Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          xrrD4YDCSuq04eUvsRySfY+mCypVpD12DIRwDF8I/B8=
Subject key identifier:   1E:24:86:9E:BE:EC:C7:EB:BB:58:FF:4B:EC:94:EE:04:95:2F:55:10
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       0198D4E0B53E06A3EA3AEC24E349B6B4D6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:32 +0000
Files and hashes:         1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
                          2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: yaZRAyemgbIq9BZBjpg+8VOSN1AdwjFTxIEmtMtTnhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b5:3e:06:a3:ea:3a:ec:24:e3:49:b6:b4:d6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Aug 23 03:02:32 2025 GMT
            Not After : Aug 24 03:02:32 2025 GMT
        Subject: CN=1e24869ebeecc7ebbb58ff4bec94ee04952f5510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:e1:e4:47:52:1e:97:f9:4c:25:bb:cf:8a:
                    c6:a2:83:50:e7:5e:32:51:e3:86:f8:6f:5b:e3:7b:
                    28:5e:42:6c:cf:f7:95:9e:59:c3:64:4b:7a:ba:37:
                    cd:05:08:75:d7:5f:ad:4e:d5:07:3d:6a:ff:d5:24:
                    71:15:d5:5f:6f:66:55:33:c7:c5:76:c9:c8:1b:e0:
                    e5:f1:d4:96:78:b6:63:af:e4:71:22:c7:a7:7f:bb:
                    ee:78:3e:34:18:70:f4:d7:0c:60:b2:46:e7:34:f2:
                    b4:40:a3:e7:f3:22:f8:9b:78:cf:35:f4:3a:0f:ec:
                    73:45:4b:a5:eb:a9:6f:aa:9f:68:13:9e:9a:43:78:
                    27:f5:09:2b:73:95:f0:c3:08:6b:b7:18:38:44:48:
                    b3:54:6a:93:ac:8e:9a:84:0c:e7:df:0e:db:1a:08:
                    42:41:6c:ea:27:9e:4c:73:e0:a5:82:f7:c7:08:e9:
                    15:2b:1e:29:c8:4c:35:50:32:4d:14:49:6b:be:e7:
                    7b:5f:de:ac:01:69:af:db:c4:97:3c:0f:2f:6a:cb:
                    65:46:51:55:88:39:a8:8f:38:86:b0:b0:a9:6d:d3:
                    74:31:e7:50:e9:d0:76:1a:0a:8b:73:74:b9:c9:14:
                    b3:30:6f:58:91:8a:65:d5:f2:8d:82:a9:b9:af:ac:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:86:9E:BE:EC:C7:EB:BB:58:FF:4B:EC:94:EE:04:95:2F:55:10
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:68:e3:fd:ce:1a:e7:3b:31:2b:f3:69:cf:7d:b2:84:f8:e9:
         65:f0:20:ac:cf:3c:a8:54:27:2c:3d:15:a7:0f:ae:ed:78:d6:
         a3:bf:aa:cc:c6:39:80:cd:c4:26:29:0a:15:72:04:27:47:3f:
         22:e8:1c:23:68:fa:ae:47:08:17:23:0a:70:21:a0:a1:89:24:
         cd:53:cc:60:0d:95:4e:a8:49:7f:a8:50:5d:9f:40:bf:e8:eb:
         e3:e3:e1:13:34:12:cc:e0:ce:e5:09:15:56:65:1f:69:ab:20:
         2a:ce:3b:77:95:ea:67:96:08:bd:2b:88:a0:f0:36:7d:c4:91:
         22:01:89:5b:c8:90:06:bd:b8:21:33:77:f9:b8:f0:d7:b5:de:
         30:ce:1b:f0:ac:8f:5b:44:f3:3a:53:51:48:c4:f4:25:32:38:
         a8:db:26:b6:f8:45:3d:7f:33:8b:60:38:50:d4:74:10:ce:93:
         2d:99:f2:70:c8:0b:9a:83:f5:90:0c:d2:f6:ab:2f:64:23:20:
         09:0f:f6:29:51:e1:c9:0c:f3:2a:de:c7:03:a4:ea:96:ca:eb:
         c8:60:32:b8:38:7c:f1:36:ea:00:ba:79:7c:03:13:69:fc:22:
         e8:78:bf:9c:51:2e:20:56:8e:d7:cc:33:3c:16:08:38:06:45:
         9f:10:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:29 2025 by rpki-client