Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File:                     7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier:          5xUqO6M8bhHsEgoRcEYNQi0aNgS5uRlqbp1IFYG62CY=
Subject key identifier:   9C:30:BC:0C:B7:49:E1:EC:4C:72:86:B5:FB:F3:D7:BE:9A:FC:E1:8C
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer:       /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial:       0198D706089CF30C29FFA03AD9626098A698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 13:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:33 +0000
Files and hashes:         1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: YoxNa1gyFjgIzjZBXAdyzXKTuNLSaqSJIR8+5mdpsCQ=)
                          2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:08:9c:f3:0c:29:ff:a0:3a:d9:62:60:98:a6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
        Validity
            Not Before: Aug 23 13:02:33 2025 GMT
            Not After : Aug 24 13:02:33 2025 GMT
        Subject: CN=9c30bc0cb749e1ec4c7286b5fbf3d7be9afce18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:5c:8d:c3:3d:0b:94:b4:12:5e:f7:02:15:
                    9f:57:4d:3b:f5:09:c8:8f:57:4f:2e:8b:11:34:b9:
                    4c:d2:a0:4f:b1:70:36:93:17:34:c2:15:16:28:6a:
                    fb:94:93:60:4a:81:ed:86:a0:cd:76:26:53:77:32:
                    59:5b:c1:1e:cf:b3:42:16:18:a9:71:ef:40:11:43:
                    37:5d:fb:ef:7c:a2:28:41:94:a5:0f:8a:55:b7:7a:
                    b6:46:a0:64:3e:be:4a:91:c4:41:b3:fd:7c:b6:60:
                    0b:8f:4f:6c:0a:2b:d3:2c:ab:1f:0d:b8:8e:2d:7b:
                    a2:d2:88:80:f2:b0:10:a0:9f:3f:88:2d:8a:49:9e:
                    2c:61:4e:0b:bb:d1:45:96:6a:5d:30:22:49:bd:aa:
                    da:ee:88:68:ab:3f:bf:78:93:de:f6:54:60:d7:eb:
                    2b:3f:bc:1c:7f:26:87:75:54:fc:55:fb:e7:6b:49:
                    09:90:56:cf:02:d4:7f:9c:b2:cc:c9:94:dd:b2:0e:
                    84:ea:75:11:df:ef:8c:f4:2c:f1:48:cc:3b:dd:0f:
                    d0:96:e0:c8:2d:ed:cf:a6:b1:3c:6e:e3:cb:a5:f3:
                    ed:c5:ab:2f:4f:37:ff:93:6a:8e:fb:3b:e1:d8:0d:
                    b3:b9:14:5e:68:20:e2:7e:fe:b3:29:48:04:97:a7:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:30:BC:0C:B7:49:E1:EC:4C:72:86:B5:FB:F3:D7:BE:9A:FC:E1:8C
            X509v3 Authority Key Identifier:
                keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:22:f9:8f:a7:45:d7:ba:00:1e:b7:54:eb:73:1b:4d:21:d9:
         41:42:1d:e7:64:74:9f:5c:bb:0f:58:8e:97:1b:93:4e:ad:e7:
         24:04:4b:b0:9f:47:d5:34:43:e4:cd:12:55:fa:45:d0:92:b5:
         26:fc:0b:2e:60:48:11:bc:da:21:13:1d:72:fd:f1:36:6a:f9:
         6f:32:3c:eb:74:3c:59:b9:3d:40:7d:fd:b7:24:08:12:c6:d7:
         14:96:18:30:9a:80:27:46:a1:b1:0e:51:24:de:28:a7:ff:db:
         4d:0d:1a:50:80:07:d5:94:97:59:e6:20:84:41:e4:b0:c0:d8:
         b8:cd:10:4c:b8:17:4f:bf:3b:f5:fb:5c:08:2d:b3:bb:e8:c4:
         04:d9:57:ab:82:30:fd:ef:85:c2:3d:a4:72:b2:06:8e:84:38:
         ec:12:4a:79:b4:39:56:3b:42:e8:59:e8:16:ed:7f:ff:df:8e:
         4f:ec:bc:bb:0e:08:f9:31:ac:be:c2:ae:18:58:e7:0f:cf:3e:
         ea:7c:dd:df:a7:33:e8:b5:af:c8:15:c9:37:23:56:8c:d1:1f:
         5e:81:f0:d4:ee:96:33:1a:27:21:d0:a6:1a:75:23:b6:c3:1d:
         63:5b:df:11:2f:f1:e8:90:7c:6f:a6:02:8e:6c:79:7e:e2:a1:
         9a:61:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:00 2025 by rpki-client