Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          qM+jpQxwK2CrTuR0z+NdHE5es6Tp8gSnJZ4XNlz1YfE=
Subject key identifier:   0E:30:74:57:31:44:74:BE:AE:B4:77:13:C8:FE:5D:78:5E:77:ED:50
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       0198D698579B2FFCBE071F588803CA575C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 11:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:44 +0000
Files and hashes:         1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: KCoFLOJIuAJdML+a6YaqvwmJLG2R7SN43efltMDbAzw=)
                          2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:57:9b:2f:fc:be:07:1f:58:88:03:ca:57:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Aug 23 11:02:44 2025 GMT
            Not After : Aug 24 11:02:44 2025 GMT
        Subject: CN=0e307457314474beaeb47713c8fe5d785e77ed50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:0a:68:d0:e3:43:f4:4e:cd:e6:9e:e0:23:
                    a2:93:ec:75:3a:0f:33:e4:20:52:78:45:bc:d6:27:
                    3a:99:88:0c:8e:8b:7e:ac:a5:2a:75:fb:b7:4e:86:
                    2d:de:48:0e:1e:67:ad:af:59:cf:ed:85:97:4a:02:
                    b4:2c:3d:00:60:db:75:e5:b7:bc:0f:b4:a8:32:59:
                    0f:99:33:f5:0f:5d:e6:5d:ea:f3:ef:9b:d8:2d:6d:
                    f4:fc:77:64:b3:0e:79:8c:9e:db:78:d5:f7:24:1f:
                    0e:1b:88:a1:ad:e9:01:72:09:80:61:52:3b:ae:f9:
                    bf:f8:49:b0:ed:18:3f:93:9d:f8:b9:1f:e0:01:4e:
                    50:45:15:28:34:54:2d:7f:71:87:92:9c:b1:0b:df:
                    c0:50:1e:80:0e:27:54:fe:d9:68:30:45:aa:33:ef:
                    fb:89:86:30:cb:6c:18:30:4f:6f:7d:de:61:f9:c0:
                    0d:43:48:a8:46:e2:9e:24:9f:4a:5e:6d:b3:c2:0c:
                    98:28:4a:ed:df:9f:aa:81:44:cb:d0:d4:f2:01:63:
                    60:b5:96:72:1c:63:8d:24:a5:a0:f8:0a:26:56:c6:
                    06:c2:f1:85:71:ac:a6:87:26:f8:27:fd:6f:46:84:
                    b0:b7:3e:92:0c:e6:07:de:40:37:0e:e8:85:3d:6e:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:74:57:31:44:74:BE:AE:B4:77:13:C8:FE:5D:78:5E:77:ED:50
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:d9:e2:8c:ef:d3:1f:09:38:9e:8d:eb:12:b5:38:6e:69:
         a4:9a:27:32:56:92:57:f0:1f:4e:69:22:d9:c5:cd:a2:20:d3:
         11:80:7a:be:09:22:dd:7e:fc:2f:d9:dc:1b:ad:10:7f:e5:87:
         1d:f1:09:de:b6:16:71:1f:65:17:c3:10:08:de:14:77:5b:83:
         41:a6:33:1e:9e:09:57:d7:31:6c:9b:26:9a:b8:76:5a:61:27:
         a2:72:69:82:8a:50:af:6b:e7:6a:75:93:f5:de:5a:fe:69:8d:
         4a:b6:aa:9c:07:5a:c1:ff:c7:35:ef:1e:bb:86:ec:5f:2c:65:
         48:dd:68:e1:0c:b8:b9:01:34:77:38:e8:17:95:03:ce:ec:76:
         a4:e8:c5:84:19:54:6d:53:b8:e4:23:6e:e9:f1:f1:b1:7b:0b:
         b1:75:8b:0e:02:8b:85:d5:47:d3:85:bc:b7:88:10:fe:8b:02:
         45:cb:a9:35:c0:bc:f9:28:91:16:56:8e:8c:ea:37:a4:09:eb:
         f9:3a:e1:03:1e:d7:b6:61:8e:eb:f2:33:ca:70:ff:38:e7:5b:
         80:c3:42:da:d0:0c:ae:23:26:06:81:fa:03:97:d4:82:b8:9c:
         67:32:68:0d:03:af:5a:d2:1c:d6:ef:e9:a6:31:b6:e3:4d:3c:
         e2:27:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:36 2025 by rpki-client