Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          J6vzpNUrh/eeDjYEkwqziFkZrt9Y3HYyP/MOAgwvYkY=
Subject key identifier:   4B:73:CA:60:58:22:43:4F:A0:41:D5:2C:A5:79:49:2B:E7:2D:6C:64
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       0198D54DC39C653C947658F3BFBF7716E1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: khRmxcm60vwDFoyk8OF1XFPn0zsNChtfA1n5bF0UcwI=)
                          3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=)
                          4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=)
                          5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=)
                          6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c3:9c:65:3c:94:76:58:f3:bf:bf:77:16:e1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=4b73ca605822434fa041d52ca579492be72d6c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:59:87:18:ce:56:4b:75:0e:70:19:91:f8:
                    24:3c:39:eb:87:0d:e5:76:6a:65:1f:0c:99:0e:54:
                    7c:e8:e1:37:bc:36:3e:ab:be:83:69:3a:27:84:2a:
                    fd:c9:7e:0a:3c:b1:eb:db:12:08:9b:bf:bc:08:7f:
                    66:c0:ed:e0:6c:d2:e6:15:2b:1f:37:4f:30:b1:89:
                    fe:da:91:d8:8c:27:41:a8:54:b5:22:d8:20:81:04:
                    77:a8:eb:d1:62:d5:6a:58:d2:c5:84:31:b1:b7:68:
                    89:61:35:52:11:f1:ea:56:05:5e:99:58:4c:89:7e:
                    90:05:1a:fc:10:31:ee:be:09:a2:74:f2:46:f5:ac:
                    e2:eb:9f:92:b3:b2:55:bb:52:2d:7f:3e:9a:4b:66:
                    2c:f2:ed:82:2f:23:11:da:d7:2f:a0:e3:9b:aa:16:
                    44:67:52:94:8f:b2:00:55:b2:29:e6:ba:6b:b1:d4:
                    57:5a:a1:03:08:2c:95:e4:75:36:80:f5:63:8c:c8:
                    39:27:70:61:93:bc:45:50:18:f2:77:8f:42:c8:3b:
                    0b:13:6e:1b:49:a9:33:52:61:e5:df:9b:45:1a:9b:
                    0d:06:0a:49:be:a9:4a:fd:9b:8a:4d:d4:d9:0e:30:
                    aa:80:e4:33:4c:44:b6:d6:0c:87:31:a5:01:51:4b:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:CA:60:58:22:43:4F:A0:41:D5:2C:A5:79:49:2B:E7:2D:6C:64
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:b8:24:22:d2:51:d1:bd:71:59:d0:8e:0c:9d:b7:00:e1:
         29:93:89:c9:09:86:3e:d2:10:ce:0b:1b:54:7d:92:90:82:ea:
         76:0f:7e:7c:d6:be:da:79:70:c2:e5:ae:41:42:64:c1:45:14:
         0c:22:ad:ec:62:0f:39:4b:01:18:d8:04:79:b8:89:cb:21:d4:
         ee:07:72:f2:83:f5:46:63:7f:da:cf:35:a3:01:11:b9:38:c0:
         3a:ea:b6:8b:56:98:ee:87:50:5d:b8:07:55:b1:f2:0d:32:33:
         93:17:d5:ca:7f:b8:c0:06:73:09:54:da:21:ea:b0:99:1e:b2:
         29:24:59:d2:12:e1:19:c2:5f:2e:33:d0:14:81:39:89:4b:df:
         54:40:4b:04:48:01:6b:73:e4:1a:ec:84:6e:b0:15:e7:6f:c3:
         0e:b8:d1:8b:00:b4:d2:6e:1a:11:7e:8d:81:7d:d9:dd:e9:2d:
         4f:ea:d4:b6:d2:65:8c:44:46:60:08:69:1a:ac:b4:79:90:52:
         07:73:6a:81:cc:56:55:05:7f:0b:2f:8f:30:c4:cb:1f:ff:cd:
         5b:32:06:bd:78:64:3a:bc:06:06:c7:72:00:4d:26:75:30:bb:
         92:da:f6:74:c2:95:f7:1a:b7:f0:21:9f:a6:48:3e:e2:18:a7:
         2c:12:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:36 2025 by rpki-client