Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File:                     DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier:          YxffGuq5CBiPgv73nRfwaVjwGgJbAWFzs1eBJD8vc6Y=
Subject key identifier:   47:1B:01:D0:3A:7D:C4:45:77:AC:7C:EA:F6:01:7D:7B:B5:3A:5E:7F
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer:       /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial:       0198D5BBCE799A8EAF4A54278C52A74B4CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:51 +0000
Files and hashes:         1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: h/QzmI/y10VzR+2J/yUBLHMUMMwimjly29rpmAyfwkM=)
                          2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ce:79:9a:8e:af:4a:54:27:8c:52:a7:4b:4c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
        Validity
            Not Before: Aug 23 07:01:51 2025 GMT
            Not After : Aug 24 07:01:51 2025 GMT
        Subject: CN=471b01d03a7dc44577ac7ceaf6017d7bb53a5e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:c5:24:eb:70:ca:cd:db:ce:1d:9f:59:f1:
                    61:14:9a:2f:36:22:c7:b6:f6:04:1f:fa:5f:7a:21:
                    88:dd:9e:b1:9a:cc:1b:c3:1e:46:aa:9c:29:86:b2:
                    cc:df:7e:c2:9e:61:10:27:f0:0d:85:7c:f9:73:71:
                    a4:96:3b:87:44:1e:46:27:67:59:04:cc:18:ee:93:
                    c9:fa:f8:b0:e0:1b:0b:f6:3f:39:83:00:fd:74:b8:
                    e3:81:8c:a5:ae:a6:64:f4:6d:27:d6:90:42:27:32:
                    08:3a:31:ba:a7:44:57:55:33:2e:32:b0:7c:09:49:
                    44:9f:dd:18:8b:3c:77:1c:09:57:ed:53:f6:a5:39:
                    78:de:2e:7f:d9:3d:5f:97:d0:fa:56:a8:e1:c0:ca:
                    79:99:c7:77:5e:73:2c:ab:95:9b:17:12:e5:30:34:
                    4c:79:0c:c9:47:95:85:66:e6:3b:fd:2f:c0:14:3c:
                    fe:7b:75:44:76:98:96:fb:28:6a:57:8b:8d:b3:b3:
                    f1:78:f3:22:71:12:be:ea:e4:8c:df:17:cc:92:a3:
                    c9:6b:0b:e8:84:8b:5e:a6:ac:71:ae:a8:39:88:e5:
                    b5:a7:ae:2a:de:c3:6c:38:af:a6:4d:6b:a1:0f:8d:
                    32:c6:b1:6e:08:2e:f6:0d:b5:ad:ad:52:3a:92:57:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:01:D0:3A:7D:C4:45:77:AC:7C:EA:F6:01:7D:7B:B5:3A:5E:7F
            X509v3 Authority Key Identifier:
                keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:41:d8:7f:7a:c2:8b:e7:32:38:27:5d:03:46:88:ab:6b:
         89:d9:8d:2c:aa:ed:64:23:b3:67:7a:0d:04:5a:59:2d:7a:cb:
         b9:27:d7:7f:2d:49:17:41:ff:a9:dd:d3:41:a4:ba:21:0e:ed:
         4c:fd:af:40:d9:d7:40:b0:09:94:3e:ec:4b:eb:a8:30:1c:02:
         a7:3f:5a:40:36:15:db:1a:c4:b5:db:1a:ad:a7:09:e6:4d:1e:
         40:78:97:33:a6:d7:81:95:fb:13:1e:b7:72:11:a3:9f:e5:d7:
         63:66:16:47:82:d5:84:f5:5b:3f:2f:66:ca:20:b5:ac:f9:59:
         72:da:f9:80:33:02:5c:2e:c7:47:75:72:45:13:a0:a5:ad:a3:
         af:a2:b2:6d:2d:bb:c9:cf:b5:f1:16:83:21:bf:ca:b6:48:52:
         4a:35:88:7b:42:1e:95:ea:81:7c:1f:af:e0:dc:dd:24:8a:5c:
         42:be:c4:42:dc:6e:84:51:d6:fb:7a:d1:d9:1f:67:bb:94:ba:
         50:4e:27:4a:29:0c:81:be:6a:b9:6e:b3:80:4e:b4:5a:2c:b6:
         46:20:b8:08:8e:7a:0f:06:de:21:0a:c9:81:9c:99:81:e3:a2:
         20:d7:3d:7c:06:9a:a4:ee:8e:8f:41:50:4a:6c:d0:b4:b0:2f:
         39:fa:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:00 2025 by rpki-client