Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File:                     XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier:          i7b1q9Br5SySVZDryML0Al+vAIZxz5/z3+AYACR+na8=
Subject key identifier:   3E:31:BF:27:EA:9C:04:DC:38:43:19:8D:01:BA:92:36:E2:E6:34:F1
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer:       /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial:       0198D65F52BAE234C76DE8836EAD30D5103C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:27 +0000
Files and hashes:         1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: kf/gD1LSms/OubQG1HTmaJjW/aZkkaFtmofJvyEQWd4=)
                          2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:52:ba:e2:34:c7:6d:e8:83:6e:ad:30:d5:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
        Validity
            Not Before: Aug 23 10:00:27 2025 GMT
            Not After : Aug 24 10:00:27 2025 GMT
        Subject: CN=3e31bf27ea9c04dc3843198d01ba9236e2e634f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:95:d6:ad:38:4b:fb:7e:1a:d5:87:86:d5:
                    ee:d6:f2:a5:67:37:01:0e:1f:87:42:8e:f9:67:cd:
                    f7:e2:76:1b:7b:64:e7:40:01:c8:df:48:1c:c1:0f:
                    2a:2b:fa:dc:72:34:ed:7c:2a:6c:14:16:10:9a:5d:
                    20:9a:a6:15:25:8b:0f:5e:02:9a:17:c1:f1:45:c6:
                    4d:78:da:e2:28:81:a5:24:3f:f1:f6:78:c8:0f:1a:
                    2e:6d:a5:52:ab:45:7f:4b:58:d9:2e:4d:16:4b:46:
                    a8:f1:7a:29:ba:45:86:88:b2:2c:21:7f:7f:97:62:
                    10:25:26:79:b1:e9:bd:56:63:3b:e3:11:49:b4:36:
                    be:c0:6f:51:0b:3f:ec:4b:59:5c:94:ca:24:00:92:
                    b7:6a:4c:0d:aa:a5:bb:2a:d4:09:f2:33:a4:d1:92:
                    07:b5:8c:5a:b5:ff:ca:b0:e0:62:81:b1:66:7d:ac:
                    54:37:44:08:dc:d3:b5:bc:63:aa:4a:df:d1:9c:df:
                    e6:fc:b2:76:18:7b:c3:7a:b1:5d:c6:c9:8e:2f:e1:
                    09:39:c2:e7:b9:12:bc:02:ad:58:88:b2:c2:e5:95:
                    1b:2a:46:79:18:83:77:a4:28:10:88:f6:48:54:8d:
                    d9:5f:9b:8b:0d:01:ab:9b:eb:a2:f6:ba:6e:c7:a0:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:BF:27:EA:9C:04:DC:38:43:19:8D:01:BA:92:36:E2:E6:34:F1
            X509v3 Authority Key Identifier:
                keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:31:48:af:8b:57:f2:f5:c6:37:20:b4:d9:7e:5e:82:66:
         8a:fe:43:29:9d:d3:45:55:60:ad:32:68:3a:2f:9f:84:8a:5e:
         86:0f:20:43:1d:cb:87:42:05:f3:d5:a2:d2:f9:fc:8c:5f:48:
         9d:ee:96:b7:8e:f2:13:f2:d8:5b:73:5e:71:cf:3d:56:75:6f:
         c3:85:70:0d:04:37:21:7e:92:d2:a9:a8:13:83:9d:d2:a7:5c:
         18:e9:49:c7:be:c6:c6:24:90:54:95:63:9b:97:f2:87:62:68:
         3f:18:80:bb:34:e7:1e:d4:6d:c5:29:2c:50:e0:d1:a4:a4:12:
         1e:c7:d6:da:c5:ef:c1:f9:31:ce:da:fa:da:56:b2:78:6b:8e:
         53:93:d9:90:dd:2d:28:93:96:3d:d5:27:51:1d:86:80:2c:44:
         77:9c:04:1f:20:1b:58:c0:73:ba:29:98:02:71:31:b9:7a:b2:
         eb:c2:8e:00:80:f9:2b:86:47:ab:14:82:c2:23:af:af:4b:c3:
         9b:f8:b5:36:08:3f:06:0c:e2:08:a3:14:90:18:ee:70:14:1a:
         a2:2e:52:5d:85:dc:e9:24:1e:10:58:4e:d2:6f:13:a7:70:1f:
         58:68:e0:fc:1e:14:47:9e:db:69:e3:e4:ac:d8:c2:a8:e7:a8:
         29:98:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:36 2025 by rpki-client