Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          PfpQwgXf8iSr7084ZudjFx3tDG69Z1ZlGtCGWc/UxDs=
Subject key identifier:   E7:0D:EA:10:B3:61:C5:B6:1F:29:07:F1:35:82:2C:2D:88:F7:D7:9F
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       0198D6298FC947F4003037E5332B42AA64A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: iucaAJPV+ADc/wP914sYIibl24kUCjEI7oTnxIErwmw=)
                          2: _Iiv0K8HtxNOiK-4RlHFx1wKlbg.roa (hash: FdNGdivbErVK+wy3cLN3R/5P7Vdb7XC+9BhTqtmgBiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8f:c9:47:f4:00:30:37:e5:33:2b:42:aa:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=e70dea10b361c5b61f2907f135822c2d88f7d79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:7e:e5:2f:01:3a:89:2d:cd:ce:83:a6:01:
                    c1:60:a8:c6:d1:01:e1:53:27:e0:ca:99:74:ef:a0:
                    ba:36:fb:c9:01:80:90:69:07:c0:34:a0:5c:90:f3:
                    3f:7d:56:eb:33:b7:16:c2:fc:5f:f7:c0:6a:6e:ae:
                    c4:d9:a5:d6:97:c8:63:ae:c1:d6:bd:03:b9:1f:f5:
                    b2:47:ae:4d:be:68:74:94:4c:d0:1c:59:1c:d9:20:
                    a4:22:01:4e:86:ea:38:26:4a:c7:de:bf:38:e7:40:
                    e2:44:45:e1:fd:c4:3c:43:53:a6:71:87:72:66:15:
                    ad:80:26:03:b9:7b:45:e2:00:b8:70:2e:06:f8:fa:
                    53:56:4e:92:42:a2:6f:17:ae:42:40:d5:0c:6f:08:
                    81:ca:b8:1c:b9:18:2b:21:ce:1d:b9:10:e9:ac:c2:
                    9b:ea:45:20:9d:7e:1e:2c:28:81:22:62:ec:ec:4a:
                    b1:11:b7:19:3c:fd:18:e4:55:ec:f8:de:bb:83:05:
                    08:f2:98:8b:7a:27:82:c0:96:11:30:24:65:89:cc:
                    19:0c:eb:d8:e5:87:ff:d1:e7:e2:05:f8:53:97:42:
                    64:f8:9e:6e:cf:ed:77:35:bf:c9:45:d6:12:28:eb:
                    08:b4:1b:90:04:a0:73:3e:c1:22:36:9d:0d:d6:2c:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:EA:10:B3:61:C5:B6:1F:29:07:F1:35:82:2C:2D:88:F7:D7:9F
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:19:96:b7:bc:19:75:bd:93:1c:98:08:e7:2d:5e:36:cf:e8:
         ac:a3:ce:5b:3b:51:8c:c4:fd:da:6a:b8:67:b5:bb:99:53:7b:
         14:96:ca:81:72:a1:d9:ad:de:b0:0b:3e:32:37:6d:7c:ee:f5:
         66:cb:5e:c9:9d:a6:01:f6:5b:c8:27:95:52:4b:c0:f4:14:9f:
         6d:9f:b8:b9:b2:40:8f:e8:70:2c:90:88:c1:2e:8b:04:7c:be:
         9f:28:0e:52:ba:03:99:e9:9a:26:5f:82:99:15:47:4c:8c:4e:
         27:20:06:3f:da:73:0a:41:49:52:97:5e:6b:e4:cc:e8:85:5c:
         01:dc:ac:55:ae:ef:ed:78:aa:37:1e:0f:96:c2:c4:fe:d6:b4:
         c2:cb:76:ec:90:a4:99:c4:e4:0b:bb:70:7a:3f:52:eb:c0:3c:
         8a:e3:48:9b:2d:a4:c6:62:57:e7:3e:6c:d2:fc:bc:aa:e3:b8:
         4c:8e:fb:94:20:97:f3:b0:5f:fc:d5:d0:4f:dd:f8:bb:ba:16:
         35:00:76:cf:e6:29:e5:ff:c9:f8:be:cf:c1:6b:a6:64:7a:03:
         58:82:8f:6c:64:3f:1e:d8:65:04:0d:2e:b5:6f:bc:34:71:61:
         5b:cd:7d:32:36:b3:f6:29:19:cd:c2:75:3d:c0:13:5a:12:99:
         f5:a2:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:24 2025 by rpki-client