Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File:                     Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier:          TVKF80eRaqkLUmOm/7ro7Dc1r7YOW4JXsGUzQJPILAc=
Subject key identifier:   E4:1F:F7:38:FE:DE:67:7D:29:2A:64:79:5E:59:38:9F:E4:10:05:7C
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer:       /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial:       0198D4E0D85058BD09B6CABF3F6C75DBD4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:41 +0000
Files and hashes:         1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=)
                          2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: yuZh3xmMXdMCW5D5m6MZWCY7mGuASUGHj5SpfWt6xpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:d8:50:58:bd:09:b6:ca:bf:3f:6c:75:db:d4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
        Validity
            Not Before: Aug 23 03:02:41 2025 GMT
            Not After : Aug 24 03:02:41 2025 GMT
        Subject: CN=e41ff738fede677d292a64795e59389fe410057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:34:63:15:3b:15:d2:cd:ae:d2:0b:08:5c:
                    24:1d:de:d2:13:20:71:b7:c4:c0:f9:02:05:dd:ab:
                    9e:a0:58:90:3e:9c:01:31:59:81:93:ae:ff:32:82:
                    a5:61:e2:d2:f0:9b:20:1d:19:21:b2:22:b9:b8:0e:
                    bf:41:29:3b:a7:cc:7e:c8:1a:3f:8c:62:3d:54:bc:
                    d0:b8:c9:bd:24:11:8c:87:5e:9c:7e:3a:d2:33:fc:
                    64:22:34:d8:66:92:90:94:42:6a:84:56:89:6c:7c:
                    2a:2c:ad:e9:63:af:f0:f1:50:98:cc:34:24:70:11:
                    6e:a7:48:00:59:dd:d5:4e:ea:c5:e0:8c:a3:e6:b9:
                    0e:f7:4b:3c:70:db:51:50:10:9d:bc:76:ab:e2:7e:
                    27:24:6e:0b:99:b8:cf:18:dc:64:f5:97:de:d6:b9:
                    0a:a5:77:b3:97:fe:0f:de:fb:ad:fe:e9:87:26:8d:
                    2b:45:56:29:f3:57:08:17:1c:c4:12:98:37:d3:1d:
                    37:a9:4c:d9:d3:e2:de:23:03:7c:8f:73:3b:a0:92:
                    5d:a6:70:4f:1b:19:00:a9:35:85:07:1b:45:a9:b1:
                    b6:4d:b6:26:69:d8:e4:48:36:e0:6d:6e:37:80:40:
                    30:b2:e5:34:be:90:75:70:82:9c:a1:12:db:51:d3:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1F:F7:38:FE:DE:67:7D:29:2A:64:79:5E:59:38:9F:E4:10:05:7C
            X509v3 Authority Key Identifier:
                keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:a5:1b:f2:9e:81:37:f7:39:a5:7f:19:22:e6:bd:f8:84:
         3b:de:9c:5a:8f:a8:8c:af:2e:1b:4b:c8:85:f2:31:17:7d:0b:
         55:4a:c8:80:8b:a4:ad:23:22:ab:b8:a6:00:cf:a6:33:94:ac:
         15:44:b2:0f:db:6c:1a:03:85:03:86:0d:60:54:fd:f5:ce:1f:
         7d:e2:8e:0d:6b:e4:c9:8c:e7:fe:06:c4:bc:bc:f3:65:e8:22:
         5e:fc:1b:06:ea:d5:83:1c:60:91:5e:1a:62:61:75:2c:a4:7a:
         2a:71:73:97:72:c0:b3:9f:69:65:e5:66:aa:d7:de:e2:ce:08:
         8a:23:ba:a9:38:9f:a9:82:c9:d8:99:55:d1:e1:08:63:d6:6e:
         87:1f:18:f7:8c:c3:38:69:3d:59:1e:99:87:f2:b9:cf:89:62:
         5f:95:50:6b:c3:f5:0c:11:67:25:af:c3:1f:58:3a:9b:73:86:
         3d:75:cf:99:1f:1f:5d:d0:9d:d4:01:fb:b4:ed:f4:75:9f:90:
         88:66:7b:93:ee:6f:7c:bb:5f:14:93:1c:c3:aa:e8:78:ee:60:
         2e:c5:fb:bb:13:fa:cd:b8:b4:cd:fe:59:ec:cb:45:3b:14:4f:
         09:23:be:f8:fe:0a:29:c1:31:17:65:65:0a:8a:e3:a6:f5:64:
         47:80:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:24 2025 by rpki-client