Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          26MrNhCnS7N43TbBn/DwnAfSZ9QE6SQDcSHkxpw3g1Q=
Subject key identifier:   FF:27:16:18:8F:C0:9A:58:CB:07:D9:FF:7D:85:88:43:EF:51:2E:1A
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       0198D5BC3FE6E23143CFA0DC0D2954EBA3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:20 +0000
Files and hashes:         1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
                          2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: KY4YHLYh0xh5lhZsW/j9SPaveb8DvWrs/Eq5uEu38fI=)
                          3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
                          4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:3f:e6:e2:31:43:cf:a0:dc:0d:29:54:eb:a3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Aug 23 07:02:20 2025 GMT
            Not After : Aug 24 07:02:20 2025 GMT
        Subject: CN=ff2716188fc09a58cb07d9ff7d858843ef512e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:40:a4:66:1a:32:94:c2:0d:80:6a:19:4e:
                    56:6c:ba:bd:3c:3e:17:83:4b:55:10:7a:ad:f4:cb:
                    9f:c5:77:0d:db:e1:a4:ad:c0:b2:94:c0:47:a1:6b:
                    23:87:ca:34:9c:83:fb:1f:2f:2f:69:39:00:84:14:
                    3a:29:45:ae:7e:f8:b6:7f:cd:ad:6c:ce:fa:86:1f:
                    df:40:b1:78:92:1f:99:07:3c:90:f7:3e:b2:ec:93:
                    c8:d0:c7:95:ab:ce:fc:ee:0b:ff:a4:7b:1c:fc:74:
                    38:8c:de:c2:b0:ff:2e:6b:d6:86:1f:27:b5:54:da:
                    4c:e2:db:1d:ec:a2:68:b0:df:b4:8d:d0:3d:55:dc:
                    1d:00:21:c9:8a:23:63:ad:4a:d8:0a:41:76:e2:f2:
                    09:e7:1c:2a:ba:3f:f1:4a:d6:19:80:86:2a:93:9e:
                    1c:7f:89:d2:9c:ec:69:00:a5:33:82:e4:f9:58:0b:
                    c3:5d:a9:d7:65:37:90:7a:69:c6:bf:80:11:5b:34:
                    4d:14:1b:14:fb:27:10:71:27:73:f0:e8:00:6d:da:
                    52:77:f2:e7:2f:18:3d:c1:f4:61:0c:70:49:d7:11:
                    11:bd:e4:62:90:a9:13:84:c4:3e:f3:be:74:12:bb:
                    c7:68:5a:87:c8:c4:90:6a:25:3d:17:a1:35:fb:05:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:27:16:18:8F:C0:9A:58:CB:07:D9:FF:7D:85:88:43:EF:51:2E:1A
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:15:49:35:8b:4e:4c:5e:ba:26:8f:2e:be:58:c5:c1:05:
         80:f5:f6:93:e2:b1:ba:49:ba:01:00:19:ad:ff:98:11:91:18:
         ca:e1:37:db:09:8f:fe:86:cc:97:f6:0b:f2:3a:de:7a:07:66:
         e5:d6:7a:11:2d:b3:8d:fb:3c:b8:6b:b4:4c:94:06:6d:c3:9d:
         09:f0:22:f7:83:0c:1c:f2:84:41:49:be:a3:83:40:e6:fe:a9:
         e1:92:b0:8d:66:4a:08:31:91:8b:e9:6c:78:ce:1b:b2:ad:f7:
         92:c2:eb:cc:c2:5d:1f:24:9a:15:fa:4d:c4:18:a1:4d:2b:be:
         89:c8:e4:db:ad:49:1d:bd:8f:28:cc:74:52:03:6e:6d:31:85:
         38:e2:e6:28:30:d3:ae:f9:51:c4:33:0f:b4:72:10:e5:48:ba:
         38:07:22:4f:42:c4:aa:40:ca:5d:be:0e:3b:b3:40:87:a7:7e:
         88:8b:d9:ce:ae:2a:00:fb:9a:62:cc:52:22:83:92:cb:8a:c6:
         75:55:ef:24:52:72:92:37:3f:a8:41:cb:15:32:0b:3b:5a:18:
         13:78:60:72:13:0d:73:35:f8:b1:bb:c5:7b:55:af:df:d4:28:
         8a:45:69:7a:aa:ac:34:b1:91:8a:d2:62:1b:db:42:04:25:19:
         c8:cb:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:04 2025 by rpki-client