Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier:          ve2yl/9N4aW1fVOTfLYTwjm5CKDFC65+Nx+Ho126ZzI=
Subject key identifier:   AA:12:3C:6D:D0:85:CE:96:DF:40:93:2E:E7:95:CD:37:A7:CA:B9:AD
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer:       /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial:       0198D54E0B1293D2EDBE6152B766FE84A2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 05:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:58 +0000
Files and hashes:         1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
                          2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: fH4zQvaGyCgGhLamLRudhKf29QTMOSuMqEkYKsfEaWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:0b:12:93:d2:ed:be:61:52:b7:66:fe:84:a2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Validity
            Not Before: Aug 23 05:01:58 2025 GMT
            Not After : Aug 24 05:01:58 2025 GMT
        Subject: CN=aa123c6dd085ce96df40932ee795cd37a7cab9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:01:56:b1:b7:89:78:a0:95:d9:a8:80:47:
                    c1:ff:cf:ef:6a:d3:ce:b3:5c:84:34:0a:5d:50:54:
                    02:40:68:e7:42:5b:17:ad:97:d5:d1:ea:f9:c5:35:
                    a9:96:bc:11:10:64:bc:d3:27:a8:7d:7b:d3:43:e6:
                    ee:f5:24:94:98:67:a0:b8:9f:19:8b:cc:84:ad:6d:
                    47:96:2e:7d:c3:e2:f5:8a:0a:94:20:29:21:5f:85:
                    21:b3:9a:9f:4a:b0:51:5b:4f:46:4d:16:dc:60:09:
                    cf:36:23:4a:ef:36:94:a1:fb:48:b4:94:6d:e2:69:
                    e6:47:8b:17:8f:cd:3a:dd:77:8b:be:b4:81:d1:b1:
                    40:2b:90:eb:dd:df:5b:15:ef:4f:9a:ac:6f:1b:60:
                    ac:dc:a8:d3:c8:7d:f2:fe:ca:aa:0e:11:a1:63:bb:
                    b2:e7:96:d0:7a:f8:55:a1:ec:6f:99:b4:77:2a:cf:
                    c0:f7:0c:95:c5:ac:08:9c:9c:3b:bf:97:de:f9:93:
                    55:73:03:27:c0:8f:62:ca:d3:d9:bf:ef:87:0d:42:
                    ab:95:74:d5:f5:18:49:23:a3:f5:4f:98:14:48:b0:
                    53:ea:6b:c8:86:0d:7e:d5:48:56:ce:2c:a0:75:c6:
                    4f:98:bb:03:f6:b8:90:8b:5e:95:fc:e9:ec:f0:60:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:12:3C:6D:D0:85:CE:96:DF:40:93:2E:E7:95:CD:37:A7:CA:B9:AD
            X509v3 Authority Key Identifier:
                keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:4b:2d:9a:2c:fe:71:f7:ac:34:c5:1f:90:87:1c:60:b7:
         1c:d3:b3:01:74:08:0b:ee:86:65:c3:93:89:da:a8:57:fe:11:
         90:b8:48:b9:8f:a0:fb:37:1c:ed:cc:3b:47:4e:47:06:bd:35:
         c6:cb:ee:0d:18:72:00:0e:70:85:f7:ab:a4:5d:b1:72:cb:de:
         a5:91:1e:c7:e1:e6:a9:40:86:31:2e:cd:0a:7a:4d:05:e1:c5:
         4f:4a:9d:ed:38:11:36:d6:a6:b5:0b:ff:45:df:74:9d:d3:8e:
         57:2e:ef:5a:93:90:eb:02:d3:60:b6:82:6d:24:e0:73:11:f5:
         f7:d9:18:73:d9:c1:72:34:37:8c:45:5e:78:3a:82:7b:53:6e:
         3d:fd:c1:b9:fb:c7:20:c7:4d:69:06:04:cd:87:3e:1d:ce:78:
         d5:1f:f5:ef:ca:e4:a2:34:d1:80:7c:31:5e:6b:a0:df:59:74:
         b0:d2:11:b8:21:55:17:ec:f2:ed:9f:8f:42:ea:95:de:88:8f:
         be:df:83:b1:cd:aa:5e:e2:fb:ab:b5:1c:76:b1:5b:3a:38:b6:
         8b:e2:d7:d2:54:34:c6:e4:3a:08:b7:33:b4:13:2b:1f:ca:0c:
         e5:b3:48:3e:75:4d:69:fe:8a:b9:14:24:6b:cb:31:22:4c:36:
         3a:1c:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:52 2025 by rpki-client