Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File:                     MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier:          VI+OUn3EB1iCWnD7Ya2eYsPBAf21IWxLXcqOEzyN/w0=
Subject key identifier:   36:1C:92:E6:6E:A9:3E:E7:E7:BF:30:37:5C:89:3D:3E:70:B7:D8:E4
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer:       /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial:       0198D54E991D074C8C9F1F8E6FF45AA48EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 05:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:34 +0000
Files and hashes:         1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: LFxYj+TyyYBW1D6VzM3PWgEAuL/jx1f0wKZUukFu8Gk=)
                          2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:99:1d:07:4c:8c:9f:1f:8e:6f:f4:5a:a4:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
        Validity
            Not Before: Aug 23 05:02:34 2025 GMT
            Not After : Aug 24 05:02:34 2025 GMT
        Subject: CN=361c92e66ea93ee7e7bf30375c893d3e70b7d8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:11:45:49:64:d7:12:68:72:25:a4:de:f4:
                    24:7d:12:bb:0b:1c:fc:f8:9f:f7:2c:f4:98:ed:c3:
                    d3:80:5d:08:64:57:b8:62:da:0b:3b:6f:f0:e3:f6:
                    4a:7f:ba:5c:d5:70:4d:80:71:42:79:02:78:80:d6:
                    87:e7:a8:3d:97:28:c5:3c:69:80:1a:b4:86:ab:be:
                    45:ed:1f:7a:31:c3:08:4e:bc:d8:14:da:b1:8b:9a:
                    5e:7f:29:3e:1d:9c:5f:c3:15:b6:b7:fa:93:78:c5:
                    37:66:2c:a5:ab:4a:d5:41:bd:5a:12:2a:03:5e:1d:
                    e9:79:b7:3f:f6:e2:45:0e:e4:66:0f:24:59:0a:71:
                    b2:e5:74:8e:7a:fd:e5:b9:cd:3f:5d:50:49:cf:b8:
                    ae:39:d4:eb:76:0e:be:56:e3:c4:0b:bd:38:55:21:
                    72:02:d3:11:96:40:63:31:65:eb:37:be:b3:88:ff:
                    b0:41:f0:85:46:06:b7:ba:17:74:97:aa:75:ce:63:
                    ce:1c:60:c7:0b:8d:19:61:f4:cb:f7:16:12:4b:d4:
                    0d:d7:bc:e4:74:35:ac:0a:f3:29:ca:40:56:07:99:
                    55:c6:87:a7:a2:43:c2:9a:0e:4a:f3:86:d3:43:ad:
                    65:b3:2d:1b:ff:a3:c4:b5:cf:88:5e:ce:1b:c7:7b:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:92:E6:6E:A9:3E:E7:E7:BF:30:37:5C:89:3D:3E:70:B7:D8:E4
            X509v3 Authority Key Identifier:
                keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:19:5f:a0:1c:3c:df:5c:a7:d9:d3:97:ac:98:7c:f3:26:e9:
         fe:59:1f:27:6e:cb:f4:a3:56:2f:04:93:01:89:31:68:d7:55:
         17:19:3e:42:34:23:18:7c:16:f2:fc:14:9b:bd:ff:e6:84:9b:
         17:49:b3:0d:1f:0a:2f:47:68:7e:22:2d:57:7c:4f:2e:2f:15:
         70:f8:40:3c:bd:0f:d5:9e:57:02:42:65:5a:60:fc:5b:e7:a8:
         76:af:c9:ba:41:fd:dc:1a:cc:09:b7:15:d1:75:e8:91:16:05:
         98:c7:a5:eb:61:3f:d1:08:a4:40:1b:b0:e9:6a:80:c2:05:a9:
         c3:a1:2e:d9:d2:21:c2:cc:80:eb:c4:e9:0c:ae:4f:10:b2:1b:
         a5:18:cf:52:73:76:b2:d4:e0:5a:8d:9f:bc:8b:97:43:1f:43:
         8b:b0:f0:8c:de:81:b6:34:0d:03:eb:06:55:84:03:21:fb:70:
         38:9e:3d:bf:ff:91:6c:67:c8:74:19:62:2c:ab:8d:4d:2b:98:
         39:44:a7:c2:52:1c:6e:3b:22:43:9f:94:5d:29:e9:f0:b9:17:
         d6:24:03:4f:dd:28:eb:98:42:63:0c:87:ec:ca:44:7f:8e:07:
         12:be:f6:58:92:19:03:76:1d:2e:17:8c:77:61:14:d2:e3:ba:
         8f:93:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:54 2025 by rpki-client