Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          x/nEa4ltcTmb1DS9A6n7aVVgj3FmB3Ho6OjamzdfvRE=
Subject key identifier:   CB:58:ED:C4:4A:49:88:02:B0:1F:88:85:5D:A0:6C:53:42:DF:00:27
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       0198D5837598AA7AB83BD0E73E712E94A4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:19 +0000
Files and hashes:         1: 3-Ja7oUVjGguwh6QaF2yeAfwhyM.roa (hash: nrUNLtMMNN8x4oqm05IG63Gk5IknemEKbhNaDnkCTrY=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: ONKJTISBlRK7hoYWMxPbKlsLksDI+DJ+XDkGte/vlxY=)
                          3: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (hash: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=)
                          4: adzPWtlHDTvsggmKWbe4TnrcvIk.roa (hash: n14P1Q6Wx2eq+iqMHqpfTj36nMIIclkcTcwOpIeBWTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:75:98:aa:7a:b8:3b:d0:e7:3e:71:2e:94:a4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Aug 23 06:00:19 2025 GMT
            Not After : Aug 24 06:00:19 2025 GMT
        Subject: CN=cb58edc44a498802b01f88855da06c5342df0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:8f:ea:fa:66:b0:33:4b:58:8e:f2:c6:32:
                    d6:16:d8:d9:ea:c8:e6:de:a3:65:11:9c:ec:95:dc:
                    e5:fb:2a:9a:00:27:7f:4e:12:9b:7b:e6:d2:a6:11:
                    1c:2b:cc:91:a6:1c:76:f5:4f:01:35:a1:2a:70:bd:
                    19:56:80:30:84:a4:f3:06:3d:50:e3:ed:e1:09:86:
                    66:6e:72:04:81:47:cb:af:91:a0:d5:76:1a:bb:29:
                    2d:66:d4:2a:1c:a5:c6:a8:0d:02:ba:ed:ba:48:9d:
                    9d:43:ee:28:de:ef:89:ea:f6:b3:ab:29:49:2e:ec:
                    8a:3f:3d:22:03:4a:88:f5:fb:0b:aa:ea:ab:f3:7a:
                    06:52:c6:2d:f0:33:8b:f9:d7:d3:05:f4:25:6f:5c:
                    8e:1e:f9:3f:65:47:f9:30:d6:9c:b3:64:2e:db:4b:
                    9b:60:5f:a3:ce:64:15:54:97:de:82:81:f6:d7:b3:
                    db:c1:19:64:dc:3f:7a:06:eb:79:2f:50:53:27:90:
                    db:5e:72:d1:77:18:b8:fa:c1:fa:9e:0a:87:b2:7e:
                    f9:7c:b2:0d:ba:5a:dd:04:31:f0:cb:16:d6:e6:88:
                    09:8e:15:38:88:05:5a:0c:aa:43:68:cc:1b:6b:27:
                    38:30:a4:69:56:56:57:e7:e8:22:20:ab:76:3e:bc:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:ED:C4:4A:49:88:02:B0:1F:88:85:5D:A0:6C:53:42:DF:00:27
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:e1:89:4b:2f:5e:58:18:e8:92:af:f3:7b:f8:93:18:28:
         a7:66:68:d4:6b:10:60:41:e2:68:52:66:dc:10:c0:41:fb:09:
         1f:73:11:30:de:36:3b:8d:00:b0:74:e4:b2:b3:14:58:2f:5a:
         68:0a:99:f9:ae:5f:8b:99:89:c5:7e:09:29:c5:97:7e:44:f6:
         57:7f:41:6d:66:05:9e:dd:c9:ee:ca:18:d1:50:ee:98:3b:9d:
         0e:82:6c:2a:1b:6b:cc:66:64:f2:af:8c:3e:a2:f5:7a:d0:e8:
         0e:1d:30:33:2a:13:eb:d9:7e:d8:c3:9e:d2:a7:ce:34:9b:5f:
         a3:c3:61:d0:b2:35:5c:be:a8:26:46:a4:5b:f0:6f:28:21:4b:
         89:9c:7b:30:e5:87:14:0f:24:95:f3:62:0d:60:ea:fa:6d:ef:
         96:5c:c0:20:08:23:a9:e3:0d:7e:e8:32:d6:69:de:46:64:21:
         95:75:73:cd:68:83:d3:42:f3:2f:32:45:1d:b1:ec:7a:bd:eb:
         d7:95:3f:1f:aa:a9:74:6a:ea:8f:de:2a:2a:8c:d1:e5:f3:b5:
         77:4a:7b:08:dd:89:6d:fa:7d:66:75:70:30:a7:19:f8:33:25:
         1a:89:ed:67:fe:6c:93:c9:a0:39:12:5a:f5:59:c3:c6:7f:32:
         b3:e9:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:20 2025 by rpki-client