Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          Vcm5074AYPwGPc1WPvtfuC3d/e+0RzxXU4eUinz9L4g=
Subject key identifier:   19:90:22:10:82:95:82:D7:AB:86:85:A1:22:22:7A:A6:1F:5B:4A:44
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       0198D472CEDB3388559CADFBA8F5FD0AAB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:30 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: 7puBIwmFySUizk3bhSS47NMrYAkh8LcyfzsxJQocWRM=)
                          2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
                          3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
                          4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:ce:db:33:88:55:9c:ad:fb:a8:f5:fd:0a:ab:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Aug 23 01:02:30 2025 GMT
            Not After : Aug 24 01:02:30 2025 GMT
        Subject: CN=19902210829582d7ab8685a122227aa61f5b4a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:11:05:89:bb:8c:3c:27:06:7c:e2:0c:a4:
                    ef:ac:c9:86:b4:b5:27:aa:03:e5:20:4b:4d:5e:e4:
                    0c:90:69:b8:01:be:ab:a7:5d:e8:bc:6e:ac:7f:af:
                    84:86:8f:55:ae:7a:7b:7b:b2:ff:74:2f:c1:c0:9c:
                    21:f4:8a:cf:f1:96:d4:45:3e:ce:f7:27:2e:f4:af:
                    7a:66:d9:1e:df:59:78:32:53:da:cd:47:a6:a5:b4:
                    ba:96:93:4d:93:f6:5b:9a:3d:04:cf:9c:20:f1:28:
                    bb:6b:f8:bc:fb:c7:6e:34:44:7b:e0:94:f8:55:ea:
                    00:15:b4:e1:ae:0d:15:01:3e:a6:3b:31:88:5c:5f:
                    5c:48:e9:81:20:bc:03:5f:de:78:61:91:66:8b:f5:
                    ec:32:67:f3:6e:47:31:51:6e:ec:e8:ec:bb:2e:c8:
                    8e:a7:cb:44:b6:93:28:ba:0b:ad:0a:d2:80:af:64:
                    1f:66:04:2c:49:b5:b6:29:7a:77:83:c7:1a:bf:cd:
                    d2:67:ff:55:99:a5:1b:e4:11:f6:ca:2e:b9:ae:65:
                    fe:7c:6e:5a:70:66:15:ed:a0:6b:02:c6:7d:11:0a:
                    c9:61:27:9d:c6:78:62:98:aa:33:6e:6f:7a:af:25:
                    49:be:59:5b:85:ae:d3:73:51:94:65:9e:83:28:17:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:22:10:82:95:82:D7:AB:86:85:A1:22:22:7A:A6:1F:5B:4A:44
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:d1:21:59:c5:d5:a0:f1:3b:cd:14:bf:45:3d:48:46:3c:
         b1:77:14:69:cd:20:5f:9c:28:7a:5e:fe:be:3a:77:f9:55:9f:
         57:2d:2e:c3:a7:70:07:2d:e8:11:20:f0:54:4c:c2:f0:05:40:
         f7:2a:ad:f2:fb:4d:7b:e2:fe:e1:bb:7b:35:e7:94:c2:a3:2b:
         55:52:07:92:59:c3:20:19:c4:10:2e:34:82:49:5e:04:ee:5d:
         b3:f7:3d:f6:7f:18:83:82:e1:d9:fa:38:fc:92:04:5c:d8:05:
         47:a3:25:c6:23:9b:b8:49:fe:d6:f6:3c:79:44:64:df:db:19:
         e5:40:78:b1:a0:fb:d6:35:95:2d:4c:1e:7e:6f:2d:d5:df:2f:
         b9:e8:30:b5:97:37:56:c1:66:93:d0:8c:ab:b9:89:5d:4f:7f:
         34:f9:25:a6:3a:2e:cd:0a:a5:ac:87:0c:b3:00:50:a1:3d:3e:
         9f:32:2b:5e:f0:47:14:3a:d7:ec:28:c6:b4:96:93:e8:f3:50:
         3a:8c:35:50:d6:6a:78:20:33:11:d3:2e:a7:9b:72:c5:4d:b5:
         a0:95:ec:fe:92:05:1f:07:0a:62:bc:1b:c7:dd:91:9b:02:0e:
         c8:b3:c2:b1:1e:55:f1:a1:d3:30:54:53:fc:30:34:8f:ca:ca:
         73:6e:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:42 2025 by rpki-client