Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier:          cwRxn//4JEXIwuUE4oxkwf2ZtHAItRy4hn3Phy0is/M=
Subject key identifier:   41:2C:F9:FE:4E:C4:35:69:7A:CE:BC:F8:49:E0:F0:04:A9:B2:78:EE
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       0198D73B8F5A3A67AA60D7D538B3BCA36D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 14:01:01 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:01 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:01 +0000
Files and hashes:         1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
                          2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: fm7lZ9bDKOpfl+O3SFj7XHOn9FkA0rFS/vpxoLhUIaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:8f:5a:3a:67:aa:60:d7:d5:38:b3:bc:a3:6d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: Aug 23 14:01:01 2025 GMT
            Not After : Aug 24 14:01:01 2025 GMT
        Subject: CN=412cf9fe4ec435697acebcf849e0f004a9b278ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:37:f3:b2:df:e7:13:d5:b5:86:23:6e:e6:
                    46:fe:bb:be:0d:6d:f4:26:b8:7e:71:b7:7a:74:0d:
                    19:23:e4:e4:01:d0:f3:13:de:e5:2a:b1:b2:da:c2:
                    ac:aa:0f:6a:cd:d5:bf:05:bb:39:ec:54:ea:13:25:
                    0b:50:b8:a6:ff:c4:5f:2e:ea:48:fe:d0:b3:cf:75:
                    29:64:c0:dd:5d:d7:b5:d6:cf:60:a3:a1:2a:b9:2c:
                    c9:01:aa:db:88:c4:53:08:2b:01:3a:56:5b:94:41:
                    2a:3b:e6:9d:71:2c:9c:ed:f3:d7:72:77:b9:c4:d1:
                    d1:d3:69:a9:e7:aa:10:8e:e9:7a:02:36:24:71:ff:
                    3c:4b:b1:d3:1a:31:6f:19:98:59:2a:76:03:b3:4e:
                    12:d2:cb:2f:cc:20:e3:61:1f:61:e2:b7:4a:b5:ed:
                    1b:fa:20:e5:7c:8e:58:e6:41:8e:a5:0c:b6:da:32:
                    7b:0b:e3:7b:c4:ef:f5:c8:2b:aa:66:22:9f:6f:bc:
                    79:54:ef:96:65:93:95:24:cc:32:2e:e1:0a:b4:39:
                    8a:2b:10:52:96:59:97:81:d9:67:12:9e:a4:26:ff:
                    5b:24:2e:7d:a2:a9:6c:55:2b:58:f8:de:c4:3e:a6:
                    3e:57:ea:a5:da:2d:82:44:0a:80:3f:48:06:78:05:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2C:F9:FE:4E:C4:35:69:7A:CE:BC:F8:49:E0:F0:04:A9:B2:78:EE
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:52:21:9f:50:ff:3a:41:03:dd:0c:23:2d:80:c6:eb:a3:e5:
         4d:82:71:a9:30:fa:07:07:e3:12:89:cb:55:5a:51:c9:78:60:
         0f:a7:b3:e3:a0:80:c1:7f:96:04:5e:80:d9:70:d8:2f:c0:ea:
         73:72:ee:47:c3:d5:fd:2b:fb:6e:8d:0d:f1:a4:5b:79:c5:ff:
         99:6b:fd:1c:9e:14:7c:93:19:f1:26:0f:f3:e3:32:96:5d:d3:
         32:eb:7a:9c:6f:db:e8:31:22:a3:8b:d9:72:bc:c4:37:22:87:
         9e:19:af:ca:0b:11:b2:13:a0:1e:4b:b9:86:22:c7:ca:f0:eb:
         d4:12:83:94:80:d8:ef:ed:5d:ad:db:a9:a2:08:bb:32:26:d4:
         85:95:77:c8:cc:aa:b0:98:91:ab:81:ef:26:7b:d1:4f:a0:b3:
         58:3b:79:d9:c8:0a:49:65:e4:b7:c1:81:5f:9e:0f:2b:2d:08:
         76:cf:7b:a9:cf:93:e5:fb:ce:2c:3e:84:ef:b3:79:ae:e3:b9:
         0c:46:04:07:aa:74:78:29:3a:89:41:47:85:7b:67:d0:fd:c6:
         25:2f:aa:16:12:92:ca:36:2a:be:fc:9f:5b:7d:ea:47:07:66:
         9a:51:4c:86:10:91:9c:fa:38:85:ac:12:a0:2d:83:56:70:3e:
         b4:dd:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:06 2025 by rpki-client