Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File:                     djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier:          SzwaoUVcJSCuFY6HVPPLiEQdGDAnLnNoODpMrF/jMdA=
Subject key identifier:   C5:AA:5D:98:D1:DA:24:A5:86:CF:2E:BE:90:F2:74:FE:96:50:A3:B6
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer:       /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial:       0198D515D87EE639D1C5FE8FAEEE442CFC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 04:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:35 +0000
Files and hashes:         1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: TQ/n5zAX0pJIgf33Vcos9yS9bWID38HLkT/FwzOmH0s=)
                          2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:d8:7e:e6:39:d1:c5:fe:8f:ae:ee:44:2c:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
        Validity
            Not Before: Aug 23 04:00:35 2025 GMT
            Not After : Aug 24 04:00:35 2025 GMT
        Subject: CN=c5aa5d98d1da24a586cf2ebe90f274fe9650a3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:76:8f:3a:9d:cd:9f:af:30:64:fd:a3:e2:
                    ed:ae:eb:c6:55:43:16:76:0a:b2:7c:ba:cd:17:60:
                    12:56:3d:1f:40:b4:c6:bf:b0:6d:fa:6e:ee:ac:72:
                    54:bd:41:86:c2:b2:6e:4b:0d:cf:82:5b:b0:c3:ad:
                    b6:76:12:b6:17:f8:d6:59:ea:47:78:51:e4:c9:fe:
                    31:fa:a5:31:90:e0:83:d8:68:cf:1f:04:ee:1e:22:
                    73:39:f1:51:18:23:d1:32:81:10:71:7f:6b:38:8e:
                    bd:21:0c:d7:e4:f7:42:ee:0f:d2:b2:f7:0f:0b:89:
                    6e:9d:83:b3:22:62:fd:a8:bd:ba:50:72:f0:3c:c2:
                    d0:68:68:1d:1a:57:01:84:7e:d7:a2:af:1b:6d:f1:
                    89:71:18:52:cc:eb:4d:ee:21:7e:c3:ff:46:71:85:
                    14:44:07:8a:c7:8b:0a:3c:ef:c2:86:c8:a8:f9:2f:
                    8d:29:dc:20:47:44:73:bd:02:f4:28:20:f2:1f:48:
                    23:b3:cd:9b:54:e5:b6:a0:c0:8b:ee:9a:a9:84:14:
                    ff:2e:65:ab:f0:5a:59:79:42:40:1c:7b:a7:55:c9:
                    fc:fc:39:2f:9f:73:79:6c:d7:de:c2:dc:ba:8d:df:
                    d6:24:7d:32:20:e3:e4:fa:f0:cf:8b:ee:95:a2:ea:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AA:5D:98:D1:DA:24:A5:86:CF:2E:BE:90:F2:74:FE:96:50:A3:B6
            X509v3 Authority Key Identifier:
                keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:5f:52:0c:bf:e1:e2:16:45:41:6d:76:f1:88:d4:95:2a:
         f4:d3:f1:a2:fe:f8:ea:d6:77:f1:fa:6f:1c:64:2f:f8:7e:f4:
         5e:0d:33:a0:23:d3:77:04:ab:e3:66:2a:22:da:2c:59:cf:61:
         57:47:b9:47:e6:12:98:69:1e:61:7b:63:42:7e:87:ad:3d:b7:
         f5:3d:9e:ca:dd:2c:65:c8:12:68:34:69:d6:82:fc:be:31:fe:
         07:56:56:8a:e1:5f:fa:fa:12:29:45:58:8e:22:08:b1:0a:f9:
         9a:44:c8:1b:6d:09:12:38:01:93:67:86:4c:cf:ba:e0:61:96:
         c8:f8:d8:bf:f5:e8:44:64:3d:87:99:f3:46:df:83:87:04:2d:
         e9:b8:f7:c1:ad:f9:38:c8:c3:c1:50:be:c7:e8:16:d7:81:c6:
         96:00:31:27:f3:4a:f6:46:02:d1:cc:a1:e6:6b:c1:ef:4d:60:
         47:a3:af:5f:cf:af:5e:b3:c0:92:31:16:1a:02:5a:6c:ce:cf:
         cd:ea:b4:1b:5c:f3:46:bd:4e:fe:53:22:d6:42:f1:b5:59:0b:
         aa:79:6b:77:f8:a0:05:c3:9f:33:f4:c7:92:87:56:94:35:fe:
         9b:83:41:0f:38:e7:2a:33:ce:c5:17:1a:a8:f3:6f:2f:23:3e:
         69:e9:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:08 2025 by rpki-client