Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          9PqXTT8Td8sGP6ADadaJ85IOev5Sbgcqhk5tZEp1GY4=
Subject key identifier:   6C:17:DC:4B:BC:AB:D1:72:03:48:AB:CA:95:E9:D6:C2:43:1B:B7:0E
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       0198D73B98C7675F1B4CE7F5D428D76E3E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 14:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:03 +0000
Files and hashes:         1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: fij6Wblu/Lq4u5KdnlGFKMSc9AlyEuznuz5bybrHRuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:98:c7:67:5f:1b:4c:e7:f5:d4:28:d7:6e:3e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: Aug 23 14:01:03 2025 GMT
            Not After : Aug 24 14:01:03 2025 GMT
        Subject: CN=6c17dc4bbcabd1720348abca95e9d6c2431bb70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:80:fa:c4:5a:ad:f5:09:3d:1c:a6:d5:d5:
                    f4:d1:50:d8:dd:83:dc:aa:44:41:fc:13:a2:8c:92:
                    8a:b6:07:8d:f1:fd:81:01:3b:4a:1c:5b:57:6c:81:
                    e3:b2:86:5a:82:61:82:a6:78:ac:91:b7:bd:20:05:
                    c6:e8:a3:3b:fd:5d:2e:54:d8:23:ba:28:6a:e2:6a:
                    9f:70:6e:8a:91:ca:9c:11:e8:ef:4a:8a:99:59:12:
                    b0:e8:12:e5:ff:0d:ad:ee:e9:84:a4:8b:49:76:95:
                    80:3c:3c:56:76:3e:e3:a9:a2:ae:fa:0e:8a:18:24:
                    ad:f0:d3:c6:25:16:f1:9e:ca:9c:d6:25:02:da:9e:
                    8d:94:ef:d0:08:93:40:5f:bf:c6:4d:e9:d9:aa:86:
                    aa:f3:2c:13:16:97:ab:ba:c2:6b:75:a3:b0:14:da:
                    cf:cc:ba:89:dc:4c:9e:9c:e3:ed:90:c0:39:d8:99:
                    2a:e3:55:08:39:2d:07:b4:47:17:9c:61:e2:b9:73:
                    ee:ee:73:66:e7:50:44:85:f9:41:21:1c:a0:78:f1:
                    ba:59:3c:60:51:e5:cc:90:23:8f:c9:2e:21:2a:19:
                    a5:41:ab:62:41:a4:9f:b4:9d:42:e1:20:2a:c8:9b:
                    e7:43:72:71:3d:be:93:8e:9f:6f:bd:06:ef:c5:c3:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:DC:4B:BC:AB:D1:72:03:48:AB:CA:95:E9:D6:C2:43:1B:B7:0E
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:5e:b9:88:aa:8a:99:1c:0b:41:c9:80:1e:02:a2:40:ce:
         00:90:89:17:28:10:bb:a0:7f:66:97:ea:7d:88:f7:61:97:e9:
         fc:49:97:5c:00:f3:06:1e:7c:96:d4:90:de:7a:f2:e8:be:1c:
         64:52:83:66:67:51:86:f2:d6:1a:62:1f:9c:fd:b5:b6:73:d1:
         e2:ed:c7:62:c2:50:2a:9d:c5:44:9f:7d:eb:e7:ff:92:bd:5c:
         5c:8b:ed:c3:7d:85:69:32:2b:42:21:9a:22:50:88:de:2a:cc:
         e7:ff:36:8f:fd:ce:02:42:2d:89:96:08:f1:71:f4:97:94:c4:
         04:b2:d0:ab:d8:95:c3:5e:f4:eb:53:a4:d4:d0:c7:ae:5f:a1:
         ab:e4:bc:71:35:a5:8d:9e:df:db:d3:d7:18:e2:e1:a2:64:91:
         39:03:a9:92:00:d5:73:33:3d:9c:c2:48:f0:ea:65:2a:95:09:
         bd:e1:d6:71:17:28:ab:c4:ff:b5:d1:89:37:d3:ed:91:4f:46:
         8f:61:31:0e:50:e5:b1:8d:f0:30:50:25:37:9f:5d:10:5d:70:
         c0:20:01:18:bc:83:79:0c:bc:36:ef:3e:4f:69:ab:ef:22:0b:
         7c:de:03:13:67:61:5e:00:8a:33:43:0e:22:c8:57:33:df:a1:
         3b:59:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:59 2025 by rpki-client