Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File:                     bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier:          O6WXUwj3vwPeYGfUmBMjOdFG/mHtf2+azxVzKbVN/+E=
Subject key identifier:   04:54:AB:E6:98:0E:BA:26:41:98:FA:46:FE:AE:F3:A8:B9:AB:27:EE
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer:       /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial:       0198D515EA5031C203B9FF09799B6231D071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:39 +0000
Files and hashes:         1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
                          2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: /GFCnguKdW33zN/is6oXtf4zOKfhx4+XZwlA2NIgoVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ea:50:31:c2:03:b9:ff:09:79:9b:62:31:d0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
        Validity
            Not Before: Aug 23 04:00:39 2025 GMT
            Not After : Aug 24 04:00:39 2025 GMT
        Subject: CN=0454abe6980eba264198fa46feaef3a8b9ab27ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:86:e0:98:0c:b7:74:08:c6:52:e7:0c:92:
                    54:43:62:53:b8:48:d2:41:64:68:95:47:50:c5:90:
                    ed:fc:62:a1:62:50:40:3c:cf:e8:7b:e2:b6:4a:16:
                    63:88:fe:51:c4:b8:48:d7:d8:29:db:fb:42:25:77:
                    5a:6a:80:cb:8d:62:f5:8b:2c:b6:41:95:42:2a:54:
                    2a:5b:fa:98:9c:04:61:b8:74:35:ee:95:6f:73:ef:
                    06:69:7c:d7:f8:45:9e:a2:56:c9:be:25:82:dd:3b:
                    9c:b3:99:50:33:2e:cf:96:94:3d:6a:d0:7d:c1:48:
                    97:3b:3c:56:97:b3:a3:37:87:d7:57:ab:aa:d8:62:
                    53:25:da:9c:92:19:5e:11:36:1f:23:62:bd:77:32:
                    49:68:b1:b3:f3:af:9f:68:dd:bc:85:dd:3c:d4:60:
                    0d:02:d3:3f:d8:06:42:c3:0e:75:f8:b1:7e:a1:15:
                    d8:62:74:8a:e5:ad:f7:f2:4f:17:ba:f1:c0:72:85:
                    5f:09:8d:c4:6e:c6:26:f6:19:a6:9d:9f:83:ab:70:
                    a5:ea:1a:bd:00:5a:1a:00:1f:a5:08:05:42:ad:7e:
                    e7:97:99:f7:e7:1d:14:7a:17:d5:65:c7:be:de:98:
                    77:05:5f:64:af:c6:12:b0:26:00:2e:22:27:d7:40:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:AB:E6:98:0E:BA:26:41:98:FA:46:FE:AE:F3:A8:B9:AB:27:EE
            X509v3 Authority Key Identifier:
                keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:53:ce:0e:b2:72:43:cb:d8:6b:dd:56:f5:87:35:3d:48:90:
         d3:9c:ff:5f:d9:f4:03:7e:ae:69:46:c1:0e:c1:92:51:fe:b9:
         3c:77:06:cb:a7:a6:9e:e4:6c:05:a2:6f:2e:22:30:ef:9d:1f:
         fb:df:f8:ca:0b:bb:07:fb:c5:18:4b:97:9d:9e:b8:8b:79:23:
         5d:30:b5:25:f6:30:c1:47:e0:f6:d9:1a:af:a1:12:d0:e4:7d:
         51:bc:87:e7:67:7d:8d:75:be:ad:85:2b:5a:9f:b8:08:2c:ea:
         a4:16:f0:48:10:0d:29:a2:89:96:ec:3a:bb:26:e8:07:57:a1:
         18:b4:6a:13:07:84:f4:d7:cf:2b:e9:db:ae:d6:90:b2:84:98:
         6b:76:d9:c5:5f:c0:2e:07:41:25:72:89:3d:5f:0d:0a:6d:a8:
         51:9c:71:41:07:55:1a:21:a0:2f:22:77:2c:10:83:c3:e4:35:
         9e:9e:35:95:b7:e3:4c:91:06:01:59:13:31:df:d9:e2:d2:6b:
         8e:e1:23:a4:e3:fa:61:b8:ed:c4:f4:a2:f8:37:83:5f:95:19:
         67:47:90:4c:a4:59:37:fb:01:88:54:69:cf:34:d2:41:91:91:
         63:9b:28:23:4c:5c:b5:61:7f:a6:7c:51:44:b2:28:df:d0:51:
         5e:29:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:16 2025 by rpki-client