Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          XWGne0ac/zo7G5OgZ6CymQPO36lporegOAJRCz+QkTo=
Subject key identifier:   F3:13:4A:8D:97:06:39:5A:2A:62:6E:28:EF:33:7C:BB:F3:66:E0:41
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       0198D4E05E157FF6DC3CDB95C31E8919AC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:10 +0000
Files and hashes:         1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
                          2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: Tno/ChcI0l1maZPq5VPrnaV/N5zxpo6neQB1M4P2ukA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:5e:15:7f:f6:dc:3c:db:95:c3:1e:89:19:ac:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: Aug 23 03:02:10 2025 GMT
            Not After : Aug 24 03:02:10 2025 GMT
        Subject: CN=f3134a8d9706395a2a626e28ef337cbbf366e041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:16:a4:5b:a1:af:33:32:96:dc:6e:1e:c2:
                    1f:2f:03:a2:83:55:82:d7:e9:27:71:c8:28:4e:e3:
                    3f:15:46:1a:bf:a2:f4:5d:7c:65:5f:a8:c0:89:6a:
                    7a:3b:4a:44:9d:66:08:72:b0:40:be:38:01:9b:e5:
                    77:32:55:fd:97:a7:53:21:3f:2b:d4:6a:13:f8:d8:
                    2a:8c:8e:62:35:88:35:05:af:8d:98:aa:74:83:fb:
                    46:f7:c5:62:65:1c:0b:cd:b1:fd:1c:25:92:8a:e0:
                    55:b2:bb:6c:7c:5e:d2:29:7b:be:11:fd:09:9f:b0:
                    b5:19:27:5a:37:18:87:41:ac:6b:20:d2:fe:71:c4:
                    1b:ce:a6:00:86:18:4c:84:e0:2b:fa:36:26:eb:8e:
                    96:f8:47:7d:38:90:2a:43:63:2f:ac:f7:80:6f:c6:
                    d0:f3:06:98:f8:92:32:d2:ca:b1:f3:e0:c1:18:a7:
                    e7:1b:92:d7:98:78:df:41:31:33:1c:cf:03:b5:25:
                    13:6e:52:e8:1c:c0:a1:6f:c7:17:19:17:38:be:ee:
                    90:08:c7:53:35:ff:cf:1a:dd:e6:a3:3f:6a:6c:3f:
                    8e:f6:92:78:de:04:25:d1:6f:40:aa:77:b4:f4:b0:
                    5d:7d:14:2c:0d:79:82:2d:12:73:2e:7a:09:53:f2:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:13:4A:8D:97:06:39:5A:2A:62:6E:28:EF:33:7C:BB:F3:66:E0:41
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:3e:c9:70:43:c2:12:6c:e4:97:bc:f6:f6:8d:04:95:ee:
         74:30:e9:3f:57:37:56:7a:15:2c:9c:68:ea:5e:c4:00:03:a1:
         ed:72:3c:0d:0b:5c:4a:13:2e:28:71:59:0b:84:5c:d3:5e:d8:
         ba:f6:a4:43:c8:32:c1:61:0c:7b:96:ae:8e:28:5a:24:1c:1b:
         ba:0f:cc:e8:9b:97:30:69:9d:54:6c:69:30:29:7a:75:07:7c:
         ab:60:f8:b3:90:20:de:8d:62:e2:29:e0:70:b4:c8:e1:60:22:
         c3:be:79:7b:43:9c:c5:67:89:e2:7b:de:e8:46:b4:33:64:64:
         fb:81:14:40:98:96:af:98:c0:b6:3a:65:a0:f4:8e:e5:fd:13:
         68:59:ec:87:0a:23:6f:5c:ed:9e:66:3e:85:02:96:1f:30:90:
         da:3e:6d:77:08:76:bf:24:b5:ff:79:a3:4f:a6:da:df:08:be:
         a8:15:a4:3d:8a:b6:e8:cf:c1:9f:cd:8b:24:e7:d1:26:1a:a3:
         c3:cd:a6:71:2a:b0:11:c6:64:d8:eb:a5:a0:ae:a8:b2:34:0d:
         03:0f:43:2e:0e:d5:48:53:95:ca:7c:06:4d:55:46:b8:d6:0f:
         69:cf:03:bf:52:2c:70:e3:82:a6:8b:74:02:3d:6c:de:66:bf:
         a6:7b:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:59 2025 by rpki-client