Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File:                     cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier:          MpBD996Bct8JpDZy+tK86rkFtwebxoMtRdN61Chro7Q=
Subject key identifier:   9D:15:30:50:57:C7:92:DB:BD:33:33:92:F2:F8:BC:A9:55:F5:81:07
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer:       /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial:       0198D4E038DC48CB3F9C6D38C03C5787AB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:01 +0000
Files and hashes:         1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=)
                          2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: UNru2+GWpM5Q6Xu5c0k6ItxfyuyBgf2PqF3gXuWuU2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:38:dc:48:cb:3f:9c:6d:38:c0:3c:57:87:ab:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
        Validity
            Not Before: Aug 23 03:02:01 2025 GMT
            Not After : Aug 24 03:02:01 2025 GMT
        Subject: CN=9d15305057c792dbbd333392f2f8bca955f58107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:93:63:c5:cc:49:97:3b:41:31:be:43:70:
                    7c:ab:f5:65:c5:34:f4:80:bc:e1:9f:4f:53:15:68:
                    5d:4f:90:a4:31:36:57:fc:f2:5f:41:ff:81:ca:1f:
                    69:60:dc:a6:27:b4:d1:75:96:00:55:0a:56:90:c5:
                    e2:39:16:56:56:21:e7:65:18:5b:b0:2d:79:0e:2b:
                    98:49:08:f1:bd:8b:75:59:85:21:dc:45:1f:40:85:
                    a3:d2:be:aa:c7:91:40:47:57:ee:e3:85:5d:a0:43:
                    b7:6c:3f:23:07:eb:d8:3d:1b:8b:c3:e4:e8:02:00:
                    61:b4:8d:c0:cd:56:4b:22:51:9c:3e:7b:ee:77:0f:
                    85:b2:eb:08:5c:be:85:0f:e4:72:7e:1d:44:7a:68:
                    05:2b:ea:92:f2:0f:7c:9f:8c:81:d9:bc:93:8e:38:
                    cf:ed:a3:4f:89:20:72:9b:35:aa:a1:b2:f2:ee:88:
                    4c:f8:01:f6:a4:b5:3c:3b:7b:11:71:31:91:35:74:
                    14:a1:82:31:05:19:f8:1a:e3:ae:74:a3:ad:a7:ad:
                    f7:9f:db:27:93:e4:e9:ac:9f:3d:00:35:c0:f5:77:
                    26:8b:ce:a7:4b:b3:9c:25:e2:50:2d:d3:e1:31:12:
                    ef:d2:77:7d:d7:48:a1:3d:47:4e:20:1d:cb:f3:3a:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:15:30:50:57:C7:92:DB:BD:33:33:92:F2:F8:BC:A9:55:F5:81:07
            X509v3 Authority Key Identifier:
                keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:67:87:18:70:38:42:e5:f8:36:04:cc:25:dc:fe:30:58:8c:
         e0:f3:d4:6e:39:ff:c4:63:1f:83:f0:45:ea:18:1c:5c:08:a7:
         d8:63:64:b9:93:43:d4:18:e9:b0:61:ca:7b:09:67:69:4d:e4:
         4f:06:51:37:82:5a:ac:0b:ad:57:1f:60:6e:55:10:4b:48:e3:
         da:67:7d:9b:dd:89:dd:65:f4:90:8a:fd:56:ff:a5:c6:4d:e6:
         2a:65:83:c7:e8:d3:cf:fe:35:61:0d:7a:35:61:3d:81:52:09:
         db:8e:89:ee:5a:c0:d0:d6:7b:db:83:ab:d8:3c:28:0e:db:85:
         0f:8c:1a:72:cf:e2:7c:48:65:91:ec:ac:89:0c:f2:ee:45:51:
         43:f7:6c:15:e1:87:7b:0f:1b:34:45:ba:0b:cc:3c:86:d8:9e:
         ff:95:e4:f5:d9:ea:dc:e3:0f:ee:44:4a:ba:09:fe:8c:3d:b1:
         73:b3:78:30:82:93:20:23:6f:4c:34:98:1f:00:57:ce:ed:e4:
         fa:ea:03:ac:1f:e9:5e:bb:a4:da:df:be:2e:dc:ac:21:07:33:
         08:7a:10:1c:e3:e3:bb:92:d0:cb:36:5d:47:ff:d3:5d:8b:0c:
         a9:46:f1:72:14:ea:14:21:81:a1:53:06:ab:3e:29:61:90:9c:
         bd:e1:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client