Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File:                     vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier:          sC60i+9tnucX2ziL4pJcMk+jwsBbYAFUqJRi+Dko0qk=
Subject key identifier:   FA:CD:44:85:27:72:BC:3C:B2:57:69:C4:AE:BB:69:08:75:9E:E5:15
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer:       /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial:       0198D4728E2B41E77AEB26FBDA907BF13E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 01:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:13 +0000
Files and hashes:         1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
                          2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: Vpy1bRvXsTewxHc8REYNb2xCXcJ6rgkLh6YbcyKMTRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:8e:2b:41:e7:7a:eb:26:fb:da:90:7b:f1:3e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
        Validity
            Not Before: Aug 23 01:02:13 2025 GMT
            Not After : Aug 24 01:02:13 2025 GMT
        Subject: CN=facd44852772bc3cb25769c4aebb6908759ee515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:48:3d:a1:7e:89:ed:82:5d:f0:34:4f:06:
                    f9:ae:16:d8:c9:1c:3f:ce:1c:34:7a:ce:57:42:8e:
                    83:db:60:a8:04:3d:4b:b4:cf:23:26:5a:47:9a:bb:
                    36:55:c1:1b:72:cf:19:d5:4f:10:2a:f4:1e:48:4d:
                    eb:9c:80:c2:2e:47:41:62:1d:84:5e:67:44:57:72:
                    46:bf:b7:b1:3d:50:99:70:df:da:4f:49:ba:d9:78:
                    1a:c1:0e:02:97:0a:42:86:bb:71:04:a9:9a:db:8a:
                    83:94:32:39:ba:f4:ee:2d:cc:25:98:cb:77:22:6e:
                    9d:50:9e:60:e6:2c:38:c7:4c:07:d2:2b:8f:26:06:
                    80:83:cb:6f:3c:7a:02:f9:60:95:8b:13:19:57:89:
                    a2:f2:4c:e2:67:77:92:4f:27:f8:9b:59:dc:ac:0b:
                    b8:2b:2a:97:c8:c5:d5:3a:f3:5a:c0:68:aa:91:0f:
                    2f:e1:88:96:af:c2:5e:fb:d3:29:c8:bd:20:3e:ab:
                    29:b0:92:c0:d6:88:de:76:b9:30:94:9e:9a:d4:5a:
                    97:f3:e7:c2:cd:c0:b9:e4:23:b7:66:4d:a4:91:4e:
                    a2:86:23:88:a3:bc:09:e4:4f:3c:ba:33:dc:a5:3a:
                    15:75:25:ad:f0:05:15:56:a9:8e:6b:8f:18:af:41:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CD:44:85:27:72:BC:3C:B2:57:69:C4:AE:BB:69:08:75:9E:E5:15
            X509v3 Authority Key Identifier:
                keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:53:18:27:18:c4:5f:bf:ef:22:e4:bf:fc:35:78:24:f6:
         66:56:ea:4f:9d:57:09:d4:e8:db:16:8c:cd:ba:80:8f:4b:5a:
         e3:f7:a5:31:dd:56:ab:4e:7e:27:79:02:2c:57:74:91:06:2d:
         35:31:ec:af:e1:a6:be:fb:2a:97:7d:d0:7f:bf:e1:02:d8:79:
         e5:82:11:a1:06:e4:51:38:af:fb:7e:9c:38:f6:5d:54:36:8d:
         66:9b:d4:e8:7c:b9:ea:3d:98:f7:c7:35:ba:18:fe:73:75:4e:
         b1:00:f9:57:c5:b5:9b:03:95:94:48:bb:b8:85:99:f6:79:f6:
         52:79:12:c7:1a:8d:92:cc:92:cc:1f:bf:85:4a:08:4c:af:9c:
         6a:5c:60:69:73:b8:af:69:49:8e:3a:82:ae:51:bb:10:11:5a:
         4f:25:fd:d9:66:89:23:63:fc:20:d8:40:93:16:0a:0a:43:d6:
         6f:b4:12:0e:cb:b2:d6:7c:6a:99:e5:a0:9f:be:d0:3b:ae:a2:
         ca:7a:14:0d:10:e7:28:1d:78:68:21:0d:7a:4b:b8:6b:cc:7e:
         e9:d9:a3:4f:b2:17:34:bf:d1:b5:8a:dd:b3:35:c5:46:06:04:
         8b:d4:f3:15:82:b3:8d:ed:1e:bb:0f:2c:6d:74:6a:7a:6f:c7:
         c9:52:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:43 2025 by rpki-client