Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File:                     tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier:          ab6u5XK2CceeYNMDveI/RuxRXQYS0HBp6/5h5jpyZXQ=
Subject key identifier:   1C:8D:5E:A6:0F:22:46:3D:F1:54:C3:58:D2:04:46:86:96:9B:55:70
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer:       /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial:       0198D6CDE89C7009DF5434ACDC5465590D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 12:01:15 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:15 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:15 +0000
Files and hashes:         1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: ntcppxBf1DuFV9ynWe5jcInxt27Yq751S2W/t6NXEm4=)
                          2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:e8:9c:70:09:df:54:34:ac:dc:54:65:59:0d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
        Validity
            Not Before: Aug 23 12:01:15 2025 GMT
            Not After : Aug 24 12:01:15 2025 GMT
        Subject: CN=1c8d5ea60f22463df154c358d2044686969b5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8b:04:d1:ca:06:91:85:76:74:61:86:d8:59:
                    37:41:3f:ee:df:1a:08:7b:9f:3c:1f:a6:01:00:ee:
                    80:a9:15:70:72:9a:2b:51:b7:44:3b:c5:d3:16:9d:
                    7a:7d:f6:cf:20:48:ac:fb:36:6e:8e:1d:18:15:96:
                    bc:d2:c4:5d:5e:3d:51:f3:63:71:a0:72:3f:c2:68:
                    57:1e:46:9d:4e:4e:a3:df:14:70:22:e1:1f:af:94:
                    a1:1e:2e:34:c3:59:bd:92:38:f9:2b:d2:d5:91:60:
                    f8:a2:7e:b1:69:90:f2:47:dc:66:33:f1:fb:44:8f:
                    ad:9d:46:20:ec:57:d2:89:30:0f:0a:ea:39:73:04:
                    8b:7f:e7:25:e3:a2:06:0c:59:fd:5f:2b:9d:04:3b:
                    33:20:14:17:6b:44:85:55:f6:c9:13:d0:56:6c:4a:
                    7a:a3:c3:40:9d:be:c6:dd:9b:fb:d3:0b:1e:76:05:
                    c9:02:9a:e8:99:2b:84:59:7e:d8:21:a9:c8:4d:54:
                    34:a9:0e:93:d3:74:12:50:32:d8:95:4d:bf:8d:b6:
                    82:fd:b4:01:6c:4a:ec:00:4b:5e:44:19:87:38:5b:
                    81:45:77:94:e1:c9:de:46:bb:c5:66:f2:12:44:d2:
                    d3:62:65:f0:1a:9c:17:6b:48:01:a2:d9:29:2a:04:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:5E:A6:0F:22:46:3D:F1:54:C3:58:D2:04:46:86:96:9B:55:70
            X509v3 Authority Key Identifier:
                keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:59:b4:c0:e4:bd:62:76:82:1e:b9:07:94:f6:ef:0b:ac:
         f7:10:65:bd:25:c4:d6:dc:28:be:c9:a6:c5:02:d1:7d:eb:ee:
         16:88:30:fc:58:75:63:79:98:54:01:bb:e5:49:1a:28:cf:49:
         38:b6:76:94:86:61:7f:1f:3b:f3:e1:2b:3e:07:b3:aa:7a:20:
         1a:55:00:99:bb:4c:3c:6e:7c:04:56:bf:b4:72:43:b4:ba:c9:
         ac:36:32:c4:f6:e8:80:f0:18:a2:5c:53:62:a7:3e:49:f5:24:
         c4:59:9d:f4:5b:c5:48:32:ca:1f:69:fd:19:f6:11:59:62:31:
         3e:51:a3:fb:2b:cb:b4:60:66:90:44:93:42:5e:a1:82:5b:4b:
         35:46:50:20:28:fe:c0:d3:4e:52:d9:db:f6:ff:07:43:cc:64:
         b4:d0:aa:15:c3:9c:3b:33:a3:14:d7:2d:be:3a:5d:38:f2:69:
         bd:14:40:80:d8:77:86:92:f0:f3:01:db:01:f1:1a:51:53:84:
         24:2d:55:06:1c:c5:a5:ff:9a:9f:3c:00:1c:ae:e2:13:f3:cb:
         f0:c1:7d:d4:93:0b:c1:3b:1d:60:4e:40:40:2a:90:af:05:67:
         57:ad:66:c4:69:74:4f:cd:4e:23:3a:7a:b1:85:9c:7e:27:8d:
         91:b4:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:21 2025 by rpki-client