Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File:                     m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier:          FWhHsgtTRqDAe9zqfphxZ07wZDbmcdiOeYo/OtJPvW4=
Subject key identifier:   9E:C8:D4:33:BB:A6:F2:65:B5:32:05:01:CD:1B:17:E9:24:CD:1A:E1
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer:       /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial:       0198D706202B09974D70AB2B334326927D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 13:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:39 +0000
Files and hashes:         1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: +IKbSD64SucGhnG1gpWnM1iKzfxzK+zxIgKsofRv0QA=)
                          2: rT8y0BCfTCAABxNQ5qnQez4Fr8I.roa (hash: zR6w/3gh7WRxc5V8iDYO22idpuoYZT3WfKeiyZYkIzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:20:2b:09:97:4d:70:ab:2b:33:43:26:92:7d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
        Validity
            Not Before: Aug 23 13:02:39 2025 GMT
            Not After : Aug 24 13:02:39 2025 GMT
        Subject: CN=9ec8d433bba6f265b5320501cd1b17e924cd1ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:9c:45:d7:2d:1c:e2:d2:f7:29:b7:82:08:
                    66:6d:29:37:a7:f4:5f:f1:26:a3:93:fd:b4:53:af:
                    bf:a8:23:f5:ed:47:64:4b:f2:77:1c:69:24:9b:ba:
                    3c:a4:66:91:c6:08:61:89:38:d8:5f:1c:93:67:8a:
                    fd:ae:80:1c:f2:29:c5:d9:f5:11:9d:c3:f3:1c:a8:
                    1a:80:a2:9b:b6:30:a0:70:4a:da:e6:e2:86:a8:57:
                    3f:96:89:90:eb:5a:cc:81:e0:db:f4:be:e0:ea:75:
                    e3:8d:64:a9:50:22:0c:a9:c6:b1:a3:5d:20:51:72:
                    9e:25:63:d9:e7:15:76:0d:a3:67:1f:0a:ab:74:b7:
                    d7:e3:05:26:bb:4c:96:76:ab:1e:50:e0:4a:8c:42:
                    f3:fe:87:88:bb:0c:87:37:b1:43:af:99:36:91:7b:
                    18:8b:65:c9:dc:65:3a:0c:2e:e4:31:80:77:45:0a:
                    34:73:46:da:72:4b:fd:61:31:7d:ef:50:02:03:26:
                    2e:19:63:59:85:78:f4:76:91:56:9b:02:5f:f6:1b:
                    61:aa:b6:dd:63:e2:c7:c1:6e:f3:1c:32:b8:73:b1:
                    0d:7b:bf:b4:7d:f7:c0:4f:25:e2:cb:cb:91:90:53:
                    66:eb:2a:bf:fe:21:df:86:67:70:51:e4:49:9b:13:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:D4:33:BB:A6:F2:65:B5:32:05:01:CD:1B:17:E9:24:CD:1A:E1
            X509v3 Authority Key Identifier:
                keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:ad:19:8f:6c:bb:24:3b:00:38:1a:ce:33:e8:e8:d5:39:
         d7:45:b3:24:cb:3b:b4:1b:a4:62:0a:dc:4e:c7:af:8c:27:10:
         0c:f1:cb:65:a1:e4:55:3c:ec:f5:79:26:90:b0:eb:65:32:c8:
         b9:2c:9d:80:2e:4f:4b:ab:85:fe:49:e6:03:e5:a5:78:66:e5:
         5e:f2:c0:86:ff:88:44:86:e4:af:6b:a2:25:36:25:af:18:1f:
         2a:85:04:16:81:b6:85:70:4a:4d:a8:ea:96:82:7c:3c:df:46:
         9b:81:47:06:d2:f2:d6:31:a0:98:47:b5:fc:7e:2d:04:16:f0:
         c4:15:4e:c5:e1:3e:20:b9:73:95:6f:06:cf:5d:a6:fd:26:ce:
         78:a1:7b:18:13:bf:92:11:0b:66:e6:37:80:1d:88:f0:d7:40:
         f7:3f:07:83:6a:c6:45:59:7c:39:c2:9b:4c:fa:61:86:b1:35:
         55:01:c1:f6:8b:61:7c:59:13:af:c8:3d:3c:4e:a1:99:be:7a:
         91:a4:42:6d:f1:8b:e1:6d:84:46:ed:74:42:47:85:f8:30:b4:
         55:6f:0b:92:92:cc:19:90:69:19:48:22:67:4b:ea:23:4f:3e:
         bb:bd:89:d5:51:de:9c:15:6a:e7:1b:d4:b2:1a:c1:91:b9:21:
         69:5b:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:52 2025 by rpki-client