Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          Ws4JT4h3O5DiqhAr5I2iy6XzvNIIdWqrL5hegczbfgY=
Subject key identifier:   F1:FF:5A:D9:C6:18:A8:D0:30:B8:F3:EE:F0:5B:C9:0A:CC:9F:A9:34
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       0198D54DD486E59633BCA252A03010083CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: 4kEhevkpP_AXSHtDbQt_y5XXD_U.roa (hash: Utfr4kFbDvk1+qjjuuuYnoLkGoHhJpPo3BK4RGIg74g=)
                          2: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: co/ASTm0208NsgqtnhY/qRT0WoVY1NiT0ND5MrtLrW8=)
                          3: VFGtTmctOrCjqkuRTfIPjlhNsbU.roa (hash: Kx2OzOjQfSX7IzHAKC1pKf9P1rkGaVbawrDwIeTytCo=)
                          4: hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa (hash: E3NJlfBqIWJ89UYs9nMw+LOY3dmFw01LCnketh8FRY0=)
                          5: jx1FgPOkBbayLbn8i9fFX-3vhJI.roa (hash: du1QA1Pa5BxqPJI19sJCDEas0RaG543HI6Un8BqtN7g=)
                          6: lauLTK6HRr7436pAd14mrAaE3vU.roa (hash: ahn5yKzybexoFBgNe3W5HKkjK7F19TopqaCzFWkZQgs=)
                          7: xVwjRhSfq67xc9Qi_wrSVn11vY0.roa (hash: iJyeTnFvoMMSPwtJkLmVhK7+FVvlX6Jx0lnFlM/s3fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d4:86:e5:96:33:bc:a2:52:a0:30:10:08:3c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=f1ff5ad9c618a8d030b8f3eef05bc90acc9fa934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:b6:e1:34:3d:88:07:83:ff:6e:80:1e:c9:
                    0a:16:c1:ec:3c:a2:b2:ad:9d:0f:d8:07:1f:55:ba:
                    ea:d5:65:2d:d6:0b:45:11:bf:1f:bf:9e:d0:87:a2:
                    6b:87:01:7a:04:18:de:18:70:98:c0:9b:31:b9:30:
                    0f:dc:b9:e6:f1:d1:81:bd:46:fb:40:30:25:40:bc:
                    56:80:f0:6f:5a:b0:f6:ad:5d:dc:5f:5d:eb:56:10:
                    1a:0c:06:9e:34:f2:28:8a:de:6d:31:45:fa:21:47:
                    59:15:3a:db:54:74:fc:73:61:15:fd:cc:62:9c:bd:
                    a8:9a:b2:fa:98:82:5b:e6:27:8e:9e:81:e4:4d:47:
                    d3:b1:d2:71:40:37:a6:3b:20:b1:b1:a4:40:bf:4d:
                    ab:d6:d7:65:2c:be:43:ad:e8:75:5d:40:9c:f9:3f:
                    a0:3b:fa:84:71:36:1d:89:32:59:10:2b:b8:94:51:
                    4b:65:8f:f4:99:d0:62:fd:90:2e:ed:1e:75:fa:bf:
                    2b:82:f6:cd:b2:8c:50:74:35:05:59:bc:02:e3:9d:
                    b1:9c:de:b0:2a:28:e0:f3:bf:da:81:b3:fa:9c:40:
                    e5:1e:3d:fa:1b:51:47:4d:3c:8b:52:2e:99:c2:23:
                    b9:de:c5:66:d5:0a:b5:a3:5b:c4:99:8c:bb:d4:4f:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:5A:D9:C6:18:A8:D0:30:B8:F3:EE:F0:5B:C9:0A:CC:9F:A9:34
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:15:c9:fd:07:c8:cb:4c:8b:2d:dd:1c:56:26:94:90:e6:
         32:16:de:b8:db:fd:c1:5c:7f:60:92:f3:72:9f:6b:74:2a:9c:
         85:67:be:06:3a:8e:18:ab:01:45:16:75:f9:2a:2d:66:4a:93:
         5c:51:f6:8b:e7:a2:c4:39:c7:6b:25:a4:fc:aa:dd:9c:93:75:
         9b:f7:39:78:ff:62:0c:48:c6:8c:65:75:ee:54:31:15:d9:35:
         ba:9d:6c:4a:d3:27:44:2b:a2:06:d4:f1:65:c3:b7:9e:fb:6d:
         fc:f7:bd:b8:5d:c1:d1:26:bd:40:a8:e1:4a:df:bb:c7:e5:7c:
         69:24:24:b4:35:a1:03:cc:1e:3e:16:44:2d:76:b3:6f:b5:3b:
         2c:94:86:3b:6d:0b:e4:63:78:fe:a5:cb:ff:c2:50:cc:74:5d:
         9b:36:16:a0:1f:63:19:76:cf:25:7c:f3:39:2a:3a:72:60:e9:
         06:fd:c1:76:bc:be:36:f3:29:12:71:77:a5:8a:3e:99:ed:8e:
         46:2a:9c:78:34:e0:e3:d2:16:09:9a:7c:58:0c:cf:ea:1b:5f:
         48:e8:92:9a:53:97:60:35:a7:d2:72:09:53:11:78:39:42:4c:
         a7:98:e3:ca:3c:27:87:f8:5a:de:0f:14:b5:c9:be:90:13:ca:
         58:03:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:48 2025 by rpki-client