Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          OY6LFbLvizDon6qKwM02kHzWNisG0JvaMdPBZ2e7RPc=
Subject key identifier:   57:FC:98:1F:45:8D:DB:55:12:13:21:3F:BE:CC:85:24:E6:F0:FE:96
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       0198D4A7A2964D0E643542D722A71D1D17FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 02:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:12 +0000
Files and hashes:         1: 0JFxVdpJFUr8L1wytHNTgHt6GH0.roa (hash: Z4It6sJtjq7ZXLAf16zLehXpb2J5FINrIxlQfot5juE=)
                          2: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: UKXBrks1+aGFT9cW+qTo5td9Z2wSngHZWErF1pGMhOw=)
                          3: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (hash: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=)
                          4: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (hash: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=)
                          5: rD5WberuF-n7ACpPs11fopy3pmU.roa (hash: QMDAI5BMmpQE5a72W8hznb/16iVEAcS3JU5CmaR0gco=)
                          6: wnjBzzTh1nOLtHn-MycT-V9xs1U.roa (hash: vhvfmbXLzxRQ2h0uOUjGMbl4v8ffZL2j3QGUBdIR1YM=)
                          7: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (hash: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:a2:96:4d:0e:64:35:42:d7:22:a7:1d:1d:17:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Aug 23 02:00:12 2025 GMT
            Not After : Aug 24 02:00:12 2025 GMT
        Subject: CN=57fc981f458ddb551213213fbecc8524e6f0fe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3e:f8:75:56:89:d0:b5:3d:b6:97:4d:77:11:
                    92:84:bc:2d:2e:75:5a:d7:24:ac:a4:c6:b1:f2:9b:
                    27:b9:04:8f:89:42:7d:22:da:d4:31:90:e5:80:e4:
                    b2:ee:e7:da:e3:e4:c9:75:50:ab:d1:43:b5:22:c6:
                    b4:cb:8a:4b:2e:43:0b:e1:72:b6:e8:3f:9c:30:3d:
                    7b:45:66:80:23:c4:c3:31:20:12:f2:9e:1b:fa:52:
                    19:e7:a0:cb:3f:14:fa:ad:92:30:29:42:58:2c:f7:
                    d9:80:99:fb:ac:9f:42:79:d8:8a:a9:17:0a:18:a2:
                    be:f0:93:c0:a2:ab:28:94:fb:0a:e3:31:e9:8f:68:
                    a0:58:c4:3c:e1:df:ef:ad:e4:f4:69:8a:be:c2:cd:
                    b1:13:a2:a6:04:b0:64:71:f6:86:b9:e2:56:35:21:
                    bf:20:b5:55:7e:2b:90:ba:d6:a3:60:62:9f:01:39:
                    c1:d7:12:7a:21:57:ff:a4:f5:71:d3:e6:04:8f:32:
                    38:6a:82:ff:3d:28:55:f0:1e:14:3c:09:e6:fe:47:
                    a2:16:c2:64:c7:97:09:0d:bd:c3:85:ec:c0:2e:aa:
                    de:19:66:db:2d:bc:a3:d1:e4:fa:fe:72:a5:78:01:
                    ee:30:47:05:00:51:19:03:e8:ec:2f:42:ef:79:2d:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:98:1F:45:8D:DB:55:12:13:21:3F:BE:CC:85:24:E6:F0:FE:96
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:51:35:5e:84:43:5d:3e:3b:1e:b9:34:0e:48:91:13:bc:
         dd:50:d9:6a:84:4b:2c:7f:4c:96:a7:33:61:1f:c7:fc:1d:09:
         a8:8b:93:2a:c6:da:73:a8:f2:89:15:67:e1:3a:b9:35:35:65:
         82:04:ac:ef:56:b8:0e:5d:46:96:3e:9f:d9:23:ce:c6:1c:65:
         eb:97:03:e1:a5:73:64:0d:b0:ca:02:5b:01:c5:59:09:56:c1:
         5a:c8:53:75:20:d2:d3:6d:90:4d:8a:45:5b:1d:b5:36:77:47:
         fa:d5:fa:22:1d:19:80:5a:66:86:d9:5b:a9:64:94:9e:08:72:
         29:8a:dd:55:d2:c6:27:5d:b2:df:d9:53:5f:0e:e3:05:29:c1:
         cc:93:8e:7b:ba:77:51:1a:c6:4a:a0:4c:5e:4e:03:71:91:b5:
         72:dd:e0:d9:9d:fc:a8:4a:a8:5d:ef:88:a3:fd:37:74:7e:14:
         06:a5:2b:9f:0c:c4:02:39:30:0f:cb:9d:09:fd:e6:47:ea:a7:
         42:49:17:7f:6a:48:97:b6:90:58:d0:a4:b1:a2:e5:fa:0a:2e:
         fc:00:8b:f7:1f:e5:d1:81:24:46:4d:0b:4c:cb:2e:13:ab:a7:
         6a:1c:d6:e5:44:cf:dc:bc:1a:07:d9:8f:bd:82:97:28:93:ea:
         57:f2:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:16 2025 by rpki-client