Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          uTgqaBBrOStjOr59XESIggPF4KVvQRyA8+oW93ojaYI=
Subject key identifier:   E9:BC:1C:03:02:F3:AF:E4:F4:3F:CF:86:32:99:C3:4A:67:EB:AC:A2
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       0198D6988203B105816F1988F2DD41CD0C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          165D
Signing time:             Sat 23 Aug 2025 11:02:55 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:55 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:55 +0000
Files and hashes:         1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
                          2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
                          3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
                          4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: qcsbpZF8M/mkxUfL/IS4BHfH0n39PPdZju16n8Qj8y4=)
                          6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
                          7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
                          8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:82:03:b1:05:81:6f:19:88:f2:dd:41:cd:0c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Aug 23 11:02:55 2025 GMT
            Not After : Aug 24 11:02:55 2025 GMT
        Subject: CN=e9bc1c0302f3afe4f43fcf863299c34a67ebaca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:a0:12:82:20:57:e2:21:3e:41:18:02:dd:
                    21:e5:99:a1:fc:8b:1b:e8:9b:b2:d1:b9:f8:d3:a6:
                    65:88:63:29:60:db:7c:d8:d4:74:2d:ec:f3:da:7c:
                    cc:10:91:4a:29:1a:89:af:18:c0:9a:67:78:22:38:
                    4a:74:6d:2c:5c:cc:91:83:33:92:b5:33:87:d4:a8:
                    90:ae:6d:09:ab:cf:ca:5c:1c:c7:71:91:40:6f:26:
                    9a:82:02:85:5a:48:ab:e4:22:56:6c:75:92:da:4f:
                    f0:f0:0d:ab:9d:f4:38:e1:18:c4:88:8e:ce:92:49:
                    33:67:33:37:09:a0:15:b6:68:ed:9f:2d:e0:b2:8e:
                    c3:f2:4f:8f:ba:e1:de:84:96:f5:03:dc:d7:03:fb:
                    a4:65:7b:6b:bb:a2:c4:bc:d6:f0:f7:9d:ea:27:f2:
                    6c:c9:09:0a:45:02:9e:50:72:11:68:47:3c:20:e7:
                    1c:42:cd:77:f6:ed:32:e7:57:cc:a6:5f:54:d4:74:
                    00:d9:7a:c6:30:44:db:26:7f:40:f8:04:15:64:24:
                    81:5f:dc:40:10:d2:24:e4:fd:5b:40:20:99:eb:ba:
                    81:cf:ce:3b:89:65:da:1b:fa:4e:49:56:21:27:b3:
                    c9:63:51:4b:5f:2f:54:9b:d7:d4:b6:a9:8c:c0:b7:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:1C:03:02:F3:AF:E4:F4:3F:CF:86:32:99:C3:4A:67:EB:AC:A2
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:f9:a6:13:01:34:c1:51:90:5a:c9:39:c2:de:e6:98:99:
         80:57:ca:fd:41:0c:ee:5d:0b:c4:3a:45:ed:90:08:a4:53:d1:
         8e:6e:08:8d:c4:3f:2e:b8:a4:e8:92:fe:ec:e6:32:7c:de:24:
         9e:a8:4a:01:be:c2:46:9f:f9:f2:05:f1:f3:a9:ef:a8:33:96:
         bf:34:5b:4a:c7:0a:1b:8a:9f:7a:22:35:d2:5d:04:56:bc:1d:
         c3:b6:2d:73:28:fb:67:28:5c:96:1c:67:30:81:20:12:29:b4:
         b0:73:21:a0:01:73:7d:85:3a:b6:54:19:3b:ef:11:c9:fe:cf:
         e3:de:38:61:cd:a0:3e:20:47:01:4d:e7:33:86:8f:de:c3:ea:
         0e:3c:9e:98:b9:06:2f:55:c9:d5:c9:e5:7d:99:1f:4a:42:d1:
         02:0c:a1:b6:38:1e:32:44:43:b4:68:5c:93:82:0b:05:b7:be:
         b3:24:ae:aa:8e:d2:b5:ff:db:d1:bc:2e:aa:99:b2:9e:ed:0e:
         45:ce:04:47:d3:27:74:b9:66:cc:dc:bf:34:e2:1b:5f:a4:c6:
         eb:72:68:84:6a:07:56:c5:b0:62:e2:27:f0:55:e4:10:54:4d:
         6a:96:07:22:32:92:4e:9d:eb:b1:a2:f8:0b:ae:72:a1:7f:1d:
         20:79:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:09 2025 by rpki-client