Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File:                     uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier:          x7ehRC4abCJ1w5MVkBPTt2a2NUPN2LpB69MbgFkC8Ec=
Subject key identifier:   B0:10:3A:BC:6F:91:8D:38:69:FF:36:1D:94:6B:7D:34:69:76:EE:DA
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer:       /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial:       0198D54E886D8CE3A6D78D696BDADEE9CDA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:30 +0000
Files and hashes:         1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
                          2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: tK9Vn4Xom/jJiC6fgnABFgkoYC1jalD/W9CDyXeGNyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:88:6d:8c:e3:a6:d7:8d:69:6b:da:de:e9:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
        Validity
            Not Before: Aug 23 05:02:30 2025 GMT
            Not After : Aug 24 05:02:30 2025 GMT
        Subject: CN=b0103abc6f918d3869ff361d946b7d346976eeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:d0:1a:67:a5:cc:be:19:4e:72:54:90:3f:
                    01:cf:70:29:b1:ad:9b:53:0c:56:70:ed:a5:97:01:
                    78:6c:6a:fb:20:cc:c7:ed:f8:2e:31:6e:3b:ef:11:
                    8d:15:79:97:58:4b:2b:01:2e:dc:d2:f8:2a:79:75:
                    0e:7e:a0:4f:b5:d6:7c:ec:f7:2f:d9:e8:6b:d7:3b:
                    b7:25:07:b2:23:b1:93:4a:6e:ff:a2:cf:c9:23:6f:
                    bd:4d:ed:37:18:d8:fb:fe:a9:49:b9:c4:ca:3f:58:
                    e7:6d:c8:6b:d8:af:27:a4:8b:e3:78:8a:89:60:71:
                    c1:91:7e:e2:78:37:75:78:80:c4:38:e3:f4:58:7d:
                    d5:42:5d:d0:79:ed:a5:11:62:f8:c0:62:b1:56:e4:
                    5f:ab:4c:df:6e:48:43:6e:05:5a:2f:27:97:84:9d:
                    43:a5:f3:5c:c8:6b:a1:95:59:b0:ee:f5:3a:f4:65:
                    93:f5:13:02:2a:a0:ac:46:e5:28:96:f0:c7:c2:4b:
                    c9:5a:92:de:23:c3:3b:84:9b:16:ef:fb:31:09:2e:
                    93:01:b9:2e:6c:ad:1b:45:89:8d:35:8b:cb:1b:71:
                    8c:cb:67:01:46:a5:a5:a5:d6:d5:c4:47:db:bf:6d:
                    98:e8:4d:ce:8e:93:f1:65:e9:f9:a5:5e:14:67:11:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:3A:BC:6F:91:8D:38:69:FF:36:1D:94:6B:7D:34:69:76:EE:DA
            X509v3 Authority Key Identifier:
                keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:84:89:03:40:a7:43:da:e1:3f:97:de:9f:a0:db:c2:c0:
         f9:be:74:ae:2e:b6:eb:56:f0:b6:81:c7:f3:fc:c0:ff:ec:cb:
         1e:91:36:1c:c2:c6:38:b3:0a:ac:bc:bd:8f:68:a7:8b:4a:66:
         3b:e8:cf:38:e3:8a:60:a8:55:fd:88:31:bc:71:67:44:0d:53:
         59:92:72:c3:57:34:7c:83:41:bc:f3:a6:8a:d3:b9:6c:ae:7f:
         fe:1e:bb:a4:11:c8:38:a7:e9:3b:8f:a6:67:2e:cf:e1:b0:fb:
         d8:86:c3:d5:b0:aa:a9:a3:3d:83:84:ee:60:4b:6e:9f:a2:d0:
         b5:ac:34:c7:9a:35:0a:7c:76:48:21:b7:40:ef:24:a6:21:20:
         33:3b:d6:07:77:87:2c:d5:d6:ac:13:37:3c:9f:f5:15:19:3b:
         5b:4e:55:16:45:05:aa:50:6d:de:00:01:3b:fa:4f:ff:c7:dc:
         52:4e:a8:44:87:3d:92:b7:3b:9a:ee:4c:32:f2:a9:83:de:17:
         ad:fc:9a:78:36:42:5f:48:c1:89:41:a9:7e:4c:8f:19:df:85:
         c7:76:94:48:fb:35:c6:7a:71:de:8b:cf:af:06:75:c4:a3:6f:
         41:3f:ce:da:12:b0:8f:74:f4:a3:a6:fa:eb:08:fd:5b:31:bd:
         93:72:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client