Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          kfDoFUrhM8zzsc2M4NqJT55uOZR5kZSpWFnpg4zAAQQ=
Subject key identifier:   F0:00:2F:FD:71:4A:A8:24:3A:0A:B9:F3:30:50:7D:CE:85:48:57:4F
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       0198D4E00FA1D60996CA6A18AA7BC0014253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:50 +0000
Files and hashes:         1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: ce0zWXB7d7HGepulP8GtcE4yJ/lBeastNQHcCeABGXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:0f:a1:d6:09:96:ca:6a:18:aa:7b:c0:01:42:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Aug 23 03:01:50 2025 GMT
            Not After : Aug 24 03:01:50 2025 GMT
        Subject: CN=f0002ffd714aa8243a0ab9f330507dce8548574f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:88:41:90:e1:ef:24:eb:80:08:96:5d:97:
                    45:4e:66:59:5c:8c:57:92:e2:70:4e:f4:24:db:12:
                    a3:f7:97:e4:0d:64:b3:bf:b0:0c:4a:73:91:75:72:
                    e3:4d:76:7a:56:ea:3d:9b:b1:a2:74:71:69:0a:44:
                    e8:51:79:1c:d7:e8:ee:ad:6f:83:7c:74:5c:85:2d:
                    fa:bf:aa:d0:ee:6d:24:f4:52:3a:36:f3:30:8a:ac:
                    39:03:cf:be:3a:a2:ca:28:f3:1f:d1:3d:f7:22:08:
                    dc:2d:8b:b0:66:b1:1e:13:16:5a:76:f4:c9:d3:fe:
                    47:01:8a:57:06:62:ff:fc:76:b6:50:a0:da:d3:92:
                    30:8f:da:7c:21:24:00:ce:2e:81:39:63:49:02:ff:
                    1f:77:4b:65:bf:64:45:51:c2:76:70:20:16:b7:29:
                    ad:06:23:b5:98:50:0c:61:07:85:ab:e6:12:36:f7:
                    a7:9d:bb:c9:ef:75:90:e7:93:b2:f7:9d:f2:37:a7:
                    30:8b:a9:43:e7:4e:73:07:a7:53:d1:26:bf:e6:2e:
                    8b:9a:b7:6f:2f:46:59:6a:f3:f8:b7:21:da:fa:83:
                    0a:08:41:08:e6:2a:b3:7b:4c:28:3d:1a:59:5f:4f:
                    9c:4d:a5:6e:32:ff:10:22:68:80:d7:58:72:53:59:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:2F:FD:71:4A:A8:24:3A:0A:B9:F3:30:50:7D:CE:85:48:57:4F
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:55:5a:5f:a6:9d:14:7f:86:38:ba:75:dc:dc:e8:62:b0:
         c2:35:f6:5a:0f:3e:1d:8b:25:69:f9:28:8a:fa:e0:6d:e0:9c:
         37:dc:bb:e2:a3:f9:af:d7:af:92:db:0e:59:05:70:e6:a9:4c:
         b9:0a:3f:fc:bb:ca:9f:6c:48:00:a6:2b:8c:d7:f1:1e:0e:27:
         14:56:a6:22:be:d2:89:ba:ef:cd:0e:67:52:8f:d8:f8:69:bf:
         20:a7:92:67:aa:c9:1d:e2:4c:a5:1b:fd:8c:77:1c:7c:52:d8:
         13:c8:af:f4:f1:2b:fc:94:ce:1e:c3:36:a9:c1:06:50:9c:fc:
         70:4d:f3:7c:c4:7d:27:81:11:66:9d:38:e3:89:eb:e1:72:96:
         2a:ed:47:89:1c:0f:76:a5:9b:a5:bf:72:fd:02:fc:2a:97:9c:
         0e:9c:54:f3:6f:dd:b6:a1:f9:0c:a6:eb:a8:c6:87:3f:2b:8f:
         02:e9:87:6a:79:04:58:a5:f8:c5:df:09:b4:e6:b4:92:6f:06:
         cd:03:49:87:99:13:61:a6:7f:d7:61:39:a9:52:6b:2e:81:18:
         30:aa:58:12:a1:0c:b6:48:69:78:c9:1a:7f:4d:84:7d:6e:99:
         b4:66:71:7c:d7:17:b1:fe:b5:14:3a:41:51:24:6a:4b:71:9e:
         da:b7:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:28 2025 by rpki-client