Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File:                     bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier:          u0IlkXawLnqSVK2MuoYulrnJKMAqD4wfuAXxN6AVbis=
Subject key identifier:   03:84:67:C4:8D:A9:C5:D3:2F:D7:EA:84:16:F2:26:04:33:C9:F5:62
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer:       /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial:       0198D5F181FFAA839C4E6D51125020EC4AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
                          2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: pMZHo2ZXzGpa5LnrMvN5Bz/6vya0by/Y1dQt++3fmSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:81:ff:aa:83:9c:4e:6d:51:12:50:20:ec:4a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=038467c48da9c5d32fd7ea8416f2260433c9f562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:6b:18:4c:11:e5:ec:51:41:9e:79:b7:13:
                    7d:e6:e8:ea:d0:66:9a:e0:79:43:99:3a:a4:4d:28:
                    1e:14:e2:40:5e:68:1c:f2:09:6a:6e:60:2f:e4:9b:
                    fa:68:6f:6d:37:f9:50:f0:6d:d0:83:9b:69:99:75:
                    c2:02:40:d3:3c:82:74:da:cc:cd:1c:ae:6c:a0:39:
                    7e:3a:d7:43:48:3d:ca:94:8e:8e:bf:f7:b7:76:e8:
                    ac:5d:90:e5:a6:34:ff:b9:e6:f8:74:d9:e9:17:72:
                    19:fa:fb:de:2e:82:ef:58:4e:14:fb:27:75:37:d3:
                    5c:ba:93:8f:6b:28:3b:25:34:b6:62:7c:f3:46:e5:
                    b6:87:51:3f:48:35:cb:1d:6e:64:01:71:f9:54:4a:
                    13:cf:13:f7:cd:82:c5:2f:a1:e4:78:fd:89:8b:48:
                    c5:a3:0a:43:21:9e:be:d3:c6:ea:d8:fc:b7:06:d4:
                    9b:90:05:18:c5:1d:0c:89:b8:64:65:cd:47:3b:8f:
                    12:02:75:ca:2b:4d:c4:a9:a1:33:77:97:62:aa:6a:
                    24:00:1a:d3:aa:44:5c:58:6c:e0:75:bf:c7:e4:88:
                    11:a5:0c:f2:41:f1:84:38:6f:cf:48:6e:2a:8a:35:
                    06:08:8e:bb:50:62:61:1b:5a:70:b7:40:1b:c5:12:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:84:67:C4:8D:A9:C5:D3:2F:D7:EA:84:16:F2:26:04:33:C9:F5:62
            X509v3 Authority Key Identifier:
                keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:97:73:0e:18:25:36:c7:67:f4:60:f0:64:fe:6c:02:a5:
         81:87:82:ed:98:98:2d:b5:7f:80:9d:ad:a9:e9:18:33:ca:8c:
         10:21:38:4e:28:0b:e5:3c:eb:b3:e4:f9:bc:7c:18:71:ed:f8:
         15:ef:9a:93:b9:23:b5:a7:71:cb:4a:16:b1:8f:a0:c3:80:ff:
         a5:93:fb:4f:80:a7:8f:db:ce:2b:45:68:51:40:da:d1:85:69:
         a4:7d:80:f7:36:80:87:62:2b:05:08:03:f5:85:10:6d:1e:28:
         cc:d4:c1:64:8b:04:9d:fd:4e:e0:81:b1:1b:5a:d7:bf:06:ce:
         87:cf:9b:0e:62:4c:fa:5f:d1:c5:4c:b9:97:c8:75:7d:3b:22:
         e9:86:32:55:dc:18:8b:19:8b:be:fe:95:0f:dd:5b:39:0c:e5:
         e5:2d:6a:ce:e5:7b:c7:85:a1:d2:40:87:8c:ed:cd:d8:a5:1e:
         ab:c6:c9:f3:0a:88:8e:5a:09:73:32:e0:fb:3d:17:3f:05:2b:
         43:76:ab:81:99:b6:43:a6:86:9a:95:c8:32:4b:48:44:a8:72:
         86:82:7b:93:ef:89:de:6d:b7:3f:40:49:f8:92:9a:a6:3f:86:
         21:a5:0c:c5:ee:33:d7:12:0a:d8:4b:b4:f0:85:e2:8a:84:e8:
         4f:7a:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:44 2025 by rpki-client