Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File:                     PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier:          FZs0kfzXlbtpPwJylJGsKA10bgeQnYAVQ7J4BMyk5jQ=
Subject key identifier:   50:B0:60:6C:12:20:F2:4F:9E:77:9B:06:06:E1:98:EA:C1:BA:9D:CC
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer:       /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial:       0198D5BB84DF044BF68A12488229C22F8ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:32 +0000
Files and hashes:         1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
                          2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: IEf0bMRkF5u5z/aRA2oGrbHIgyykgLueKhRjjsyXbAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:84:df:04:4b:f6:8a:12:48:82:29:c2:2f:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
        Validity
            Not Before: Aug 23 07:01:32 2025 GMT
            Not After : Aug 24 07:01:32 2025 GMT
        Subject: CN=50b0606c1220f24f9e779b0606e198eac1ba9dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:05:58:48:9e:1b:c8:71:f4:c7:a0:a6:fd:
                    7d:45:a3:3c:71:0c:44:34:ca:ba:21:fa:a6:a8:07:
                    08:49:e3:8e:5c:28:e1:e7:c8:c1:ce:27:1f:26:ff:
                    bc:fb:99:67:e7:8c:f3:2a:95:a1:87:04:7b:da:62:
                    af:a7:1a:b0:fd:33:b9:5a:da:82:a6:e9:03:f1:1e:
                    e6:24:d0:cc:cd:e2:71:bf:78:17:a6:ce:ab:00:cd:
                    cf:ab:e9:41:bc:19:ff:1a:c2:e6:a2:a4:ee:8a:a3:
                    5b:ef:75:44:ec:85:a6:06:c7:ce:c7:8a:a4:9d:be:
                    70:a5:05:85:83:1a:34:b0:ee:6e:31:e8:f8:da:82:
                    39:7f:7c:59:25:d2:8c:ab:f2:03:d1:de:1a:5f:02:
                    62:40:89:9a:d8:d3:90:cf:da:c0:13:d9:82:26:67:
                    95:46:85:7f:b5:4d:3e:31:1f:ad:79:49:66:ab:79:
                    8e:81:69:b8:43:e9:39:a5:06:79:97:c8:e2:50:7f:
                    d4:42:ac:ff:e3:d4:db:2c:af:d6:50:2f:3a:0b:76:
                    4c:3a:1a:ef:b8:8f:93:3f:f6:93:d6:7f:93:ba:ae:
                    57:5a:05:81:10:31:a4:37:09:9f:74:cf:bd:94:36:
                    ad:96:d2:99:3b:40:60:08:72:d9:08:ad:27:0c:0e:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B0:60:6C:12:20:F2:4F:9E:77:9B:06:06:E1:98:EA:C1:BA:9D:CC
            X509v3 Authority Key Identifier:
                keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:99:3b:b7:01:c0:32:39:91:59:23:22:51:2d:e9:44:22:48:
         15:7e:8e:23:da:fe:80:ed:1d:cc:19:89:a8:6a:a7:cb:54:ad:
         b7:f5:13:cc:ab:12:76:02:5e:55:38:bf:80:f4:56:41:59:7b:
         38:e7:a6:dc:6a:8d:a5:74:c2:37:48:3b:2d:2b:39:06:21:eb:
         6d:f3:eb:1c:64:7f:08:df:70:2e:63:c0:6d:1a:5b:73:97:75:
         15:5d:c8:c8:d3:06:d0:cd:05:51:17:86:ce:e8:c9:92:0a:a0:
         25:2b:38:9f:46:17:6a:ea:4d:05:a4:7c:38:58:89:24:3e:be:
         57:24:99:d8:d7:8a:09:d0:4d:58:c2:05:bd:ef:d7:aa:44:37:
         93:25:ab:48:ed:18:a3:5a:bc:ed:d8:d2:37:47:6f:51:00:ce:
         91:26:80:a2:7b:cd:d1:3c:b1:51:d9:75:5a:13:ab:58:22:50:
         9e:80:09:0e:20:a6:7c:5f:c4:34:19:57:4e:25:39:c5:fa:40:
         b0:71:b0:2d:4a:d1:f7:e1:78:58:bd:81:d8:4e:fa:c1:3f:2f:
         d2:82:23:55:de:bc:5f:d8:1e:8f:e6:55:fd:83:d8:5a:bb:78:
         8b:d9:8e:9a:7d:6f:0f:83:e6:27:09:0d:d6:85:1a:20:83:da:
         28:f5:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:11 2025 by rpki-client