Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File:                     R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier:          aK0oe75lC4PtNJyM/WzWKBaUTiUZvwG8ZVnO4Ql1ko0=
Subject key identifier:   62:D9:D5:29:A8:1F:70:2F:6D:BA:E2:F6:74:E4:4D:6A:28:CB:7C:D1
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer:       /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial:       0198D69874E7B8F3E2E15B1BE31E837CE51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 11:02:52 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:52 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:52 +0000
Files and hashes:         1: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
                          2: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: sietGTQd+5rvrKt3QiLE7dt+vA3wt+3Opc1YKJ5IW78=)
                          3: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
                          4: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:74:e7:b8:f3:e2:e1:5b:1b:e3:1e:83:7c:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
        Validity
            Not Before: Aug 23 11:02:52 2025 GMT
            Not After : Aug 24 11:02:52 2025 GMT
        Subject: CN=62d9d529a81f702f6dbae2f674e44d6a28cb7cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:ac:e7:ab:fc:0a:09:9a:6e:56:b4:31:e1:
                    b5:53:79:e4:c8:8e:01:47:a7:d7:ff:b7:26:37:8f:
                    e3:f9:61:dc:52:a5:70:1c:3e:e8:77:9e:13:b6:21:
                    5b:ea:2e:98:b9:ad:17:3c:85:b1:4c:27:54:03:e8:
                    d5:e1:2d:97:2c:9e:c6:00:bc:fd:e4:14:a3:84:4a:
                    37:7f:5a:f7:e4:28:49:60:d2:61:ef:36:36:78:bb:
                    54:16:dc:36:45:9f:ff:9d:69:f6:0e:a3:81:a4:11:
                    f9:75:35:ed:82:83:29:ba:36:f8:4e:6f:40:47:aa:
                    a4:25:89:a2:66:3a:43:54:b0:67:ca:c1:5d:7c:7c:
                    6e:29:82:f4:77:ba:83:68:50:b5:d9:6a:69:e8:da:
                    7c:e2:ea:56:a4:44:56:60:d7:a6:4f:2f:4b:c2:37:
                    28:45:56:63:45:35:9c:f7:47:a7:ec:41:e7:75:28:
                    2f:37:4c:58:91:a9:f8:c5:03:bc:f9:8f:92:c1:93:
                    d7:a3:62:2f:ca:b6:34:89:1b:4e:6c:31:15:3c:74:
                    e7:03:aa:50:cd:ce:de:66:e1:e2:f7:bc:f3:22:7f:
                    e2:b6:51:da:f8:ca:a6:8f:d0:e2:94:5a:77:5f:62:
                    94:00:dd:fe:31:dc:cb:d8:6d:c8:04:b7:98:3f:d3:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:D5:29:A8:1F:70:2F:6D:BA:E2:F6:74:E4:4D:6A:28:CB:7C:D1
            X509v3 Authority Key Identifier:
                keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:77:94:1a:9d:27:0f:0a:f7:1f:6f:14:a0:13:44:3c:a5:
         c0:9b:53:fa:53:ef:a5:f2:4c:8e:f9:37:22:b0:24:78:91:c9:
         91:86:38:ee:a7:3d:e4:b0:f1:9a:5e:43:b5:de:0e:bb:b2:f7:
         c8:51:e7:c6:93:0f:d4:65:32:90:68:59:29:83:59:98:41:40:
         b1:f3:a2:c6:79:9e:1b:6f:aa:e8:82:79:0c:4f:02:d8:b8:60:
         1c:09:b9:9e:ee:35:21:0f:3f:95:39:c0:8a:ee:54:79:9b:ff:
         bb:3a:a6:9a:12:74:3b:15:72:27:8a:34:67:6e:7a:13:1d:e0:
         47:8a:b2:95:ab:c5:95:d4:c0:af:fa:7d:76:56:b1:7b:bc:33:
         52:5b:33:cf:a1:34:fa:d0:fd:00:3f:4a:a7:96:b9:22:b2:59:
         69:54:f7:d1:08:14:7e:b0:74:33:b6:ef:95:88:f6:88:52:27:
         43:f1:cd:51:cb:28:62:3d:41:54:c1:99:d5:fc:9d:5f:b0:38:
         22:f4:dc:97:d9:3d:d6:04:29:9e:50:ef:ac:03:83:a8:b2:62:
         32:59:4d:c5:60:76:25:9c:3b:72:73:2a:76:91:69:ef:1d:ef:
         b0:b2:b5:cc:88:b8:89:56:74:ee:0b:9d:fc:af:b5:76:5d:be:
         85:d1:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:55 2025 by rpki-client