Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          smtBi3G2DHgxL+1eu/le35X/bkVqy2t9YjWNO18exl0=
Subject key identifier:   1C:20:43:F4:D2:8D:2E:18:79:A2:86:B0:18:68:83:40:21:4B:B0:F2
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       0198D5BC06ED70F35B1A4099F744DDB45DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: DqmHxE8k35SzRvy24XyeHzOzx04853AdwEr51jRkPKo=)
                          2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:06:ed:70:f3:5b:1a:40:99:f7:44:dd:b4:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=1c2043f4d28d2e1879a286b018688340214bb0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:ba:f4:71:54:51:9d:f4:93:dd:4b:64:ec:
                    cd:38:7a:e2:60:6a:ff:91:1a:5c:9a:e2:e4:84:bb:
                    2f:79:30:d9:80:f4:91:76:b4:e2:30:97:6c:57:c8:
                    83:82:de:e4:ac:ca:3e:78:4e:38:a9:ed:47:86:24:
                    9b:f6:24:36:dc:f6:e5:70:db:f5:8f:3a:b1:a2:7c:
                    46:94:53:65:68:51:a2:9c:af:99:30:45:a9:cc:ff:
                    f1:f8:c2:d8:52:86:c9:03:ca:c7:0b:83:e9:01:b5:
                    09:68:9a:fd:38:9e:a0:75:6f:6c:88:23:07:60:e5:
                    1d:58:d7:9d:ac:10:84:1f:e9:ef:3a:39:08:ca:fd:
                    4d:d5:e9:9c:80:e8:2b:d8:b8:e0:53:96:f6:55:5b:
                    71:0c:e5:7a:38:e5:53:7e:ba:a3:be:a9:0a:d3:00:
                    97:b4:82:74:ed:5a:cc:f7:a6:17:8f:34:5d:dd:ae:
                    47:d7:58:0e:1c:f5:62:3e:59:24:c4:74:c7:cb:81:
                    b4:24:85:c7:6b:bf:0a:f2:28:1c:82:da:ef:d9:6a:
                    b3:23:f1:c1:ec:ad:0d:57:e9:03:e8:db:82:e4:32:
                    15:d4:99:b6:dd:34:fd:96:b1:35:90:5d:a3:45:94:
                    cc:72:d7:15:2b:73:d5:28:8d:dc:5c:55:59:51:7a:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:43:F4:D2:8D:2E:18:79:A2:86:B0:18:68:83:40:21:4B:B0:F2
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:16:67:1d:00:68:b8:49:99:3e:03:c3:ac:1c:a2:0a:5d:a4:
         a2:8d:a6:d6:f6:e2:ac:b1:14:52:e8:4d:ea:2b:a0:94:79:e4:
         fb:ac:41:a2:06:fa:5a:19:95:c5:5b:15:23:d2:50:c8:c9:ba:
         98:db:34:87:7d:4d:80:1b:d2:2a:e7:42:0d:f3:dc:00:5f:cf:
         e0:2d:89:f0:67:62:a5:a2:c0:48:f1:df:94:73:ae:6a:1d:b6:
         75:66:ea:45:06:9e:dd:a5:0c:67:4f:4e:67:50:35:07:ef:3e:
         a0:db:9e:e0:99:e0:b8:da:77:37:7e:b8:8c:f2:7f:fe:57:1f:
         a2:be:d0:44:13:b9:c7:eb:09:25:5a:92:9c:e1:0b:07:c7:2d:
         f8:d5:4f:ad:a0:47:83:c9:e3:9a:fd:63:80:d7:2a:ee:03:e7:
         b3:1f:ea:2a:a7:80:1f:dd:02:ee:3a:83:d1:90:72:24:27:55:
         a1:56:ff:41:5a:11:dd:87:ae:f4:5c:4d:42:90:73:83:5b:b3:
         2b:2a:3f:27:c2:04:fa:f4:c3:78:64:cd:69:bb:b6:a3:3a:2e:
         fd:71:2d:9e:06:6a:22:08:3e:3a:bb:25:96:89:1f:83:bb:dc:
         9f:5e:94:7d:73:c2:dc:b8:6f:4e:a7:98:4d:9d:d9:7f:a9:9e:
         39:6d:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:23 2025 by rpki-client