Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          bfUQRj4dSpKPba9oFrPIPnISqGXZYFFIT+3oIjVRDLk=
Subject key identifier:   6E:19:3C:14:D7:65:A8:CA:BB:FE:7F:1A:03:EA:50:C6:29:9E:BD:B7
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       0198D4A7936CDC146163B2D278767EBB7435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 02:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:08 +0000
Files and hashes:         1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: H/6axjBKNe5505h9aJjZfjZT1hdGaXlr13dHDl2oKKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:93:6c:dc:14:61:63:b2:d2:78:76:7e:bb:74:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Aug 23 02:00:08 2025 GMT
            Not After : Aug 24 02:00:08 2025 GMT
        Subject: CN=6e193c14d765a8cabbfe7f1a03ea50c6299ebdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:b2:23:93:d8:dc:0f:7c:d5:6c:36:de:d2:
                    fa:1f:43:ff:9a:3e:31:ac:ce:00:76:ca:56:5b:eb:
                    e9:b7:6d:b6:32:66:4e:35:58:90:0f:16:f0:c2:27:
                    85:49:5c:e8:63:41:1a:dd:38:7b:25:d7:fc:19:03:
                    fc:68:c7:54:4e:f3:09:e5:57:0f:a4:5e:90:82:89:
                    7b:15:7c:f4:a7:d4:21:cf:c0:ea:d9:4e:68:b0:3d:
                    e8:b4:ad:29:5f:9d:b3:ff:44:24:a8:24:e1:a8:19:
                    3a:52:d6:f8:1d:a9:f3:92:c1:bc:d8:90:f6:50:4c:
                    4d:72:85:5d:4c:b2:4e:47:a8:45:33:89:0b:2b:7d:
                    a4:af:6e:98:62:37:9a:22:10:05:42:6d:e4:86:a2:
                    b3:dd:33:a5:b5:32:e0:b6:71:2f:e6:33:a9:a5:b4:
                    32:3d:66:57:31:5f:48:d1:d9:32:20:d1:d8:73:7f:
                    a1:2f:ad:c2:c7:49:1e:77:8f:e9:ac:8b:d2:02:96:
                    c6:65:fa:7c:c9:b7:42:ba:19:98:02:74:be:2c:b2:
                    75:10:39:f9:7c:c4:90:0d:4c:70:80:41:d1:fe:c9:
                    5d:64:8a:03:6c:37:c3:96:72:99:c3:40:4f:d4:e8:
                    b0:b8:1a:ea:46:b1:97:b0:2a:97:42:c4:3a:03:83:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:3C:14:D7:65:A8:CA:BB:FE:7F:1A:03:EA:50:C6:29:9E:BD:B7
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:da:4f:e7:80:22:17:fd:4d:25:fb:30:8b:3c:5e:c6:1f:
         fa:f4:5c:d6:1e:90:b9:e8:8a:3f:9d:62:dd:73:7c:28:1a:5e:
         e8:99:81:54:e8:da:bf:e5:6a:67:b6:7e:3e:42:ed:8e:a5:da:
         ff:ae:26:52:89:75:79:ff:9d:55:fe:0e:0c:28:e7:bd:5c:36:
         69:79:74:40:51:db:87:48:54:e0:85:8f:fa:0c:65:e6:08:49:
         dc:3d:78:32:37:fa:8f:1b:7e:fd:5b:38:b0:72:21:d1:a2:03:
         d9:3f:1e:54:5a:03:7e:9d:d0:7f:4b:ad:5a:f5:6c:e4:53:1b:
         5d:0b:13:cc:bb:89:f8:67:c3:04:73:90:bc:24:11:77:cc:23:
         f0:84:97:18:31:08:15:0f:49:b5:5d:30:3d:c2:e5:83:d7:6f:
         bf:69:b9:10:b6:80:c6:a5:cf:bf:4c:2c:bf:58:e8:bd:ca:85:
         52:16:dd:5c:9c:1d:ac:2f:bc:4e:09:f9:f9:93:f5:e5:1f:23:
         3a:dd:c4:de:2c:5c:84:0c:80:68:a6:04:bb:89:61:59:f4:9d:
         18:17:12:10:52:6f:42:35:02:cc:43:08:44:5b:5b:8a:48:f2:
         46:91:44:62:37:45:9f:4a:29:8f:cf:2c:ed:6a:64:ba:14:e3:
         50:aa:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:16 2025 by rpki-client