Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          xIIF+IvZO31Am60lw0ZxgQzt31r5NTsBcUGnGPYLXsw=
Subject key identifier:   4A:BC:37:04:58:17:D2:4F:39:04:50:05:C5:E6:A9:03:E9:2A:62:9B
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       0198D6983725D14093FEF68569C3E016033D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 11:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:36 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: kAqromXo47HhKXM6FVhYDx47R58Wi91v3IvLxdyKQhA=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: WfSIoxcGiNbq5oGvcE0eiwRzwaI.roa (hash: 4+ITlETEk/svEAAS/Kisuuoh14YPCP7V8PSGJ6x5Okw=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:37:25:d1:40:93:fe:f6:85:69:c3:e0:16:03:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Aug 23 11:02:36 2025 GMT
            Not After : Aug 24 11:02:36 2025 GMT
        Subject: CN=4abc37045817d24f39045005c5e6a903e92a629b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:97:76:63:29:3b:21:42:3e:74:fa:b2:78:
                    12:85:d9:02:e0:86:aa:28:f1:ef:a5:25:cc:4d:d4:
                    ba:65:95:29:71:91:c8:cd:6f:61:2d:5b:fa:de:47:
                    41:10:c9:59:b0:d6:e0:2e:68:53:f4:23:f2:63:12:
                    88:8c:16:28:ef:c7:ce:48:75:0d:a6:18:55:b6:ac:
                    85:59:96:27:5f:bf:20:f9:80:7e:d4:81:97:37:f2:
                    4e:c8:af:be:95:93:b0:16:16:4d:6e:3c:8a:de:97:
                    32:4b:0c:42:85:da:e2:41:61:fe:0f:02:93:38:ea:
                    ce:72:85:91:87:f7:b6:42:fb:37:f1:08:c0:d7:5c:
                    ef:26:40:a9:c6:5b:d8:c4:99:16:d4:4e:e3:86:9f:
                    43:6d:35:1e:1f:8f:23:3c:ba:6c:eb:62:0b:ad:09:
                    8c:4a:5f:09:2d:4b:bd:99:d5:33:71:0b:3f:82:b2:
                    98:bb:2a:64:ea:da:90:9b:55:fd:95:25:13:1c:89:
                    07:f2:c5:60:a9:af:a7:f1:33:bb:51:4a:cf:02:a7:
                    ef:8d:80:07:54:ca:27:1d:66:d1:93:1b:0d:fc:09:
                    5c:7a:c9:5e:31:9c:d9:d0:19:73:95:8b:4c:f0:19:
                    a7:2e:12:5e:13:73:03:9f:b0:6b:81:b6:8f:82:e4:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BC:37:04:58:17:D2:4F:39:04:50:05:C5:E6:A9:03:E9:2A:62:9B
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:2f:b2:f1:26:b9:ac:f1:3a:65:1b:aa:10:f8:dd:47:68:
         4e:f1:c0:4f:51:5a:eb:3d:5f:9d:52:aa:d5:e9:1e:f2:6c:99:
         8f:4a:05:b9:c7:9c:68:bc:29:73:f0:68:ae:96:68:1b:5e:40:
         f0:99:a2:a1:c9:96:76:70:73:41:f4:b7:7b:76:24:03:21:8c:
         c1:4f:88:d3:c3:fb:35:d2:da:0d:4e:62:3d:4a:04:96:46:05:
         5f:8a:d5:05:79:ab:8a:4d:10:ac:61:13:9b:23:74:20:55:44:
         c8:54:6d:2e:77:78:4a:8d:bd:80:52:bb:61:df:ed:d3:f4:6f:
         ce:66:9d:97:28:18:8e:2f:58:8a:9a:64:c0:51:02:7a:6d:1c:
         25:b5:d3:2f:d5:82:16:3a:89:ee:96:31:5d:91:a3:01:ad:ca:
         66:48:ef:33:3c:c1:ab:43:45:f0:80:95:3e:b3:8c:69:73:04:
         4d:2c:77:fd:70:d7:b0:66:89:1f:bf:95:1d:20:fc:66:39:e2:
         fe:ac:67:ed:5a:7f:ca:46:ad:5c:4d:c6:74:28:de:ed:c2:e5:
         a9:54:74:e2:22:ce:49:91:79:42:b2:01:fc:9a:08:c5:58:36:
         5a:d1:99:2a:9c:c4:66:e4:15:bc:f7:a7:c9:06:c7:25:64:48:
         6c:3f:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:06:34 2025 by rpki-client