29:17:e2:6d:e8:bd:77:9f:6d:33:03:1e:
                    be:53:e2:48:ea:47:35:09:5a:68:41:43:41:49:e6:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:81:FB:C0:9F:49:97:CF:2F:94:96:61:22:B6:58:3E:54:01:A0
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:14:60:a7:d1:2d:1d:9f:2f:2a:61:4f:0c:80:a9:03:09:a3:
         bf:35:4c:87:49:52:47:2e:e7:2d:83:ae:9e:b8:45:4e:a0:c8:
         f9:c7:0a:5a:28:88:69:02:f4:be:5e:db:4c:00:2f:cb:93:56:
         27:2d:1a:dc:4b:b5:a5:fe:01:76:34:27:81:d7:bf:62:87:a4:
         3d:6f:43:7d:df:0d:08:23:4f:3f:2d:77:92:2c:fc:66:55:0d:
         04:3f:35:7c:5d:3b:5b:41:28:e1:30:c0:bb:10:d8:b8:7a:35:
         ec:0c:08:e2:ee:99:ba:83:c2:35:50:7d:d9:d5:9e:84:77:81:
         c8:e1:05:58:dc:a6:e3:b2:eb:44:b6:46:c9:6d:2f:2d:3b:0f:
         30:54:be:03:d8:d9:cc:e9:d2:ad:4c:f3:d9:61:48:ff:8f:27:
         57:77:8a:ba:86:4b:cd:c7:a9:63:0c:29:26:cb:3e:95:ff:70:
         f5:39:c3:90:36:33:c5:32:d9:f5:26:40:2b:d4:b6:83:7c:4d:
         4b:5e:d9:9e:86:81:93:45:5a:1d:58:f5:df:a9:d2:52:38:09:
         b5:92:e6:55:6d:c9:60:6a:26:a7:94:85:6e:2a:65:57:33:fe:
         2d:07:2d:ef:55:ad:96:94:6c:d5:eb:9e:11:55:5b:66:65:77:
         46:53:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:11 2025 by rpki-client