Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File:                     b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier:          TRBkHTT8pgTU/gmUDCjWYHLBTVKArBLcpRhh5DYUt1k=
Subject key identifier:   E8:9D:86:30:7C:5F:A3:9D:02:56:9F:45:D2:E5:5B:FA:73:B6:C0:E5
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer:       /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial:       0198D65FEA8E125D02F506138580EBAE723F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:06 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:06 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:06 +0000
Files and hashes:         1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
                          2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: S4PxEBrmWjcpOC5uB6sAoKfXP57qXyjfMaTVT5N6KYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:ea:8e:12:5d:02:f5:06:13:85:80:eb:ae:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
        Validity
            Not Before: Aug 23 10:01:06 2025 GMT
            Not After : Aug 24 10:01:06 2025 GMT
        Subject: CN=e89d86307c5fa39d02569f45d2e55bfa73b6c0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:13:a9:dc:ae:ba:33:a9:9a:e7:bd:ff:87:
                    20:3e:85:74:c3:a5:8a:15:98:4a:cf:b4:57:10:91:
                    4d:6f:7f:e9:18:47:b5:73:f3:3a:33:1c:a0:d4:77:
                    8a:93:77:05:2f:5b:c3:db:c7:2f:96:b3:68:43:15:
                    13:bc:73:90:31:12:1e:55:50:81:02:e4:f1:cd:88:
                    09:73:2b:f2:e1:dc:56:61:3e:fb:88:c2:8e:17:2b:
                    85:f0:b3:7d:43:ce:d2:57:18:42:16:8a:69:d4:a8:
                    f3:0f:2b:76:88:5e:94:68:c6:66:87:75:c2:41:c9:
                    ae:0a:07:d6:b2:b7:54:ef:4c:8c:e5:93:f1:e5:06:
                    e8:bc:8b:d2:8f:4d:d0:0f:be:74:fb:78:87:1c:e6:
                    44:7e:2f:a0:29:0a:61:a1:84:fc:d9:69:1d:1e:45:
                    a7:2d:0d:7a:c4:2a:45:55:4d:07:37:e2:10:ce:f9:
                    f5:23:79:1e:00:5b:4a:65:ec:7c:b5:59:db:6c:8a:
                    14:58:3b:0c:b4:09:8d:ad:45:39:99:9d:9d:7d:c2:
                    3f:97:aa:c5:87:38:9a:94:d0:fc:58:5b:ef:74:8b:
                    cd:f8:18:16:65:01:3e:09:ed:9c:58:af:55:d4:35:
                    b3:fa:3b:eb:bc:12:4f:7f:85:3f:9a:ff:01:14:e1:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:86:30:7C:5F:A3:9D:02:56:9F:45:D2:E5:5B:FA:73:B6:C0:E5
            X509v3 Authority Key Identifier:
                keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:9a:30:21:a7:19:91:14:f0:5b:98:00:af:32:ad:6c:96:13:
         92:01:b8:5b:21:68:3d:e3:8d:bc:bf:9e:bb:80:26:66:e5:0b:
         ae:8a:8a:ac:e2:b9:5e:dd:15:50:6d:8f:66:df:81:0f:26:71:
         90:02:98:84:76:dc:d2:b3:2a:86:1c:d5:08:02:e9:53:86:22:
         6a:6b:60:06:15:86:6e:8b:47:73:ee:5b:32:1a:24:42:2b:fa:
         a7:e1:e2:1c:7e:ee:a4:07:d4:a2:36:2f:50:c0:a1:4b:bc:38:
         ac:16:6d:a8:8b:47:0c:b0:0c:f6:ef:59:a6:a7:aa:ca:cc:c4:
         9f:ab:33:d0:ea:04:da:27:dd:45:5f:75:ff:87:a9:5b:25:76:
         0b:37:68:0f:02:14:38:96:03:af:6f:f7:83:6c:ae:95:b0:a9:
         84:72:51:28:56:cc:8a:09:13:7b:27:82:0d:ce:b8:f3:10:cf:
         08:8e:bd:a2:83:26:c4:04:20:19:f4:93:21:9c:b0:8e:1b:63:
         3b:3f:1f:7b:58:40:5c:c4:8f:39:3a:a1:e7:16:86:7b:d4:36:
         8d:00:a7:49:01:b7:f9:cc:a9:33:59:ee:2d:79:0e:c8:83:55:
         c5:b6:3f:ac:21:ee:8a:2c:cc:35:72:d8:96:84:44:de:24:ac:
         79:0f:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:47 2025 by rpki-client