Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File:                     m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier:          LQOCp+ZRIVlB2lK5Gtprfer85KArruYdOyhvAy5mIdE=
Subject key identifier:   45:5E:32:8B:82:06:91:3C:EC:96:C0:2E:0E:C5:10:46:6E:24:BB:85
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer:       /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial:       0198D5F1582DD4C062599FA32FEC819B46E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
                          2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: yaquHe9a/S3hKwRIkJlyuEmC1OF4WH/kfjFM8w1khxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:58:2d:d4:c0:62:59:9f:a3:2f:ec:81:9b:46:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=455e328b8206913cec96c02e0ec510466e24bb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:1b:f1:07:6b:f0:5d:a9:f8:be:7f:a0:70:
                    44:6b:0b:f7:c8:1f:6e:fd:5c:11:88:1f:3b:35:d6:
                    ae:f5:ec:19:3a:3f:88:ce:17:0a:87:54:d6:20:0c:
                    8a:56:46:71:cc:fb:12:7c:44:d8:a4:a7:d2:52:f5:
                    46:ce:99:41:97:08:5a:dd:39:e6:01:1e:50:30:52:
                    0b:f2:09:a7:3c:66:e4:d1:30:1f:cd:ce:8b:50:20:
                    e6:36:7b:b2:b0:c4:4c:83:3c:66:84:e6:f1:82:dd:
                    1e:4e:c7:1c:c3:53:c7:ee:db:36:21:3d:e5:1c:71:
                    d4:3c:91:df:d5:7d:ca:a6:35:ec:1c:42:05:8a:7c:
                    cf:d5:17:94:56:69:26:62:85:58:4f:74:de:9d:25:
                    8a:4f:b2:d2:67:dd:a5:ae:d6:24:96:44:a8:0d:ff:
                    6b:c8:3f:fe:94:57:37:1d:ca:fd:09:d1:f0:d0:19:
                    d2:fe:51:d4:1a:71:2c:46:ec:a4:12:ae:34:a7:d8:
                    1f:eb:11:3e:c8:cc:c3:e4:a4:b4:54:c9:df:73:9a:
                    d9:f0:d1:53:41:2f:df:b0:b0:f3:82:b4:a1:79:63:
                    5f:84:71:a3:ae:36:64:79:57:7b:a6:ac:8e:0a:ca:
                    33:e4:29:b2:e6:42:a8:df:b3:a7:0c:6f:2c:db:fa:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5E:32:8B:82:06:91:3C:EC:96:C0:2E:0E:C5:10:46:6E:24:BB:85
            X509v3 Authority Key Identifier:
                keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:46:fd:83:ff:7c:a6:16:6c:f7:4a:ef:05:53:00:5c:70:19:
         fa:48:0a:f0:e9:57:31:e3:2c:16:cf:c4:b2:fe:2d:e4:c2:8b:
         7a:3d:1d:5c:86:e7:c0:7f:37:4c:af:f8:f7:de:23:b5:61:e5:
         41:96:e7:9d:90:cd:2e:69:b5:47:a3:53:27:97:2f:85:5d:31:
         54:16:a7:e6:91:7b:56:98:7f:06:cd:43:cb:b3:9b:19:32:d4:
         66:ff:f2:f5:ba:1f:e0:82:8f:4e:35:89:29:cf:4d:a6:4b:1f:
         93:05:33:3d:e1:cf:5d:24:93:08:4c:79:bc:3c:f3:06:89:80:
         ad:ef:45:1d:fe:4a:49:4c:e7:0f:34:b0:ee:55:d1:ee:3f:db:
         53:22:7d:2a:98:86:75:42:3c:94:34:d5:78:2f:0c:0c:ed:35:
         a6:0a:b7:fc:08:7c:77:91:27:b0:23:9e:f3:fa:3a:98:df:e1:
         12:52:5b:9f:41:3e:c5:47:ef:60:4e:7f:c3:6c:cd:9f:d7:12:
         bf:21:65:39:be:ec:63:5d:03:ab:69:7b:1c:59:a4:e1:75:5f:
         29:9b:b9:13:31:e0:19:68:f6:3f:66:ff:4b:d1:41:7a:f1:ce:
         24:34:7c:fa:ad:2d:72:c8:bd:7d:6c:06:e9:e0:73:5e:f3:b3:
         4e:80:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:08 2025 by rpki-client