Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File:                     k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier:          v4ILG/WGFDcRNP+pw9lwRuuBjSZi13VNSM/s+RA/N8E=
Subject key identifier:   36:4D:93:AE:8B:27:7F:D3:91:8A:CC:26:4E:5D:11:33:99:27:E8:D8
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       0198D6CE0764E2331279CF2B8E5CC7D33633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 12:01:23 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:23 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:23 +0000
Files and hashes:         1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
                          2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: xlT5Yb0T9KPaBP/B99L1mIhIe/qEfdAD6Rn7OTz/wVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:ce:07:64:e2:33:12:79:cf:2b:8e:5c:c7:d3:36:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: Aug 23 12:01:23 2025 GMT
            Not After : Aug 24 12:01:23 2025 GMT
        Subject: CN=364d93ae8b277fd3918acc264e5d11339927e8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:69:68:47:2d:a8:81:0b:dd:31:05:49:ec:
                    d9:72:17:39:9a:44:54:1f:a5:7e:43:ea:88:c4:c7:
                    5c:b4:de:07:68:da:6c:b9:07:52:c7:7c:f9:3f:98:
                    a7:0d:71:ee:d2:36:0f:ed:ec:a0:05:bb:bf:b7:97:
                    7a:66:fe:46:79:a6:86:f6:fa:52:c1:3f:c0:2b:42:
                    68:82:e6:ef:14:c7:f4:47:34:34:53:7b:b7:3b:aa:
                    75:68:90:26:5b:0b:7a:a0:3d:3c:9f:dd:85:61:c0:
                    61:67:c0:4a:09:f7:7d:61:c9:7d:33:8f:f3:3a:7f:
                    61:44:d0:20:70:23:79:76:4e:61:5c:16:34:58:24:
                    47:89:c0:94:33:d7:1d:ef:6d:72:6e:ce:59:05:ea:
                    0d:25:66:d4:c5:07:b4:c7:f2:40:ce:5f:4b:79:d2:
                    d7:30:62:ca:22:37:a8:70:4f:a5:ea:1e:ba:0b:5c:
                    dc:00:1a:29:c9:cf:a7:53:63:b5:d3:84:a4:bf:0e:
                    a4:02:09:4f:34:96:59:bc:ee:f8:5d:7b:33:0e:e2:
                    0c:d7:63:da:b9:27:52:2f:26:b0:2a:a3:cc:ed:96:
                    3f:59:19:d8:46:46:42:07:4a:49:ba:88:d9:f0:f6:
                    b5:5c:5d:c6:9a:45:88:1e:5b:f9:f7:6f:30:10:bf:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:93:AE:8B:27:7F:D3:91:8A:CC:26:4E:5D:11:33:99:27:E8:D8
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:d4:fa:ee:2d:bc:33:ae:26:93:85:58:21:f3:d8:48:32:
         73:28:3c:2f:3d:be:3f:77:6c:a2:1c:28:ec:f7:91:37:26:82:
         f8:1d:61:3b:aa:d1:f4:ef:02:c4:39:5f:01:f7:0a:a7:fb:c0:
         8b:b2:42:c6:63:0a:a0:e0:cc:13:40:3f:43:10:e0:c6:52:ff:
         bd:ba:75:52:7d:af:40:ff:56:44:04:43:ab:a9:ab:de:26:f4:
         6d:b3:88:35:d1:bb:7b:c4:6c:20:92:64:04:14:a9:c5:71:35:
         2f:b5:d0:62:ca:c5:86:bb:04:c4:51:52:cd:e3:18:6e:c0:9e:
         36:4b:12:dc:c5:75:87:e3:93:3c:38:4f:3f:b6:4c:31:40:6b:
         5c:a2:a6:f3:e5:e2:87:4c:03:10:54:03:a0:7e:36:40:d2:61:
         0d:f9:0c:78:8f:68:ec:66:91:d3:5c:5e:2e:83:06:b6:6b:b3:
         4f:7f:f1:07:ab:62:73:3b:06:a1:bd:ca:a1:56:6b:a6:10:71:
         5d:03:15:c5:3d:78:ac:9c:ec:b2:55:78:1d:05:52:4d:1d:51:
         5d:0d:92:43:92:d4:9d:83:a3:10:21:e9:7c:72:f8:39:61:87:
         8b:34:85:3c:68:92:72:7c:f3:27:f6:ab:06:fc:c2:60:f3:5e:
         7c:51:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:02 2025 by rpki-client