Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File:                     jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier:          2B5pCbNKd4k/f1+rIIF97+2ClnMhltv3cZdeqSROagQ=
Subject key identifier:   57:0D:13:69:99:35:A4:F2:13:A2:AA:33:73:8E:71:04:41:27:41:32
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer:       /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial:       0198D705A22807295080F722EF042EABD27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 13:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:07 +0000
Files and hashes:         1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: Pj6lQBCF1fPfuDQS3sfPHdyDna0O+MR1KOAmyEwx4iA=)
                          2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:a2:28:07:29:50:80:f7:22:ef:04:2e:ab:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
        Validity
            Not Before: Aug 23 13:02:07 2025 GMT
            Not After : Aug 24 13:02:07 2025 GMT
        Subject: CN=570d13699935a4f213a2aa33738e710441274132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:4d:e4:fb:14:df:ad:39:26:d9:08:f9:fc:
                    01:68:c4:ce:6a:07:bf:a7:e1:eb:3a:2a:c8:7a:62:
                    59:c1:6d:bd:c1:72:f3:b8:2f:79:e0:f5:91:c7:bc:
                    3a:a7:e8:35:90:38:77:fc:f8:9f:57:53:18:46:bf:
                    1d:5b:47:a0:42:1c:14:3a:bc:49:fb:81:d4:ff:f7:
                    38:fc:6f:72:1c:9d:24:79:4e:ca:35:2d:cb:64:7e:
                    a3:45:68:65:b1:69:75:72:3f:bf:fc:e5:60:11:d0:
                    46:db:92:50:34:cc:b2:79:3c:9d:13:d6:1e:86:7b:
                    a8:a8:f7:62:5e:a5:d9:12:24:13:cd:26:c6:7d:c1:
                    f2:17:2e:75:4d:1b:d0:78:0d:dd:bf:6b:eb:67:9c:
                    3c:31:3b:7c:21:01:60:d7:87:fa:91:6c:6c:ed:53:
                    a3:51:2f:dc:ca:39:9c:b1:d7:27:e0:48:9a:d9:65:
                    72:5a:68:75:0a:4a:2c:99:7f:06:02:49:31:15:8c:
                    4d:17:47:69:66:e3:99:ff:cd:9e:02:41:65:1b:50:
                    15:ff:25:bd:fb:f5:8b:e3:f0:5c:58:89:c8:8e:d7:
                    b2:b0:01:e0:c3:ad:77:84:28:6a:ee:bd:bd:12:18:
                    90:83:91:2d:5c:eb:bb:6f:3d:04:95:28:f7:33:ed:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0D:13:69:99:35:A4:F2:13:A2:AA:33:73:8E:71:04:41:27:41:32
            X509v3 Authority Key Identifier:
                keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:fd:96:17:3f:46:58:e8:cf:d6:c4:17:f7:b7:13:f2:17:bb:
         84:93:36:6c:c1:e9:c6:a2:a3:14:de:6b:56:fa:aa:c6:9d:91:
         8a:7d:84:98:9a:1e:df:b2:06:e2:90:73:af:b6:f7:81:6e:26:
         56:1d:0f:f8:7c:8f:f9:5c:ff:a7:1a:34:72:e4:34:57:f5:ad:
         d6:72:2d:6b:c5:75:d3:c4:39:3e:e8:06:56:ba:42:bf:a8:2b:
         99:3a:95:29:31:0f:be:00:b7:4b:74:e9:d8:19:51:de:4e:85:
         da:14:49:69:be:87:52:ea:b9:08:56:56:8f:07:e7:42:fa:88:
         6a:cd:d8:3f:0c:07:19:f7:a5:e8:09:a6:4d:e1:a3:4c:e0:03:
         08:dd:19:1c:02:e8:4c:9a:33:cb:8c:76:2d:48:f8:10:12:73:
         76:4a:96:bf:14:cd:62:04:5a:83:76:13:25:7c:60:a3:45:19:
         a0:37:22:9c:fd:eb:ba:29:53:3d:25:1b:dd:cb:8f:41:29:2c:
         d4:8b:30:35:b5:9e:33:f2:a7:0d:dd:95:66:25:91:a9:7d:df:
         38:84:d8:b8:a6:9d:31:b4:a8:3d:69:97:1f:16:9e:1c:b8:a3:
         ef:d9:00:b2:f3:99:f3:ea:fe:73:50:39:83:ba:76:8b:01:88:
         67:ab:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:56 2025 by rpki-client