Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          kPzZOrd7BnTaFrlnajN0jrEguKb30SijKpqeUdQ03Jc=
Subject key identifier:   D3:A9:A6:30:15:2D:49:C5:8B:DE:38:12:A1:BA:23:FA:36:A3:F3:48
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       0198D583CDCE48E817599DEBEDD304645FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
                          2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: Ez0nfiAOdG3T5NzKng4INHx2BaCXv5cy3WKp+nK+WxE=)
                          3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cd:ce:48:e8:17:59:9d:eb:ed:d3:04:64:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=d3a9a630152d49c58bde3812a1ba23fa36a3f348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:e6:e7:91:f9:66:bb:f3:ae:81:7f:a8:b2:
                    d5:7d:f7:d8:8b:25:20:bf:5d:3c:b7:6c:0a:bc:c8:
                    40:78:3a:28:20:ba:5d:6a:43:e7:2c:10:4e:dd:68:
                    a2:77:05:ac:5d:c5:5c:f4:18:f9:99:6b:f9:0c:e5:
                    9e:87:3b:f6:1b:7f:f0:0f:2b:b0:cb:42:ab:c5:4f:
                    08:ef:c8:e8:26:55:33:4c:4a:e9:a1:50:fa:83:19:
                    1b:3b:ac:e3:8f:c6:c7:7a:64:78:ec:a8:58:4a:1a:
                    dd:7b:e2:4c:4d:3d:fb:2e:88:57:19:4d:00:09:ad:
                    4c:8b:49:4a:07:ae:51:1b:ad:b1:94:b9:0e:1d:8c:
                    31:7c:e9:8a:47:74:56:20:24:4d:ff:60:b3:e6:2c:
                    eb:81:f5:57:f5:e3:32:7f:98:e9:5c:db:c3:f0:91:
                    56:dc:de:32:e7:ec:96:10:92:7c:66:22:61:e6:4a:
                    97:e2:09:46:46:50:dd:e6:40:19:26:e5:dc:1d:13:
                    8f:97:06:ad:79:5d:45:06:c9:46:c0:d9:fc:5a:b3:
                    6c:9a:6e:13:ce:9e:e9:1c:21:f6:8c:f7:8e:6d:e0:
                    59:7b:68:d3:2f:0d:d4:f6:ec:5b:7b:c6:a0:57:dd:
                    f8:87:86:1b:73:00:8d:49:a9:a6:2e:08:39:72:66:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:A6:30:15:2D:49:C5:8B:DE:38:12:A1:BA:23:FA:36:A3:F3:48
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:99:88:d0:90:64:ab:53:72:9c:7c:76:13:67:12:70:af:
         6c:3c:57:90:09:86:6d:e6:07:c1:70:30:28:e7:42:8b:90:e8:
         5c:69:c7:11:38:64:69:70:df:cc:2e:c5:da:bd:43:28:b5:e8:
         01:39:41:62:5e:9f:1f:e5:f4:c5:3f:24:02:11:10:7d:07:cc:
         e4:2d:bc:98:35:47:24:e0:79:f5:64:41:c9:33:4a:4a:0e:0e:
         9b:99:c5:54:5c:3d:89:5b:0d:58:12:4c:dd:64:55:38:e5:7f:
         81:00:48:0e:57:8d:5d:31:b3:8b:bc:c6:97:52:78:08:08:27:
         65:38:71:81:1f:56:f7:52:79:9f:25:1c:fe:30:ed:6a:ce:a2:
         1b:a3:48:28:ba:07:c3:a5:38:8f:9a:28:3d:74:02:2b:38:74:
         60:12:2e:86:02:b2:06:8a:d5:04:a9:20:40:1b:91:0d:73:b0:
         5b:fe:a4:68:cf:28:8b:b4:c8:2c:5d:31:bf:af:2f:02:02:de:
         34:e2:e8:15:f7:6a:39:a8:b2:42:3d:75:49:c7:7b:3a:b6:95:
         69:b4:3b:3d:19:be:af:de:3c:6c:23:06:07:fc:96:b9:12:e3:
         ad:be:22:d2:d5:46:b9:7e:88:58:50:3f:55:2e:04:c2:98:85:
         4d:33:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:20 2025 by rpki-client