Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          rOKGQN1n2haa6iwZnyNUBG3lAXbtdD6cpOqFWo0g7Ns=
Subject key identifier:   C0:F8:24:63:0B:35:62:0A:20:91:23:93:75:42:EE:4B:00:6B:A0:0A
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       0198D65F71436D266CE64B4252A44CABF2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:35 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: mDhE3LvdsYr1Jru4re/b5fT/Y9CWpU3DWNglsPZ1IRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:71:43:6d:26:6c:e6:4b:42:52:a4:4c:ab:f2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Aug 23 10:00:35 2025 GMT
            Not After : Aug 24 10:00:35 2025 GMT
        Subject: CN=c0f824630b35620a209123937542ee4b006ba00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:b3:6b:da:df:df:76:4b:a4:d6:78:85:cc:
                    d7:e5:af:75:da:49:eb:54:26:19:79:1a:06:ef:bf:
                    41:e6:67:4f:81:e8:20:e1:7c:42:16:de:d9:f1:cb:
                    7c:0c:79:be:e0:34:d5:e5:08:ab:b1:7f:7b:f6:86:
                    73:2c:02:33:d2:8d:59:21:37:90:13:0b:5f:dd:2a:
                    fd:8d:34:49:36:bd:38:77:f4:80:91:6d:0e:55:6c:
                    0b:6a:08:8c:8b:fa:2b:93:14:02:f2:d7:41:7f:14:
                    a9:ab:e6:cc:78:7e:ed:f8:b5:bc:70:ee:6d:7d:d8:
                    49:0b:85:7f:a2:1b:5d:e6:57:16:f0:11:09:1e:38:
                    d0:eb:fa:9a:03:6a:0e:64:08:0b:aa:17:9b:16:6b:
                    d3:cf:cd:8c:4d:fd:21:ca:ba:42:72:4e:6e:95:43:
                    13:f9:14:94:fe:60:82:ef:9b:8f:91:16:7f:b1:78:
                    cc:a0:ad:39:f9:c2:5d:62:08:f5:b2:4e:ea:d9:1b:
                    ec:bf:2c:00:38:6a:be:1b:bd:9f:06:52:04:6f:c8:
                    ce:b6:14:ee:21:68:63:f4:ad:e6:23:8a:8d:1d:e8:
                    a0:50:33:b9:af:4f:24:d4:db:a8:85:5b:52:39:2d:
                    10:c5:4a:1e:87:df:3c:c1:c2:d0:04:3c:a9:4e:60:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F8:24:63:0B:35:62:0A:20:91:23:93:75:42:EE:4B:00:6B:A0:0A
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:3f:e4:c7:18:2b:5f:97:e2:17:7d:a7:c6:42:76:cd:ba:
         bb:ef:af:71:07:e0:fd:24:6f:1b:aa:0b:e6:38:d0:c8:39:5e:
         e5:1f:b0:a1:b1:ee:40:17:4d:10:21:cb:cb:d3:e5:d6:72:7d:
         9d:83:b1:d2:2e:16:8f:6a:54:2e:cd:e8:75:2e:4e:69:df:4d:
         28:a6:81:67:ed:6b:bc:1a:00:63:eb:09:f0:e4:d3:30:33:17:
         f4:df:b1:6d:49:ae:6c:fc:8c:8c:36:b7:12:db:bc:aa:e7:a3:
         3b:85:23:a8:53:54:27:a8:b0:82:f1:b4:da:40:7d:8d:cc:e6:
         b9:64:db:f2:8e:14:de:0c:22:27:87:6e:9d:25:e7:99:be:18:
         9d:e7:c2:1c:0b:80:47:ba:28:27:ef:82:37:ed:61:76:6c:7a:
         40:ec:13:bb:ea:b6:16:01:c1:95:61:e6:4a:b4:0c:49:4a:5f:
         db:71:be:f3:f4:0b:ff:f0:40:e7:b8:ad:bf:cb:d1:d8:db:13:
         15:00:ab:7d:af:e9:26:e7:a5:d2:af:42:86:ff:31:f5:06:2a:
         35:b1:d4:0b:cc:3b:1e:92:64:da:d2:d3:d0:de:0f:3a:01:7f:
         9e:ad:60:94:4b:63:0a:3c:6f:00:cc:67:3d:59:13:ff:30:ab:
         f0:57:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:23 2025 by rpki-client