Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File:                     5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier:          8wlwH3tk1xYh3xJyvizX7fGEDnxykrIzTHCYcTEarJc=
Subject key identifier:   B7:16:23:18:56:98:A0:9F:C1:D2:3E:46:A4:31:86:BD:7A:63:0B:4C
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer:       /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial:       0198D54E2C78941C4DB63E35678051847E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:06 +0000
Files and hashes:         1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: ZwQvnhtPMMPXdFrGt7RUupWR2cA6/4xix5ck17E3W9A=)
                          2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:2c:78:94:1c:4d:b6:3e:35:67:80:51:84:7e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
        Validity
            Not Before: Aug 23 05:02:06 2025 GMT
            Not After : Aug 24 05:02:06 2025 GMT
        Subject: CN=b71623185698a09fc1d23e46a43186bd7a630b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:b6:27:e2:48:b6:ec:df:10:db:ef:5b:67:
                    a6:11:3e:ee:24:c7:4b:73:9b:32:c9:ba:1d:f2:2b:
                    ce:ed:20:5f:5d:1d:99:ba:6e:45:5c:fc:4b:ca:81:
                    06:8d:3d:b2:dd:6b:6b:48:f4:72:62:75:46:49:7b:
                    96:81:f9:a1:cc:75:13:f7:2e:43:ea:b8:7d:25:ac:
                    11:40:c8:a9:9b:d8:67:19:9e:f5:84:2c:db:ea:b3:
                    58:35:82:30:8b:aa:71:9e:b2:a5:2f:51:dd:8a:86:
                    ab:73:14:ad:88:e6:3f:83:30:d6:e7:d7:f5:18:91:
                    1c:57:26:0e:1b:fb:0f:25:01:5e:83:18:5d:6c:b3:
                    4e:25:0d:cb:d3:32:ae:24:af:e6:3c:73:51:b7:ac:
                    95:7f:e8:b8:3d:fe:0b:17:7b:95:c4:b9:a8:6b:33:
                    b6:2a:da:e8:ae:17:2f:6f:38:a1:5a:97:69:bb:a4:
                    42:66:0a:03:10:c5:54:23:c1:f8:cb:be:2e:e0:ef:
                    e4:3d:c5:ab:3c:c9:58:e0:f7:a6:0d:7d:d1:b3:c1:
                    5b:8d:93:a5:c5:ec:88:4a:0b:23:f4:88:8f:4b:e3:
                    ba:81:a2:ce:73:95:9c:40:24:b1:a7:bf:3f:11:4c:
                    a8:a4:1c:5e:9a:2e:df:1c:57:f5:ec:e6:1c:54:71:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:23:18:56:98:A0:9F:C1:D2:3E:46:A4:31:86:BD:7A:63:0B:4C
            X509v3 Authority Key Identifier:
                keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:28:5f:36:ff:c0:c3:86:1a:2b:f2:b3:5e:d3:ab:33:e5:
         3c:96:f8:89:ee:23:f1:af:4e:96:5e:59:33:b7:66:9c:fa:9d:
         6e:1a:16:08:6e:15:f7:91:59:c1:a0:50:5e:85:cd:18:02:99:
         06:21:6e:09:17:48:21:0b:9d:a4:ea:37:38:24:82:a4:ea:21:
         92:7d:bd:63:7b:b0:e1:47:94:78:b4:13:b0:81:f4:94:94:a3:
         25:29:56:9c:c5:d5:b1:4b:8a:b2:22:09:0e:02:99:f9:e1:57:
         b6:7b:52:d7:03:8a:a9:77:27:4e:74:e6:84:d0:dd:6b:04:5b:
         94:8b:f3:1f:a8:14:c1:e7:69:75:8c:17:c2:7b:c0:ee:7e:f0:
         0f:fb:07:8e:6d:14:10:05:9f:03:58:19:5f:22:8f:41:16:f3:
         46:54:75:08:06:b1:3d:2d:83:42:2c:2d:6c:bb:8a:5d:35:0a:
         26:ab:9f:05:0c:2d:f3:a8:51:6a:45:bd:ef:74:89:53:54:aa:
         3a:76:79:ab:33:89:fb:dd:f8:fa:49:c6:58:cd:a1:8e:1e:a8:
         6d:fb:29:be:c9:e0:93:7d:85:e3:3f:7e:33:76:ba:ee:24:a7:
         97:6b:b3:cb:9a:9a:4b:3b:0d:5a:e1:78:89:2f:ff:62:cb:c1:
         58:7e:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:39 2025 by rpki-client