Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File:                     zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier:          ioVi494FmG3vjgca8Vm4Aqq/vJEpGFMs7ZQhjo4JP40=
Subject key identifier:   EA:E2:4E:D4:F5:D4:87:E9:9B:FD:8A:E6:59:E2:D0:19:78:3C:24:D3
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer:       /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial:       0198D4A7B044639A9AA3662DE85E5C791B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number:          0162
Signing time:             Sat 23 Aug 2025 02:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:16 +0000
Files and hashes:         1: I646M_btsSzN2hgU43In8XScCvM.roa (hash: XbiElIXeBAvzCXqiHxg3yiWmZinPZ2P2LAOYB8cFUtk=)
                          2: VEDYX_cUfJzMWRyMM4Dauca7wqY.roa (hash: emvPGd/BGNmoaOgiTJawr2YtCEYZXYHWYyhS2hE0sKg=)
                          3: YSMyo0r9Sisa_qEUD5bNOCn6J7k.roa (hash: 2e6jr3gF4oxshJJOD15Mpry9Shp0v5NKkIGpPv8Ct7k=)
                          4: lSi0kTGzn2fZQ79DDpFPyNvNhWI.roa (hash: F0jv7qe5DmHgW7kJgMByEcK9/LyeESyPvMnKoboRIjc=)
                          5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: q2Ai5Bd3qvQOL128VB25Hwbv6MCvslWtnf3N5Bt5els=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:b0:44:63:9a:9a:a3:66:2d:e8:5e:5c:79:1b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
        Validity
            Not Before: Aug 23 02:00:16 2025 GMT
            Not After : Aug 24 02:00:16 2025 GMT
        Subject: CN=eae24ed4f5d487e99bfd8ae659e2d019783c24d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:4a:29:ac:67:10:97:18:53:5a:c6:e9:22:
                    c3:75:8b:c0:33:11:11:be:f4:42:cb:a9:2a:89:ea:
                    e7:1a:37:3b:fd:5d:36:b1:b3:26:e8:17:55:5b:79:
                    9b:bf:72:8e:27:a4:4a:6a:29:e0:fc:39:a7:ab:ea:
                    41:c3:fc:16:1f:a7:e5:93:4b:8d:88:9d:30:77:43:
                    99:96:60:84:f0:e4:1d:ab:2b:d9:1f:32:2c:ac:2d:
                    9e:0a:7c:de:72:3d:1d:47:ea:73:c6:c0:3d:76:52:
                    79:ff:31:da:06:89:3b:9f:21:a9:55:80:4f:b6:44:
                    d1:a4:42:d9:c9:06:c9:ed:8d:e2:73:16:70:c9:9c:
                    ea:23:1a:dd:ad:0a:34:74:75:d0:ed:6f:f8:a2:6f:
                    da:75:9c:c3:90:1b:af:e8:01:69:4e:8d:3f:af:f2:
                    b6:39:28:88:9c:68:72:3f:36:81:aa:10:b9:cc:08:
                    49:98:cc:8d:c9:30:f5:cd:ea:df:75:ba:da:66:d3:
                    7a:46:be:1e:48:86:03:0b:e3:aa:b9:ca:b0:6a:64:
                    6d:5d:3d:e7:a1:4c:76:94:3b:d0:16:8f:20:68:b0:
                    f6:8a:bc:e6:41:11:83:cd:78:2f:78:66:9d:53:b1:
                    65:37:cc:04:e2:3a:03:a5:20:5f:d1:2f:c3:47:e5:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E2:4E:D4:F5:D4:87:E9:9B:FD:8A:E6:59:E2:D0:19:78:3C:24:D3
            X509v3 Authority Key Identifier:
                keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:68:32:0f:24:99:c2:7a:e6:5d:e9:a5:ae:0d:64:c7:09:
         eb:35:fb:7c:46:8e:3b:f6:fe:7b:af:17:ab:7d:70:a6:17:89:
         ee:87:ca:47:cc:fc:b2:53:a4:a1:c2:4b:34:f6:41:f3:a8:7c:
         51:0e:5d:f1:0c:c9:69:33:7e:d3:3f:6a:9d:13:38:2d:ed:94:
         27:70:fc:21:d2:60:ce:f3:b4:4a:1e:be:3e:28:fc:3d:de:6b:
         58:6a:51:66:3a:3e:88:55:94:b1:4c:39:af:f5:d0:d1:bb:ed:
         1b:1a:69:80:bd:1a:16:72:d0:79:37:86:a1:d0:fc:81:54:fd:
         e9:8a:1e:ba:7e:9b:90:5b:ea:f0:1f:b1:8a:dd:6b:38:c8:13:
         dc:80:65:1a:f2:90:d3:b7:cb:5c:98:71:24:76:28:c9:86:82:
         e1:b0:3e:91:68:67:33:b8:65:da:df:23:91:8e:e8:78:59:d7:
         07:a4:01:7e:be:8a:89:f8:ab:c4:3d:ed:08:bb:e3:5e:57:13:
         f2:38:c5:93:bb:0e:5f:5c:ca:81:28:83:81:7d:9d:16:8a:1d:
         3c:6c:0a:14:c9:5b:16:86:ec:33:c8:39:86:9b:80:47:d2:81:
         b0:cb:80:7f:86:15:fa:d8:60:70:51:c3:32:38:ab:70:3f:62:
         dd:96:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:51 2025 by rpki-client