Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          3hOQbmJ7VgSZyt7bC/xaEgQmAhN5K++URJ9/nI72aYg=
Subject key identifier:   52:8A:8C:E5:B8:03:9C:1C:7C:3D:21:F3:D8:10:23:C5:1D:98:6D:8D
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       0198D4E03F5BB1A283692515ED7CBB55C86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 03:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:02 +0000
Files and hashes:         1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
                          2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: bNy/O/XH1ZcJJRH4pGpsfZFfHPXt4sUUm7C60geoLmk=)
                          3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
                          4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
                          5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:3f:5b:b1:a2:83:69:25:15:ed:7c:bb:55:c8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Aug 23 03:02:02 2025 GMT
            Not After : Aug 24 03:02:02 2025 GMT
        Subject: CN=528a8ce5b8039c1c7c3d21f3d81023c51d986d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:5b:6c:51:be:ad:4d:f0:09:7d:60:7c:f9:
                    7b:8a:20:d8:8a:a6:c9:24:9e:ba:d0:77:fe:52:04:
                    e6:4f:31:bf:d5:f7:eb:8b:98:b4:86:6c:02:ce:26:
                    b4:1a:f2:ce:c5:20:96:04:db:f3:4d:09:56:19:85:
                    63:5a:a5:ec:fc:07:e9:4e:cc:ff:8a:1d:9e:0b:7a:
                    7a:cb:41:cc:f8:cd:29:ac:25:33:c7:f9:47:47:79:
                    e4:5a:09:b7:37:dd:b3:16:29:f5:7d:f7:59:2b:17:
                    58:23:09:da:6b:b3:5a:8f:4e:2e:d5:de:b0:7e:5a:
                    de:5d:92:83:a7:72:70:4c:70:ad:f8:a7:90:9d:d8:
                    4e:1f:06:55:79:f2:47:73:35:bc:59:d7:b3:3d:32:
                    3a:9c:ec:c9:89:ef:06:21:46:3b:c6:d8:c8:5b:e3:
                    54:f6:fd:bf:c6:b6:65:ed:3b:84:82:7d:cf:16:3e:
                    96:17:d2:35:74:dc:4d:de:2e:f3:73:64:dd:0c:24:
                    ce:cf:8a:9e:74:82:7b:90:b4:2e:fd:48:04:c6:f0:
                    c4:40:b6:70:60:1f:1a:f0:3d:54:a6:f7:1c:2b:8a:
                    c8:72:8b:7b:84:ff:b1:59:a6:93:57:ba:03:e0:56:
                    71:54:04:b5:5b:54:8a:95:13:63:1a:64:c4:0f:f6:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8A:8C:E5:B8:03:9C:1C:7C:3D:21:F3:D8:10:23:C5:1D:98:6D:8D
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:2f:72:5f:3b:97:42:3b:de:9c:46:f3:e0:fc:9a:d0:e4:
         5e:97:69:8b:13:8c:72:64:b9:69:ea:5b:43:a5:69:94:3a:a0:
         41:dd:1a:e8:ef:27:27:3e:fa:33:97:2a:94:ea:8e:06:5f:f8:
         c8:b1:19:e3:4b:fb:2e:39:94:fd:2f:74:e8:04:44:ba:eb:11:
         1d:77:6f:07:a8:28:1a:9e:c0:12:0f:1b:6e:bf:e0:c8:f4:c5:
         82:5f:e3:87:37:7d:bd:74:52:6a:7e:67:09:9d:73:05:b8:2a:
         19:a8:19:0c:5a:78:5f:86:a5:9f:15:4b:7d:9c:b0:a7:a3:86:
         fd:a8:8a:b2:8f:b6:70:27:f3:f3:bf:76:7d:74:38:a1:47:b7:
         a3:65:79:69:68:fc:ab:f1:6a:01:f9:f8:ef:5c:04:7a:c9:ee:
         c4:c8:aa:a9:d5:64:35:b5:87:aa:50:63:14:9c:e5:d7:d1:11:
         53:fb:3f:cc:75:d3:d1:76:dc:96:61:20:8f:5e:3a:52:a4:44:
         94:10:d0:c2:da:ed:78:ab:5d:37:7c:aa:b9:fe:3a:62:a8:cd:
         a4:25:99:89:8b:3e:ed:2f:91:aa:da:54:53:3d:b8:49:1f:ff:
         89:6e:38:c6:22:4a:2a:12:d4:4f:69:29:a8:dc:af:7e:81:3e:
         19:17:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:47 2025 by rpki-client