Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          OZieM1OI+rkS+lGbLB74HUeBfAD7HZbdmc250TcH7So=
Subject key identifier:   45:0E:96:D6:41:27:2C:80:5B:60:1B:FA:52:6B:DD:C2:FD:53:66:E8
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       0198D4E09F4C4B44721BA9DFD874EB5857B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 03:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:27 +0000
Files and hashes:         1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
                          2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: VawusayLceivjYthn5L+schZQVqxaMq2pAAex9c5tN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9f:4c:4b:44:72:1b:a9:df:d8:74:eb:58:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Aug 23 03:02:27 2025 GMT
            Not After : Aug 24 03:02:27 2025 GMT
        Subject: CN=450e96d641272c805b601bfa526bddc2fd5366e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:0f:d9:25:cd:c0:79:5d:e9:c1:69:69:f4:
                    a5:01:b9:92:a6:73:3c:61:44:0c:f3:63:63:1f:20:
                    a4:fd:3f:26:50:bd:77:78:7e:8f:60:a9:5b:1b:72:
                    bc:d1:00:51:9c:12:d7:83:59:77:a6:bf:d2:c1:72:
                    2e:20:c1:0b:06:6f:6e:4d:2b:90:97:60:ad:a9:d5:
                    ec:66:84:b6:02:35:74:46:8c:93:50:c5:35:59:ca:
                    a2:a4:f5:37:33:6c:87:e5:0b:3d:e0:74:6b:75:6b:
                    be:86:f7:23:0b:83:56:ba:53:15:7c:58:ef:2b:9c:
                    7b:fe:05:d9:81:78:4d:e7:0c:4b:c9:ab:28:a2:13:
                    36:d7:13:a2:c1:72:79:ff:0b:c6:e7:cf:0e:bf:37:
                    5b:64:2a:fa:19:75:70:90:02:2b:cf:0d:af:02:8c:
                    57:c0:84:f1:bb:65:8d:d7:92:3f:d0:27:ee:c6:fa:
                    22:e4:7d:06:54:52:aa:a1:40:0e:74:56:86:c4:43:
                    eb:04:57:2f:3d:c8:cb:d8:c2:5e:1a:82:80:e6:38:
                    2b:5e:bf:15:80:08:cc:cc:62:de:c8:1e:c7:c8:22:
                    ed:85:9a:d9:30:f2:af:25:5f:ba:c1:1e:69:91:40:
                    a9:be:23:f9:75:95:75:8b:77:6f:36:ae:19:20:68:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0E:96:D6:41:27:2C:80:5B:60:1B:FA:52:6B:DD:C2:FD:53:66:E8
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:93:2d:0f:2a:92:04:56:ec:00:c0:c4:c5:3f:a6:57:6f:
         f4:87:6b:2b:eb:ef:67:32:b1:ab:fd:38:f8:18:6c:a3:12:90:
         5a:44:86:4b:c1:47:df:c8:8b:d1:7c:7d:d0:54:0d:82:7b:9e:
         f7:74:cc:ce:b8:12:3c:38:8b:85:fb:6e:bd:a5:c8:f3:ea:78:
         bf:8a:a7:ee:47:19:60:d1:38:6a:97:e5:3c:a6:2e:3e:8c:92:
         5d:f7:43:31:cf:ad:b2:e0:70:e3:78:e1:6a:6b:ad:37:5a:54:
         60:1f:2e:89:17:c4:d8:6b:28:69:65:22:94:1d:ef:72:dc:74:
         d6:a8:ca:01:52:43:64:a5:fe:ea:7e:23:cb:38:8e:87:c4:dc:
         52:9d:2e:b7:2b:57:5f:5b:06:75:e3:95:68:92:f4:7e:86:e6:
         eb:e4:f8:79:32:91:2b:ba:0f:35:90:c8:86:d4:4b:dc:18:2b:
         4d:d6:b9:b8:3f:e7:20:85:30:fe:ef:1a:db:43:05:f8:51:29:
         3c:53:4e:87:7b:37:47:aa:fa:59:b6:89:d0:64:b7:79:74:92:
         9f:06:4d:e4:f7:fa:cd:4f:1d:4d:c2:36:90:ab:22:b4:8d:be:
         c3:0c:b9:76:0d:ef:18:ec:16:d3:3a:7f:68:3d:df:2a:75:81:
         71:e7:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:57 2025 by rpki-client