Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File:                     dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier:          N7TUFBqfPHOYtckkw/Fhu5WQlYl2R4FNDt3CGwtNBvk=
Subject key identifier:   7B:6C:28:87:1B:B6:0B:DA:17:0F:A0:F5:34:83:EA:95:DF:11:0B:64
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer:       /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial:       0198D515E4FE83248D22B71290CDFE766EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:38 +0000
Files and hashes:         1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: WOz5esUIQYl4LhH4fbry1kUqedCbp/Lk3EZfvDrp6OY=)
                          2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e4:fe:83:24:8d:22:b7:12:90:cd:fe:76:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
        Validity
            Not Before: Aug 23 04:00:38 2025 GMT
            Not After : Aug 24 04:00:38 2025 GMT
        Subject: CN=7b6c28871bb60bda170fa0f53483ea95df110b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:75:b9:99:3e:20:14:5e:83:e0:15:80:76:
                    a5:19:49:7e:f6:b5:32:5b:cb:8b:84:50:74:73:6a:
                    26:16:56:37:2b:46:c0:51:13:91:d9:36:1e:c7:1e:
                    98:d5:55:ac:bd:14:65:ae:de:eb:22:36:c2:3b:50:
                    b1:6a:c2:03:16:8f:19:7e:7d:6a:f0:b8:e6:0d:ac:
                    8f:d6:cf:20:c6:45:7a:a5:bd:b9:60:70:08:71:27:
                    cf:f4:e3:09:f1:61:5b:e6:44:84:77:6f:62:12:3c:
                    e3:81:7c:5b:83:f7:da:20:c1:0d:23:39:b9:27:48:
                    fb:80:cd:1b:14:26:69:02:e2:06:0d:f4:3e:0f:65:
                    81:e8:e3:1c:48:d1:10:1b:fb:06:f1:3b:2f:dc:be:
                    b1:45:42:5f:b5:c3:7c:26:d2:ff:bf:fd:1a:1d:a6:
                    d7:34:36:8c:8b:33:46:6e:df:4d:e2:a7:54:52:71:
                    4b:c2:67:c7:cd:b4:0d:22:38:f2:6e:49:82:05:06:
                    10:5b:7e:ac:14:b4:f5:25:32:70:31:f8:8f:42:47:
                    a7:6d:1b:2e:da:36:ba:f4:0c:85:5b:11:9e:5c:7f:
                    be:51:91:6b:1a:a2:8b:00:3c:60:07:62:f9:37:90:
                    a6:dc:9f:7b:a1:21:bc:78:7f:35:0c:30:ed:4c:f8:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:28:87:1B:B6:0B:DA:17:0F:A0:F5:34:83:EA:95:DF:11:0B:64
            X509v3 Authority Key Identifier:
                keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:36:04:68:b9:bf:67:a1:fc:02:04:4e:07:91:35:86:7a:de:
         df:60:20:29:b4:bd:a2:12:a2:90:8d:ce:66:f2:ec:94:4e:d5:
         f0:38:fd:6e:51:39:3d:97:0f:54:fd:bb:9a:9a:cc:b6:ed:21:
         f3:97:38:1f:01:72:2f:d2:5f:9c:5a:49:37:61:8f:69:71:22:
         68:ed:cc:f3:eb:c9:c3:dc:5f:73:64:89:86:aa:d3:44:e2:34:
         b2:8d:d5:a1:78:c0:e4:52:6d:5c:25:8b:57:82:d7:6a:ce:1d:
         da:79:ef:77:6f:92:cb:5b:b2:20:ef:0f:a7:b2:fe:c0:5a:93:
         c9:1f:0b:65:70:c3:af:45:8c:2e:2f:b0:91:f1:a2:fa:9d:e8:
         3f:9a:86:6d:dc:8f:ec:01:0d:22:fa:71:20:fc:b4:db:00:45:
         ae:87:d2:94:a0:f2:a5:dd:a3:5e:c5:6b:1a:79:90:15:4e:62:
         11:e9:5f:66:5a:55:b5:bc:06:96:61:87:07:d9:0b:a7:68:58:
         85:33:7c:2b:b4:67:51:a7:5e:a8:bc:a0:07:38:c0:c3:0b:07:
         51:b1:10:c4:f1:2a:3e:7a:cf:1d:5c:3b:f8:de:ff:8a:ed:93:
         1f:06:31:1c:8d:4f:97:1d:27:d8:c6:27:97:53:2d:e5:c3:19:
         21:87:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:58 2025 by rpki-client