Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File:                     H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier:          dMe8QAxfgKT9sGFKA7F0AgIBmjBWgvX9RmX9eTxL8f8=
Subject key identifier:   B8:CF:94:B5:4E:B5:4D:3C:D1:E5:00:B9:31:3A:A4:E1:DC:06:B3:E5
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer:       /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial:       0198D5837D9FABC072758929BC052E279108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:21 +0000
Files and hashes:         1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: ubHD3sW0EXWzEC7AnPQca3WcgVfGswacZrytQRcvIro=)
                          2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7d:9f:ab:c0:72:75:89:29:bc:05:2e:27:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f74988332069e1835246a85a1094125152b3765
        Validity
            Not Before: Aug 23 06:00:21 2025 GMT
            Not After : Aug 24 06:00:21 2025 GMT
        Subject: CN=b8cf94b54eb54d3cd1e500b9313aa4e1dc06b3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:d3:df:6d:a4:1f:c0:6a:f6:39:76:88:45:
                    62:a0:db:60:4e:90:96:24:ed:55:8e:65:a8:8a:2d:
                    c1:a8:d7:8f:8c:a8:76:cb:90:a3:a8:e3:2f:0c:d7:
                    21:d4:ad:11:26:db:6f:b0:b6:46:82:7e:ca:f1:62:
                    82:33:6a:82:c4:29:e8:41:a2:3b:22:d9:6d:5a:fd:
                    62:0d:89:6c:e7:05:1f:f8:fd:56:b4:6b:80:50:50:
                    23:bf:1b:f7:c8:a7:d9:ed:99:92:1d:82:9c:21:63:
                    c1:ee:61:32:6b:0d:0a:72:90:51:04:e2:5c:a6:73:
                    1d:1e:25:19:f8:3b:1b:11:53:a8:16:12:29:28:29:
                    85:9c:47:4d:cc:7d:43:54:9a:11:2c:fc:56:8c:5e:
                    07:49:72:73:e9:1a:9f:70:5f:44:04:88:c1:1f:b4:
                    f2:5e:ce:68:52:c1:71:a1:5d:de:3f:a0:f8:d8:f9:
                    8c:0a:c0:e4:e9:e7:00:db:a4:c5:f5:73:72:5b:f4:
                    b0:b5:9f:c0:1f:ac:b9:ff:8a:16:47:e7:2e:f1:27:
                    e3:92:c4:99:52:12:73:9b:ac:e9:38:7a:86:02:68:
                    9f:01:97:f6:17:7b:d3:f5:92:98:56:f4:34:32:d1:
                    c0:ca:3d:cc:b3:b2:95:c8:2d:81:77:42:c8:4e:dd:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:94:B5:4E:B5:4D:3C:D1:E5:00:B9:31:3A:A4:E1:DC:06:B3:E5
            X509v3 Authority Key Identifier:
                keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b8:c1:c0:c3:1e:4c:fd:d8:29:7a:38:71:93:92:d9:ee:84:
         01:bd:c5:ff:21:2f:4e:ac:52:0b:a8:66:50:36:f7:1c:fb:38:
         87:95:b7:10:78:25:ff:28:c4:05:81:88:27:9b:1d:a0:b6:ca:
         f6:60:7f:63:e8:aa:70:20:7f:9a:71:39:c5:f1:97:1f:34:c8:
         1f:0a:e6:41:a4:7d:45:4f:a1:be:8f:37:cb:43:a5:33:69:d6:
         d2:61:9b:1d:97:08:ee:ff:4a:4a:40:73:7f:2b:6e:ea:1e:42:
         88:9c:24:b5:1a:d7:99:73:ab:f9:be:43:f6:4a:3d:82:98:97:
         7e:3d:24:c8:c0:7c:fc:48:78:df:39:8c:e9:a3:ad:2f:9d:2a:
         10:6c:de:22:f7:25:81:d1:80:b9:5f:34:d0:68:53:13:f4:92:
         db:9d:aa:66:ad:62:df:7d:89:df:9b:68:6c:27:70:6a:c2:cb:
         54:ab:61:20:f5:9c:07:a1:4f:e5:7f:bf:be:56:53:39:56:91:
         e0:5a:23:77:1c:b6:3a:b8:b9:c7:21:d1:fb:1f:58:ef:33:83:
         fc:7e:89:e2:e6:3d:40:7d:b1:e7:40:a1:73:c6:49:0a:be:c6:
         53:35:76:e4:9b:af:49:d9:52:3c:47:df:fb:ac:68:2b:fb:e2:
         ba:d9:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:32 2025 by rpki-client