Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File:                     fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier:          BETxIkeVzsHcmKz/cxT5+uyEcNlro84swJ3/yddIefk=
Subject key identifier:   01:CC:29:2C:D0:48:65:5D:63:AE:F4:F2:CE:41:2F:F5:E3:92:4E:60
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       0198D6980B99E9EDB10348B3A936E5C1D2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 11:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:25 +0000
Files and hashes:         1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: y7DzBNWPytVWdalQPHI8DCxmrcuy1LbJrY43JT/8jo8=)
                          2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:0b:99:e9:ed:b1:03:48:b3:a9:36:e5:c1:d2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Aug 23 11:02:25 2025 GMT
            Not After : Aug 24 11:02:25 2025 GMT
        Subject: CN=01cc292cd048655d63aef4f2ce412ff5e3924e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:7f:fd:58:3c:88:2f:f2:b9:74:24:f9:9b:
                    17:f9:a8:3d:03:86:ab:a8:2e:57:af:c4:df:da:74:
                    dc:b4:2b:9f:c3:6b:23:1f:b1:07:41:60:91:15:8e:
                    47:3c:39:79:ac:3d:51:25:5c:fe:aa:26:a4:e0:26:
                    3a:06:35:6a:f8:29:56:00:fb:ee:0f:a0:b1:8b:b8:
                    0e:31:c9:42:cc:99:9b:1f:48:0a:71:b7:66:c2:39:
                    4a:52:b9:b7:de:d0:86:92:8d:61:90:ab:41:15:c7:
                    86:6d:73:c8:f5:b4:06:3c:94:43:a6:ea:1e:ee:91:
                    67:eb:60:c0:0c:0b:a1:62:44:f9:c0:46:56:86:c1:
                    03:38:0c:a7:5f:45:50:67:23:41:46:c2:c8:39:ab:
                    90:f1:91:58:90:32:b5:84:f7:c1:1f:83:4d:eb:ca:
                    c0:7f:ca:10:ed:47:bd:70:f6:47:08:27:dd:e8:bb:
                    ea:c0:84:fe:d1:5c:c2:e0:42:2f:85:25:0d:95:d3:
                    fc:d8:e8:76:c4:4d:ff:fc:f9:6a:0a:40:13:eb:67:
                    2b:30:66:89:45:f8:c3:70:c4:d2:99:9b:52:ec:f8:
                    25:03:29:70:e2:07:96:2b:71:cb:3a:e7:94:07:ae:
                    d2:45:e6:a7:68:ac:9a:f1:91:68:86:54:53:c1:27:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:29:2C:D0:48:65:5D:63:AE:F4:F2:CE:41:2F:F5:E3:92:4E:60
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:27:c1:b6:73:e5:f0:57:b2:5f:0e:f2:f4:3c:3e:1b:d3:21:
         79:bc:40:00:ca:40:c7:35:d9:38:4e:28:33:9c:bc:74:04:4b:
         15:04:9a:33:11:bf:25:76:b9:f7:c3:4a:40:fc:d4:86:1a:99:
         80:cd:8c:5c:89:50:39:28:1e:54:ad:a6:35:ec:71:99:b1:78:
         74:75:c4:6e:6c:4b:1a:af:50:34:8e:69:17:b6:d6:ed:8c:3a:
         5b:3a:aa:bb:16:b6:ff:4f:54:0a:4f:a6:0d:0f:b1:7d:49:97:
         34:92:f7:14:5d:07:63:97:1d:33:64:bc:f7:25:dd:b4:9c:ac:
         92:8f:7a:c4:92:e6:11:9e:fa:41:2b:20:9f:1e:1f:69:37:fd:
         fa:fa:67:c5:90:11:7a:d9:c9:e3:b9:e3:ad:d9:bb:06:1a:18:
         75:e4:e7:ed:08:0f:72:72:f1:b9:6e:04:c1:53:5a:f3:1a:d7:
         43:42:67:37:d8:98:60:e9:51:b6:75:3b:6b:cb:47:1d:8f:86:
         cd:6a:c9:19:67:7f:ad:1a:4e:1b:7d:78:3b:02:f5:34:0e:50:
         11:eb:c8:3f:b6:29:ad:31:0a:13:10:f6:ea:25:f3:c8:fd:2d:
         76:d9:3a:a0:9d:83:d8:80:44:7c:ab:13:a8:c7:99:fc:a5:62:
         a0:41:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:55 2025 by rpki-client