Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          6AmZE1XREmacbZJv+RnCaVq1wg9iAYBBJZZftIOhrDg=
Subject key identifier:   98:91:F7:71:54:B4:47:70:C1:7E:BA:D8:0A:2A:C2:61:64:B8:32:67
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       0198D5BC335B0AA6F6C7333197D7C0AFB720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:17 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: K2vLgyYLDJm4zuHEsvLZaPMHwQ5LrNGYbLO5vUmKVPE=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:33:5b:0a:a6:f6:c7:33:31:97:d7:c0:af:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Aug 23 07:02:17 2025 GMT
            Not After : Aug 24 07:02:17 2025 GMT
        Subject: CN=9891f77154b44770c17ebad80a2ac26164b83267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:21:34:45:ad:fe:d1:2f:a3:e4:75:5f:d6:
                    a5:ef:34:5e:09:53:89:b8:00:43:26:c9:73:9c:4b:
                    ab:3b:71:40:0c:99:14:89:07:00:83:b3:89:83:33:
                    ac:86:12:e5:02:e1:85:78:9f:a2:32:cc:bf:3f:13:
                    e7:98:17:58:53:b3:0d:72:32:e8:88:16:ad:e4:1d:
                    54:01:1e:83:6a:92:95:f3:54:95:35:d8:33:50:40:
                    79:69:5d:68:d7:35:b1:c3:e2:ae:5f:be:e4:65:bb:
                    ac:ed:dc:34:55:0b:4d:b8:93:8d:09:94:87:2e:c1:
                    66:56:0b:0a:a8:8f:99:3c:34:fe:ee:72:c4:4e:53:
                    ba:2d:75:c4:8b:b7:7c:f4:7e:7b:af:6e:ee:24:1c:
                    7b:f0:be:a6:7e:72:fe:d1:51:a8:f6:0e:29:34:c7:
                    a4:cb:ba:f3:39:94:02:9f:50:cf:7a:11:7b:0d:f4:
                    8b:76:c9:6e:14:3d:13:12:7b:6e:04:fd:88:8e:16:
                    29:1a:44:e1:aa:f6:ff:ba:b1:24:48:dc:b9:b3:ee:
                    6c:eb:d1:be:a2:7d:06:e9:26:10:0b:50:76:4a:4c:
                    b9:cd:c4:7d:1a:53:bd:63:b0:03:28:54:9d:ef:f2:
                    0b:1d:4a:3b:50:76:9b:7d:2a:7f:a6:29:56:98:57:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:F7:71:54:B4:47:70:C1:7E:BA:D8:0A:2A:C2:61:64:B8:32:67
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:82:18:39:9d:5d:31:cc:0b:ed:51:27:22:7e:a3:3f:80:
         37:04:75:6d:a1:10:66:9f:fb:1f:e8:0d:2e:39:e0:9f:b5:d9:
         8c:e4:f4:d1:12:7f:58:c9:6b:f1:1b:a1:77:14:f0:12:e9:47:
         93:0c:ea:47:0f:52:8f:8e:13:91:c8:b2:88:db:6e:05:dd:22:
         a7:c5:af:6c:f3:8e:0c:82:96:9d:f0:80:95:09:cf:52:fb:a7:
         f6:22:63:4b:a7:b8:3d:c0:6c:59:eb:85:21:99:55:a2:19:4e:
         52:06:32:1f:76:6c:c9:52:c3:e5:70:0a:92:37:0d:75:af:3e:
         1f:a1:89:b3:06:2d:77:a4:e2:3c:ae:11:cd:2b:16:02:e9:63:
         81:a9:3e:e5:f9:93:48:c5:dc:60:3f:66:60:67:74:e2:a2:2d:
         c9:0f:f0:33:32:df:2f:c2:fa:8b:07:c9:54:4e:9b:ce:92:f7:
         27:f4:f6:a5:fc:08:5e:23:43:3c:48:e8:81:cb:d6:6a:9a:ac:
         b4:6c:c1:d6:71:ce:b8:e1:c6:b7:7a:8e:6d:47:39:b0:f0:19:
         9f:1f:9d:42:ac:a3:cd:45:ed:81:eb:ce:0c:9a:2c:70:fd:ae:
         71:1d:48:90:7d:de:9f:8d:78:3c:3c:60:be:5a:66:43:ee:62:
         61:e1:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:40 2025 by rpki-client