Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          w6Eo7xVDn7FU0QPLdu7LxhFEPcfotH9v3OGLg5n8PLM=
Subject key identifier:   36:CF:74:10:5B:84:B1:45:F7:F3:08:60:3B:4B:38:FD:BB:B7:AB:CF
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       0198D515E9ED31CD56CBA47CD3185051481D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 04:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:39 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: ylP6g1nyciNxSWahFS/53sJ95onQUb4cmKKCiYck378=)
                          3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
                          4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
                          5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
                          6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e9:ed:31:cd:56:cb:a4:7c:d3:18:50:51:48:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Aug 23 04:00:39 2025 GMT
            Not After : Aug 24 04:00:39 2025 GMT
        Subject: CN=36cf74105b84b145f7f308603b4b38fdbbb7abcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:08:57:29:c9:c2:5f:5d:3a:1f:a2:6d:a6:
                    52:e4:01:c2:e7:bd:1d:3b:9b:e1:17:fe:30:9a:aa:
                    54:d7:5f:7b:17:05:21:f7:28:48:c5:98:49:9c:64:
                    69:86:b5:46:17:e4:07:a0:20:a7:e8:77:bf:ad:75:
                    ad:2d:44:6e:9b:41:df:a8:80:c0:4a:34:fd:c0:11:
                    d6:52:f9:c2:f6:dd:d4:66:12:cd:21:53:51:43:32:
                    63:72:59:64:da:26:1b:96:c6:46:79:84:1f:1d:1b:
                    79:87:76:41:56:dd:b8:3d:af:4e:bb:73:d1:bf:18:
                    60:44:75:05:f2:bd:94:71:d8:cc:cc:2e:c5:57:59:
                    1e:fc:57:1e:e8:8d:5f:d6:b4:6a:56:11:24:ce:f4:
                    21:22:2f:cb:02:b0:08:9e:d4:3a:5b:07:b0:dd:c2:
                    f7:d8:33:6a:00:7c:eb:89:27:07:e2:ef:e6:24:5d:
                    7b:00:ea:2f:6f:4d:48:4a:4c:02:96:c3:9f:7c:b3:
                    f9:7a:28:5c:f0:fa:4c:d6:75:07:81:4b:66:08:d0:
                    3f:92:0c:1f:5f:e4:63:35:c2:ff:10:72:94:bd:da:
                    52:6b:66:51:4f:9e:52:27:8c:a8:5d:4d:8a:ba:62:
                    c6:ce:05:2e:72:e8:ae:af:59:7a:5a:73:0e:5e:54:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:74:10:5B:84:B1:45:F7:F3:08:60:3B:4B:38:FD:BB:B7:AB:CF
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:55:6d:dd:dd:92:79:31:20:bb:7f:6e:b6:96:ed:f5:20:04:
         97:28:b9:e5:33:ef:38:88:04:4b:f7:e6:1a:a5:d0:cb:c4:d0:
         be:88:bb:ee:62:fe:6a:85:04:af:68:6d:5f:67:9f:e2:f9:42:
         fe:9f:05:60:e4:0d:10:44:80:0c:5e:36:02:0a:a0:a1:20:16:
         14:ca:90:99:8d:b0:4b:76:30:57:4e:5b:f4:6b:3f:be:14:a7:
         f9:02:c8:68:ef:9f:27:e0:7c:1a:ba:53:38:5e:59:61:35:83:
         fa:2d:63:ed:56:bf:31:87:5b:c9:36:55:90:c5:be:6a:0b:f5:
         ba:73:a6:a7:e7:47:b6:ed:01:40:91:ce:33:6c:be:c2:12:c2:
         d4:0e:3e:1e:e4:2d:a3:15:3e:bd:4a:1d:86:37:0a:bb:c0:52:
         6c:24:a1:1f:3d:85:48:01:b0:e7:9b:04:15:1d:b6:af:14:91:
         1a:9a:ad:e4:10:7e:ec:a2:34:99:d7:29:7a:16:7d:80:67:3b:
         51:54:c5:32:8b:8e:49:8e:c4:e4:3e:99:19:a7:d7:06:6b:96:
         24:af:9c:d9:df:4f:74:14:d4:fb:25:21:7c:77:59:33:2c:75:
         e7:1f:a0:8c:16:9a:00:f6:8b:64:80:50:5e:dd:63:a7:96:b2:
         b5:6e:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:27 2025 by rpki-client