Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File:                     uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier:          4065i2OGP5yEBkzLaJFS6u4S7eo4KpVKENIf97+HhfY=
Subject key identifier:   35:02:E5:A8:36:2B:B1:59:D6:8C:76:AC:74:55:92:E7:13:17:25:EE
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer:       /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial:       0198D5158A9841C5CB7943B83E42021CD7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:15 +0000
Files and hashes:         1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
                          2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 9OshbybWDDpu1SCPxkTzfW/PI2q2jLx4/x/UgiseYHI=)
                          3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:8a:98:41:c5:cb:79:43:b8:3e:42:02:1c:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
        Validity
            Not Before: Aug 23 04:00:15 2025 GMT
            Not After : Aug 24 04:00:15 2025 GMT
        Subject: CN=3502e5a8362bb159d68c76ac745592e7131725ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:f5:0b:c1:38:a5:81:19:10:05:3b:7b:12:
                    67:51:f8:6c:3d:53:61:cb:69:2e:72:d1:9a:05:33:
                    b6:a1:80:82:16:cd:52:f5:d1:65:de:1c:2a:b1:ad:
                    a0:63:b0:50:ba:9c:82:f6:7c:2b:8a:c3:be:6e:6e:
                    78:44:ce:dc:b2:09:7b:d3:e3:e2:82:17:2d:16:c4:
                    ac:59:b1:25:4b:73:93:a7:c0:72:5c:45:7d:5b:04:
                    4c:8f:b8:7c:cf:cc:df:47:55:a2:b5:48:7d:5d:17:
                    7f:2d:5a:05:3b:3d:74:0e:00:17:26:a5:52:8c:e3:
                    2a:8d:f5:a6:d5:91:05:e0:85:77:e4:17:9d:b9:ac:
                    05:34:60:3e:69:d3:e3:43:65:87:51:e7:e3:ba:e6:
                    77:5a:ca:c2:5c:ee:b4:c5:7f:cf:bd:be:7d:cf:2f:
                    19:04:f6:ca:3d:2c:a0:1b:e0:5a:e7:b1:7f:9a:29:
                    1c:c4:52:54:52:2b:b8:f8:f6:4a:d4:25:d0:1f:8b:
                    3f:04:48:e1:c2:b2:d3:3f:f2:ac:b8:53:66:28:e5:
                    ce:c1:09:f7:28:f8:cf:86:37:6e:84:64:c8:02:0e:
                    06:3f:38:29:c2:73:6e:0e:cf:ba:5d:8f:10:53:33:
                    ac:1e:d2:d3:9f:0e:61:cb:3f:09:d7:b6:56:14:c9:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:E5:A8:36:2B:B1:59:D6:8C:76:AC:74:55:92:E7:13:17:25:EE
            X509v3 Authority Key Identifier:
                keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:03:a3:47:0a:e0:1a:73:e5:62:4d:74:7d:39:2d:9e:ac:
         a7:4e:11:71:9e:b8:f5:67:91:fa:c3:10:c7:d8:81:82:87:91:
         e4:0d:10:df:36:2d:bf:4e:68:8c:74:d0:fd:70:2d:bd:91:16:
         b9:d5:f0:76:62:e7:7b:ed:6d:cd:b1:0b:00:e1:64:56:10:a7:
         6b:5f:4f:97:ec:3f:41:8b:1e:97:b9:3d:88:96:0d:a4:83:43:
         90:69:47:5d:38:7b:19:93:00:45:09:7b:64:ed:dc:d7:b7:61:
         31:4e:88:56:da:e3:ac:49:9a:2e:62:04:5a:4b:4b:67:c0:e9:
         b8:94:49:f6:73:59:2c:58:37:36:6d:ee:e6:e0:ac:d4:da:12:
         3a:43:06:28:08:d3:a8:46:86:bd:ae:3c:a4:8e:cc:de:8f:6a:
         92:a9:94:48:62:e8:fd:10:0d:14:4f:ad:f1:30:aa:49:34:ed:
         c3:e8:eb:08:ef:6c:5a:29:79:c0:1e:38:8a:8f:1d:59:56:cd:
         4e:1d:8b:b2:0b:91:fc:5c:e8:3f:fd:19:58:d6:26:06:9b:e6:
         92:bc:c8:77:3b:e7:a8:aa:dc:6d:10:8e:7b:2d:f0:20:2d:a8:
         89:ff:ca:1a:b8:d9:b4:16:0f:3f:5b:9b:09:47:11:a7:eb:e6:
         61:f5:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:19 2025 by rpki-client