Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          3Jc5yDZwlPT883/rQAJmCQnQ9ap6pk9epB4Gkzcxvk8=
Subject key identifier:   4B:18:2D:B1:35:09:A8:F8:C5:9B:7D:D0:CF:9E:F8:B4:63:76:81:C6
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       0198D5F1319F30108E68A051DD0A5A3D6635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 08:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:10 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: 7hvJuZzZjx3JbXfBl8Rd0yawOUVoy81KdCo7tCmfv5E=)
                          2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:31:9f:30:10:8e:68:a0:51:dd:0a:5a:3d:66:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: Aug 23 08:00:10 2025 GMT
            Not After : Aug 24 08:00:10 2025 GMT
        Subject: CN=4b182db13509a8f8c59b7dd0cf9ef8b4637681c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:25:48:19:7f:47:18:53:92:39:b0:71:c5:
                    f8:99:f2:56:4b:ec:4f:af:44:4f:af:61:23:85:99:
                    40:63:77:cf:75:28:b1:54:1d:11:71:f8:19:3d:1e:
                    08:77:7f:59:d3:aa:2d:4d:19:f6:78:d0:50:82:0a:
                    af:92:b7:df:c4:04:4a:91:a4:cb:c5:7f:81:86:c4:
                    3a:1c:0f:7b:dc:6c:9d:65:31:1a:d7:4f:06:40:e1:
                    b6:fc:e9:98:6e:32:ad:e4:5d:8e:f7:a8:f2:63:77:
                    c5:0b:71:99:3c:4a:70:36:df:d1:fa:b5:54:f0:6f:
                    19:99:df:ff:bb:09:81:c1:f4:88:ed:e1:d9:1d:54:
                    eb:a4:95:20:ac:9e:a0:25:45:b9:76:af:a3:dd:3e:
                    65:d5:72:e8:fd:8a:9a:35:f1:c6:0a:9a:cc:f4:c7:
                    2f:6b:16:c6:6f:b6:02:49:44:d1:3c:a9:35:33:5e:
                    3f:89:4b:a8:1e:4f:07:fa:46:47:4e:60:df:7d:8d:
                    25:ac:cb:8a:43:e7:0f:eb:94:6c:a1:09:ad:84:32:
                    4c:c9:8c:6c:69:12:d5:19:ff:e7:de:df:51:a8:20:
                    31:39:a2:6d:f3:df:63:ab:80:77:80:d0:9c:b4:07:
                    45:ea:2d:ec:cd:7e:1d:ae:c6:19:98:77:d9:40:e0:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:2D:B1:35:09:A8:F8:C5:9B:7D:D0:CF:9E:F8:B4:63:76:81:C6
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:75:f4:d2:f7:00:43:5e:8b:d9:64:ec:5a:2b:73:f3:c8:65:
         18:d1:cc:91:a9:a4:38:3e:41:dd:84:65:13:f2:53:d8:45:30:
         96:9d:8c:c7:9a:f1:e5:54:33:18:56:e1:13:01:3f:6b:04:b4:
         c0:9c:7f:81:b1:4e:aa:60:c9:da:24:2e:96:b2:9f:0f:c5:ac:
         7a:fa:8f:50:fc:86:4a:92:85:e3:28:b5:74:03:5a:04:6b:b9:
         28:8f:67:d1:a5:d9:9a:7e:c5:1d:f0:fc:9a:88:53:a1:45:86:
         d5:fd:77:05:8a:8d:d9:49:29:e5:e4:04:1d:e2:72:3c:f1:d3:
         81:5f:18:41:0c:f2:26:cb:2b:d4:ee:94:3d:e1:8b:a2:16:d7:
         01:9f:6e:4a:fb:ce:a0:39:62:3b:b6:66:33:74:58:27:a0:ae:
         3c:c0:19:5c:63:fa:ac:af:2e:fe:88:6b:c3:d4:6a:76:80:d8:
         e9:74:36:26:4d:a8:3c:b6:53:05:8d:6b:1b:7b:2d:59:b7:3b:
         90:d1:6f:1b:ea:b4:7b:fe:7a:70:15:45:ec:20:f2:5f:82:32:
         58:a5:21:69:cb:ba:ae:32:6d:10:c1:f6:1e:5b:4c:e7:5c:5a:
         f1:3d:2b:9d:12:2a:7c:54:05:88:49:a5:37:b8:4e:5c:2c:9d:
         91:e0:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:18 2025 by rpki-client