Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          HW+KepmITpf6sQiDLG4/cQbpQDq3uxmKLmwkP4K6tm0=
Subject key identifier:   DA:FC:24:E0:90:61:19:38:A3:2E:C5:5D:91:47:30:65:8A:C6:11:0D
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       0198D54DD3DC6DA7F30BAAE360AE11E91EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
                          2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: W3GI+ZSFzuenhM2Zd8fjg6W1unWACePp6g/9YDdDOdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d3:dc:6d:a7:f3:0b:aa:e3:60:ae:11:e9:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=dafc24e090611938a32ec55d914730658ac6110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:ba:bb:91:05:63:c8:cf:e0:eb:58:91:a2:
                    69:24:46:0c:db:81:53:cd:36:a1:26:06:53:cb:02:
                    79:9a:00:20:8c:97:53:4d:0d:fb:f6:29:e8:a4:a2:
                    a1:fa:33:90:15:65:fb:de:92:80:3d:8a:00:d6:ac:
                    ba:e5:3b:34:de:10:7f:0c:02:01:6a:7c:97:26:cf:
                    77:f1:5e:8c:d8:a6:54:9b:0c:4c:2c:4d:95:62:b6:
                    01:67:11:91:ba:14:2c:8f:9e:16:58:5d:4e:21:04:
                    83:c3:b7:39:a6:5f:ad:c5:dd:af:cb:3e:cd:7c:2b:
                    74:2d:98:5b:37:fc:58:fd:29:12:0f:81:bf:1a:b3:
                    48:77:42:70:2d:4e:21:96:ea:98:09:08:30:3e:15:
                    2e:c8:7c:02:29:f8:de:33:1b:3b:bf:03:87:68:fa:
                    b4:b7:07:95:10:c7:aa:cf:85:75:fb:b8:15:cc:f8:
                    21:34:29:25:fc:aa:6d:ed:a9:7a:df:b6:7d:5a:46:
                    94:8f:cd:41:20:3e:2b:c0:9b:47:d4:a5:4b:1c:c0:
                    81:1c:22:0c:dd:6f:03:d0:90:f9:cb:15:26:e2:7d:
                    a4:fc:2c:ef:c1:a4:e7:79:87:88:7a:ba:da:89:64:
                    8f:04:2d:fd:b7:87:bc:52:d3:f4:0e:d7:9d:88:56:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:24:E0:90:61:19:38:A3:2E:C5:5D:91:47:30:65:8A:C6:11:0D
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:31:10:84:6d:8c:55:0b:76:be:42:55:49:83:a0:9b:cc:
         88:6b:3d:c1:9c:cf:bd:04:0f:e6:ce:16:86:ed:04:d8:1f:d3:
         e6:09:0f:cf:91:26:01:ef:cb:84:ad:84:17:c6:11:91:95:61:
         de:cd:67:66:34:d2:8e:74:f2:e4:2c:55:cd:bf:bc:2d:55:b4:
         06:9f:7a:63:da:7e:a0:15:f6:d3:a7:75:66:28:9f:04:51:9e:
         61:0b:58:64:96:b6:6e:61:21:00:1a:5d:bb:70:e8:3f:70:61:
         4e:73:b5:7b:55:0b:ba:b0:4c:90:f8:30:13:07:6b:e3:08:5f:
         da:6c:a0:d8:42:d8:4b:4a:a3:b6:50:a1:54:24:7e:71:a2:77:
         aa:67:0d:c5:84:22:f2:3e:a3:40:27:d3:52:aa:54:77:78:99:
         67:ba:23:9a:21:9d:0e:cf:0b:39:e6:f3:b6:01:a1:05:f9:f1:
         c3:27:1a:57:75:ca:69:96:51:9f:a4:f0:be:1c:a1:c7:0d:76:
         22:c4:e0:83:09:23:78:d7:b5:a5:fb:ea:78:ad:82:5f:9a:a1:
         0d:6d:b3:c6:1d:e9:bc:21:58:b2:0e:24:b0:44:4d:04:f0:ba:
         3e:89:86:4f:08:15:e3:1f:6e:6d:41:19:85:88:cf:73:db:90:
         00:8b:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:36 2025 by rpki-client