Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File:                     I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier:          ISCeomyRCNp3Qhh+oBD2llisluiTr2SLiJ3scjt9oe8=
Subject key identifier:   19:2C:18:39:49:9F:5A:25:38:5B:13:5F:B0:65:21:61:B1:2B:8D:28
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer:       /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial:       0198D515DE7CC38321729113BE9ACCB96D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:36 +0000
Files and hashes:         1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
                          2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
                          3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
                          4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: rVl1Gx6LP7nnl+tWqxjKNKrhrtLBZ5zkRUboaiNdgsk=)
                          5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:de:7c:c3:83:21:72:91:13:be:9a:cc:b9:6d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
        Validity
            Not Before: Aug 23 04:00:36 2025 GMT
            Not After : Aug 24 04:00:36 2025 GMT
        Subject: CN=192c1839499f5a25385b135fb0652161b12b8d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:02:1e:9c:4d:71:41:2d:ed:4b:71:df:4f:
                    b4:3d:71:45:3d:82:07:c4:47:90:84:ef:05:3a:d5:
                    f6:fb:a1:5c:1a:bd:e5:23:fd:c0:5b:8c:6e:99:cc:
                    01:d9:4e:04:12:78:04:44:ce:84:b2:27:56:d9:bd:
                    14:6e:ba:9d:9a:88:32:6d:d7:14:a0:05:7a:85:14:
                    bc:7a:c1:58:d4:7d:9d:b6:54:83:8b:c4:36:82:fe:
                    cd:a2:94:19:9d:05:38:eb:2f:aa:28:78:14:cd:a5:
                    65:34:fe:5c:5d:b0:dd:a1:fd:68:bf:97:cb:89:b3:
                    31:b1:22:53:06:76:45:c0:e8:c8:fa:cb:90:d7:89:
                    57:7b:c7:7e:ac:4b:98:50:0b:fa:16:87:7a:ce:22:
                    95:8f:dc:5e:82:31:42:81:da:ba:31:31:29:43:4d:
                    ab:9f:36:40:9b:2f:9e:a5:5c:3f:07:9f:2e:91:e9:
                    0b:72:ce:e4:2a:ae:ac:0f:11:c1:1d:81:04:78:47:
                    c7:7f:ce:6c:6b:5a:6a:ee:5b:1c:ab:f5:b4:da:66:
                    1b:fd:5d:5b:d0:55:fe:20:0e:7d:97:fa:6e:e3:4a:
                    35:84:03:cb:6d:86:ae:be:48:0d:04:97:af:ad:c2:
                    f0:79:ca:35:70:b9:3f:0c:8b:35:4f:70:fa:df:ce:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:18:39:49:9F:5A:25:38:5B:13:5F:B0:65:21:61:B1:2B:8D:28
            X509v3 Authority Key Identifier:
                keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:6a:77:ee:57:57:48:11:38:87:84:0d:53:b7:03:94:ae:
         d8:b2:85:0e:8b:d2:b9:11:4d:10:a1:1d:13:49:63:f7:36:78:
         54:12:a6:4e:a5:99:0d:db:6e:b6:7f:e7:f0:d2:35:69:1e:98:
         f7:99:33:d3:a1:13:86:cc:e2:91:f7:04:e2:99:c6:51:ef:20:
         df:08:5d:fa:64:bd:68:b1:2d:b4:bd:a9:db:74:0b:5c:b6:fa:
         3c:bd:fc:10:da:62:5d:f1:ed:5e:07:22:80:89:a6:2f:ab:ea:
         33:ef:aa:a9:60:23:c2:5b:52:b1:20:a9:e3:49:ea:5c:fe:a8:
         47:14:c8:c2:20:31:06:d3:60:83:6b:9f:41:9a:42:3e:53:2c:
         88:5c:48:90:65:56:5b:14:5d:cc:13:90:68:77:4d:91:0a:da:
         19:23:63:c1:1a:1b:57:c9:f8:b0:ff:5a:7b:c0:c2:d9:9d:1b:
         8a:73:e1:08:53:22:c2:cc:ff:02:4d:da:97:52:85:52:6a:a7:
         48:58:30:aa:ff:2d:a0:e8:63:cf:ad:d7:3d:8f:58:00:72:4f:
         be:a1:a0:16:99:c9:8f:ee:a0:2c:f1:23:8b:6b:57:20:f9:1f:
         8b:97:ac:69:7e:45:fb:9a:fc:a7:93:18:f3:83:3f:bd:c2:d9:
         1a:b8:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:02 2025 by rpki-client