Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File:                     xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier:          Ig8svCOj0CaWitz19jAplur+43KO+AA0nYpiBb9G1yU=
Subject key identifier:   53:C8:76:73:39:9F:C2:63:1C:93:3C:6D:91:5F:65:3F:7B:B9:F9:0E
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer:       /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial:       0198D4A79C71BEF0E38AAC172D4E31287506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 02:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:10 +0000
Files and hashes:         1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
                          2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: iVcL7svIX9tvgdENSpETBK54dmoJmpS0MUkAXDw4nFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:9c:71:be:f0:e3:8a:ac:17:2d:4e:31:28:75:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
        Validity
            Not Before: Aug 23 02:00:10 2025 GMT
            Not After : Aug 24 02:00:10 2025 GMT
        Subject: CN=53c87673399fc2631c933c6d915f653f7bb9f90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:8a:a3:c9:82:06:b6:fe:a3:6e:46:fd:64:
                    16:84:24:ab:4a:26:5c:e5:58:7d:39:48:e2:d5:13:
                    f4:ca:b2:03:43:db:3e:ac:a6:76:c1:f3:5f:68:01:
                    26:0a:72:11:19:06:cf:29:5e:87:23:7b:e3:e1:3c:
                    95:24:1a:51:49:c4:c2:fb:6f:bd:78:0f:b0:c4:dd:
                    85:33:77:11:49:74:11:c5:c6:12:ea:8f:02:35:a4:
                    47:b3:10:57:4d:04:ec:93:e6:c1:de:2b:9d:6a:ea:
                    ba:ff:ec:04:c5:04:32:ec:61:d2:18:50:a0:6f:dd:
                    0c:96:11:28:35:11:a7:60:d5:cd:88:2b:41:b9:d1:
                    43:1d:43:91:97:0d:31:57:55:e3:0a:20:90:dd:2a:
                    db:3d:b4:30:77:b4:b4:29:fc:10:d4:35:cf:0a:7c:
                    bd:8b:54:5e:e9:7c:26:89:fc:f0:06:4a:4e:0d:39:
                    8f:69:f1:43:93:44:07:aa:c1:1b:c5:40:96:7e:6b:
                    16:25:e3:99:ae:07:c8:ee:62:39:a0:9a:52:ad:b1:
                    e2:d0:52:08:fc:64:96:d6:69:13:89:69:85:88:63:
                    eb:1a:92:9a:86:86:47:65:fd:2c:5a:b8:b1:a4:3f:
                    b5:f9:0a:7e:4b:d5:84:c6:c1:2f:da:7d:5a:e2:f7:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:76:73:39:9F:C2:63:1C:93:3C:6D:91:5F:65:3F:7B:B9:F9:0E
            X509v3 Authority Key Identifier:
                keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:44:0d:5d:50:3d:29:ca:75:5d:f3:63:f4:74:ce:f9:4b:3c:
         6a:8e:9a:78:0f:89:c9:5f:72:a9:a7:d1:ac:ad:36:42:a3:e4:
         1d:cf:09:19:df:94:49:e4:21:11:6e:d0:2f:63:ba:cc:f3:43:
         16:92:56:d3:64:10:66:9a:2a:29:72:15:94:de:5f:3b:e0:76:
         96:66:cd:ea:22:44:14:1a:77:e6:36:2a:79:27:10:f0:d2:4b:
         47:ac:60:41:b8:86:da:f2:a9:0a:0f:dc:06:c2:9e:5a:5f:82:
         40:e7:e7:94:07:02:b1:fd:2f:86:fb:d0:30:cb:ee:f8:12:50:
         c7:e8:c4:98:57:a0:b1:1b:81:c7:88:49:b1:7f:c6:b5:12:44:
         2f:6f:95:7c:b0:6e:a1:39:cc:9c:62:8f:f7:89:82:ef:de:21:
         2c:75:12:95:91:a7:08:fb:74:39:76:c6:51:bc:39:4f:f4:a8:
         87:0e:4f:44:b6:ed:e7:8b:f1:ef:20:1b:a9:5f:fd:31:ea:22:
         56:e4:c6:b9:87:b9:8d:9c:2a:31:86:56:da:23:2a:c0:d0:b9:
         46:44:a6:79:a3:a5:eb:a3:3f:e3:fd:53:97:2a:4d:2e:4b:94:
         ba:7f:12:49:dd:c8:80:b5:d1:d1:6f:de:d4:fa:7c:23:f8:d4:
         68:07:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:29 2025 by rpki-client