Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          1EEO+Q3WOYBizQiQsDjB1AK2V2XrTXTmu3FI+wlhNcA=
Subject key identifier:   36:CC:05:A8:6C:A0:07:73:ED:98:15:7E:6E:FC:00:FC:CF:28:E5:11
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       0198D5BC547FEABAE1DFB86DF98F6E4A80C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:25 +0000
Files and hashes:         1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
                          2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: zMDUYpFlRxCsD0YqXBTl1jB78xstSTtdu07dIS6jVhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:54:7f:ea:ba:e1:df:b8:6d:f9:8f:6e:4a:80:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Aug 23 07:02:25 2025 GMT
            Not After : Aug 24 07:02:25 2025 GMT
        Subject: CN=36cc05a86ca00773ed98157e6efc00fccf28e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:2a:f8:5a:c0:5a:d8:b9:eb:ff:9f:6e:6c:
                    73:1f:82:97:d0:7c:49:30:2b:7a:be:05:42:b4:78:
                    ae:61:ba:f6:c9:91:77:81:1c:a9:6d:bf:23:de:ab:
                    d6:c5:68:da:2d:29:98:4d:b0:7b:34:cb:09:0a:80:
                    eb:e5:77:04:63:40:2c:3d:e5:f3:93:27:80:09:d8:
                    d5:8b:5b:d6:1f:e0:32:03:ed:ff:0d:43:29:e3:4d:
                    12:73:86:bf:9c:ee:23:8c:7c:d3:ce:3a:b6:11:3f:
                    ce:bc:fd:92:04:ec:4e:df:d8:6b:84:1e:5b:b5:95:
                    be:08:a9:3b:eb:24:e4:84:5f:9c:55:6c:f3:8b:cc:
                    9b:0d:a2:c9:da:3a:44:cf:48:8d:46:00:36:db:2d:
                    25:eb:42:ab:e9:aa:36:76:a7:4e:f9:f2:58:94:f8:
                    1f:0b:7b:62:84:57:6b:0e:9b:44:a3:13:27:36:62:
                    0a:51:8c:2b:61:ee:13:52:e0:66:ed:23:d7:78:c1:
                    bd:33:2e:97:c6:69:ea:18:bc:e4:61:00:93:d2:98:
                    ad:33:9d:31:d9:97:9b:c5:8c:ad:a7:23:e0:39:63:
                    e7:cc:2d:ad:eb:5d:49:75:ac:29:23:d2:ee:a8:41:
                    13:bb:a1:ce:67:20:83:c0:71:25:a0:08:5d:7e:6b:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:05:A8:6C:A0:07:73:ED:98:15:7E:6E:FC:00:FC:CF:28:E5:11
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:bf:04:c9:0e:8b:95:84:40:fd:8e:3b:4b:60:76:56:83:
         7e:24:3e:1f:9f:a8:8e:48:9e:02:89:95:bc:67:da:8b:18:6a:
         28:7e:9e:fe:59:e1:96:8e:9f:dd:ef:58:cf:85:2b:3c:31:b4:
         c3:a7:88:25:66:49:cf:6e:28:20:48:66:43:cb:4c:67:79:82:
         01:7b:bd:08:fb:30:1e:28:ea:f7:1b:89:93:f8:29:3a:70:10:
         4a:c6:f0:25:13:a0:fc:9d:fd:e7:46:ec:99:70:d5:e8:b4:37:
         e5:62:18:86:1e:28:59:4d:7c:2c:99:11:ee:10:63:1b:5d:ad:
         cd:5b:5f:26:cf:47:cd:b6:ff:42:11:7a:90:3c:30:12:93:4e:
         62:e8:3a:d0:21:3c:cf:25:1e:4a:c1:5e:b0:8b:22:5d:6b:f0:
         17:08:09:5f:08:69:98:3b:61:69:88:1c:d9:29:0c:cf:ae:22:
         01:01:64:8d:20:76:a5:03:b2:03:bd:b7:6c:58:d5:f7:7a:87:
         d2:07:df:18:15:c7:98:f5:6a:76:4c:9e:4d:1f:54:ba:d6:35:
         33:32:f7:73:f4:d1:16:d6:07:26:d5:38:e7:5b:d4:fd:11:3c:
         ff:6d:fb:e1:6b:c0:57:2e:41:1a:48:66:87:38:89:02:99:aa:
         f1:4a:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:21 2025 by rpki-client