Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File:                     4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier:          duivXn72rCrspg7uTsNF8OfCKFD9mHMfaSdH0YmIBCg=
Subject key identifier:   79:DC:DD:2A:C6:0C:99:2C:4F:26:F9:26:FC:1B:31:05:D1:FA:8B:4F
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer:       /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial:       0198D5F184F77FAA51C1ACABC795C6874CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: OAQkoGHmYKEF25bArxxSoCkEmqqlDnsm7tsKiUAyIz4=)
                          2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:84:f7:7f:aa:51:c1:ac:ab:c7:95:c6:87:4c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=79dcdd2ac60c992c4f26f926fc1b3105d1fa8b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:7f:66:74:74:02:d0:fe:2b:59:26:02:d6:
                    1d:55:09:a1:58:5d:01:15:0e:e9:48:ce:e4:db:5b:
                    c2:17:52:45:a9:e3:57:53:04:17:04:b5:c0:58:a6:
                    cd:51:73:fa:e3:a8:be:01:c8:5d:ea:0c:16:1c:1a:
                    90:70:ff:43:d9:9c:a5:b7:fe:ba:db:fc:e8:15:69:
                    cb:36:14:b0:41:31:83:6b:bd:42:8e:a5:ab:ea:ed:
                    0e:dd:3b:20:77:f1:d4:5b:07:25:bd:aa:85:0e:1b:
                    27:02:bd:38:95:05:19:0a:e5:c9:11:8a:ec:46:c4:
                    22:36:27:09:fb:ee:f7:bd:83:5d:7e:d3:27:b6:a0:
                    8d:95:8c:bb:95:5e:f3:a8:58:36:12:0d:19:87:d0:
                    7d:5d:30:a1:6f:6e:50:15:9b:3e:67:dc:56:ba:22:
                    cb:fd:bd:c2:5a:e5:d8:09:f7:b2:cc:3d:95:49:14:
                    ce:03:05:aa:b4:af:e0:89:11:6c:af:a5:8a:f5:ca:
                    4e:e1:6e:66:c9:5d:5e:42:f8:24:9b:fe:2b:66:94:
                    01:7b:ad:45:69:1b:f8:53:b0:1c:6c:d7:11:c5:df:
                    94:7d:f0:a0:bd:4b:76:db:5b:4e:6b:90:7b:47:c8:
                    12:5d:b0:e1:db:d3:01:f4:c8:b5:9e:4b:9a:76:8d:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:DD:2A:C6:0C:99:2C:4F:26:F9:26:FC:1B:31:05:D1:FA:8B:4F
            X509v3 Authority Key Identifier:
                keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:01:89:80:e4:7a:4d:89:15:8f:19:1d:09:80:18:18:ce:25:
         00:e7:ef:98:03:65:a0:9f:1d:0d:09:05:c3:d5:c7:18:c1:fb:
         f5:82:31:91:c1:a1:c7:52:25:1b:00:1a:6c:57:ce:d3:4a:67:
         6d:8d:c0:65:5d:e5:59:39:ca:96:8e:2b:3c:28:05:0e:3b:2d:
         d9:9e:27:cf:c3:a5:71:40:a9:3b:cc:4d:f2:a5:62:19:c4:40:
         f4:73:cc:96:ac:65:57:2d:b8:42:43:c9:de:cf:26:9f:4a:9e:
         ff:2b:ae:e9:aa:15:9a:fd:44:21:ec:9f:fa:79:e4:86:3f:8f:
         49:a2:34:c7:04:56:fe:b9:de:35:e3:f0:1f:3a:95:b1:47:ea:
         80:94:5b:91:18:ec:96:b7:9d:d7:de:a2:17:5d:04:84:3e:94:
         19:03:8c:c0:11:76:b1:6f:7b:2c:33:f4:c8:ae:48:6f:95:01:
         00:f1:cd:34:43:fb:2d:8a:38:56:2b:85:db:d1:93:20:10:23:
         0f:88:de:4d:9e:45:4a:4b:d7:12:d3:b6:16:8e:b7:6b:ee:e0:
         18:49:6b:b5:12:a2:d7:78:9e:53:ca:3e:c4:b2:73:0f:13:77:
         6a:a8:d8:3d:47:cb:8e:62:e2:be:87:23:44:62:75:99:87:66:
         2b:ea:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:50 2025 by rpki-client