Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File:                     T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier:          59hl2/IaO5i5y+FbwVfkOC50q+V7KQ2zaNfgm9DI+uw=
Subject key identifier:   76:27:48:E0:4D:76:15:02:62:41:13:CD:79:4A:6C:C0:CF:03:17:C5
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer:       /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial:       0198D473049E422D537C896DCBF164843B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:44 +0000
Files and hashes:         1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: 3sGUnEPBgb9X38IxCODCakjeHavfk9BI8Y7IwbrCBiM=)
                          2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:04:9e:42:2d:53:7c:89:6d:cb:f1:64:84:3b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
        Validity
            Not Before: Aug 23 01:02:44 2025 GMT
            Not After : Aug 24 01:02:44 2025 GMT
        Subject: CN=762748e04d761502624113cd794a6cc0cf0317c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:77:16:97:5e:c9:80:ab:05:72:c0:55:5c:
                    b8:ee:45:32:83:f5:47:65:bc:39:75:ea:39:17:54:
                    14:f5:16:60:66:d5:88:e5:6b:61:7d:1b:ea:68:25:
                    53:58:4c:57:ef:9e:5b:26:46:0f:9d:68:e4:d5:c6:
                    15:5a:5c:50:35:55:53:5d:c4:cd:66:5f:c6:da:16:
                    3a:e4:b1:c5:cb:bd:b6:f8:ad:76:47:e9:d8:0a:45:
                    2c:88:f1:9d:d4:69:6d:e0:64:1a:1b:f6:9a:f8:d8:
                    e5:e7:99:8e:6b:71:c6:6b:6b:f1:fd:19:8d:ec:3f:
                    31:c4:bc:52:e6:92:9f:d1:9f:70:36:0e:91:af:c9:
                    66:d6:f6:fc:bb:fd:63:79:73:6b:6a:10:40:8c:2b:
                    5d:e9:80:d4:97:14:92:cd:a6:8e:41:0b:51:8d:ad:
                    4b:36:d4:10:24:e6:fa:2a:3d:c7:a1:bb:52:9a:15:
                    13:57:2c:24:5c:52:b2:1d:02:c4:42:9f:55:a6:50:
                    96:60:c3:37:cf:29:c8:95:dc:44:44:fd:c2:1c:a8:
                    8e:32:80:81:2b:d3:85:88:ec:75:f2:e5:1a:da:12:
                    32:d8:0d:38:d4:ab:c7:04:1b:3e:34:a9:8b:d4:e8:
                    a9:fd:86:53:af:ea:98:e8:2b:cb:05:2d:69:e4:0f:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:27:48:E0:4D:76:15:02:62:41:13:CD:79:4A:6C:C0:CF:03:17:C5
            X509v3 Authority Key Identifier:
                keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:42:60:01:59:04:e9:01:dc:0b:42:1f:1c:a2:fe:06:7f:b8:
         6c:3c:b5:27:44:bc:f8:1e:b2:8d:00:2e:b1:38:c1:16:da:ff:
         b4:69:67:cb:07:e1:67:f5:f9:57:12:78:94:bb:4f:30:9e:1a:
         0d:b7:77:0f:01:dc:71:0d:9e:93:33:ba:a8:54:11:1c:90:94:
         bd:ce:f8:d8:ce:fd:db:41:39:04:45:6e:fd:e0:2d:1b:63:5c:
         61:53:75:fc:94:0c:6c:b7:1e:47:41:05:0d:64:f9:b6:cc:d4:
         c0:42:da:00:0a:95:da:e7:ef:73:c1:27:43:f1:19:69:f5:33:
         52:36:34:21:60:e5:23:00:9e:8a:e4:1a:09:f9:9d:57:f1:ac:
         32:20:59:c5:a5:35:05:69:82:e5:ed:c2:9a:c5:57:ef:a5:71:
         e6:fe:cd:c3:c7:ff:cc:16:25:ad:e7:fd:b8:e0:40:ab:49:fc:
         45:4e:3e:c6:e2:2d:97:b0:9f:33:27:b4:2c:2a:53:37:21:0d:
         f9:45:0c:90:81:fa:b4:84:04:1c:ea:4e:d0:fc:c3:6a:5d:c4:
         8f:de:ec:1d:5e:af:52:de:01:61:06:ac:ad:e3:6e:57:76:d1:
         e7:5f:cf:4a:77:33:1b:8f:6e:7f:3b:72:47:0e:89:cd:6e:17:
         8e:b0:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:56 2025 by rpki-client