Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          8uFQ+RjTrP14bfP2QxqcneymUO/nZODpWlbyYIMySOU=
Subject key identifier:   1C:4B:34:79:41:04:6F:54:77:9D:96:11:CC:AB:8A:B2:64:9A:34:2B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       0198D54DF03CAE43512F1CE2D00E271F7981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          165F
Signing time:             Sat 23 Aug 2025 05:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:51 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: tHeJ1tGrAfsNGMn7KisVhqWGt8JhuCULsrvrNlaVMQM=)
                          2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
                          3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
                          4: MM0dD-Cnl2lqyWLvCK1-oHYBFlY.roa (hash: 0xgeIhk2pLPXnWlj2EeT8c9DNkODQXdxgnvF/AKwP4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:f0:3c:ae:43:51:2f:1c:e2:d0:0e:27:1f:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Aug 23 05:01:51 2025 GMT
            Not After : Aug 24 05:01:51 2025 GMT
        Subject: CN=1c4b347941046f54779d9611ccab8ab2649a342b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:c6:ef:ed:71:2e:8a:3b:1e:69:82:74:d2:
                    ad:a3:22:f9:62:d4:f6:cb:64:03:4f:09:c2:27:03:
                    da:e6:99:5a:07:b2:18:da:1d:b3:80:2b:e4:62:47:
                    68:86:3f:61:03:64:33:0d:e9:46:96:50:00:cf:10:
                    8b:ef:1f:90:d7:be:c2:bd:b3:fb:0e:5b:e6:45:b3:
                    ea:41:78:48:37:a5:11:14:0a:97:a2:c4:35:38:34:
                    11:f2:5c:0c:77:f2:fc:e2:ba:b8:f8:d8:56:ec:d1:
                    c5:61:66:f5:a2:c8:6f:89:5e:45:f4:f7:14:f9:5a:
                    92:60:ad:b5:c4:5d:1d:18:cf:ff:16:c5:79:6f:c4:
                    f1:ed:6a:00:46:bd:c5:8a:bc:98:a8:10:88:52:a0:
                    7b:df:47:40:59:71:ff:66:41:37:c6:0c:ce:80:d9:
                    f4:f9:9e:8c:d0:02:93:4b:86:92:7b:ce:09:e4:d9:
                    79:08:52:45:d2:0b:cb:be:76:97:09:81:57:9c:1f:
                    55:52:93:92:d1:5a:29:6f:3a:13:81:92:da:33:6d:
                    05:49:62:d4:c3:4a:13:53:26:1c:25:81:d3:df:1e:
                    f8:86:ed:fe:4a:b5:1c:5b:72:c0:be:75:c9:00:1d:
                    37:da:9f:30:bc:ef:84:ac:c9:9c:a4:a1:5c:51:27:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4B:34:79:41:04:6F:54:77:9D:96:11:CC:AB:8A:B2:64:9A:34:2B
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:fc:2c:77:d8:0b:fd:c1:0d:cb:c5:51:3c:fc:ae:53:26:
         c5:29:fe:64:f4:e4:50:69:f4:e5:31:8a:e8:04:9e:65:01:03:
         2f:80:22:22:b0:20:a1:ef:fe:cd:f5:6e:ac:74:3d:01:96:fd:
         44:0d:34:26:69:11:08:ab:31:6e:bd:ce:fb:8b:f0:dd:d9:6e:
         dc:82:e1:5a:5a:a6:d9:e1:f6:35:52:53:00:92:73:ea:6a:ce:
         91:59:d0:60:c8:37:ba:cb:c4:92:a6:74:ee:f6:97:89:8f:f6:
         01:b9:b2:79:77:e1:7a:de:04:b1:8f:a0:19:3c:2d:f6:27:5d:
         87:27:f4:b9:47:42:3f:87:c0:cd:9e:6c:a7:12:90:9a:b1:f0:
         5f:9c:56:31:5f:d0:b1:89:99:38:d7:2d:2f:30:4d:79:58:a7:
         5b:5f:71:2e:83:cc:b1:ec:cc:84:a9:b8:74:fc:2c:78:ca:41:
         0d:1b:ee:bc:96:72:1d:a9:38:9a:55:73:c9:f8:e9:2a:64:0e:
         46:3c:b2:aa:44:4b:fa:3a:59:83:b3:2e:b1:3c:84:97:f4:9c:
         45:2d:36:f5:1d:5d:ee:36:88:87:c7:c0:bb:88:f4:b3:3e:8b:
         0d:73:79:b4:a1:8d:49:00:19:0f:fb:48:6e:4e:91:87:51:8a:
         90:d9:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:42 2025 by rpki-client