Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          V6SxI22Q/4MFwPX9p3UDcfsBAhSVUERXMqI2Pmi1gc0=
Subject key identifier:   1C:2D:37:BC:B0:10:F2:B5:1A:86:D5:72:99:EB:8E:FC:57:14:B8:54
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       0198D4A84F136E2FFCEDB2B385FC9E83748A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 02:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:56 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: jX+8+yEr87zudXXPxSSrfhLZ2iZ09EHqYYX/wf5YA5k=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:4f:13:6e:2f:fc:ed:b2:b3:85:fc:9e:83:74:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Aug 23 02:00:56 2025 GMT
            Not After : Aug 24 02:00:56 2025 GMT
        Subject: CN=1c2d37bcb010f2b51a86d57299eb8efc5714b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:77:cd:8f:b5:5e:e3:7e:95:54:ac:4b:27:
                    6a:65:b5:08:06:cf:57:61:7f:32:96:b4:61:f6:4a:
                    8f:9d:66:99:4e:df:16:34:7c:a4:e6:23:72:63:a1:
                    00:f0:93:91:d3:9f:eb:35:96:99:1e:47:09:43:d2:
                    eb:e3:46:48:32:68:53:c0:48:ff:cd:ea:4e:ae:cd:
                    df:bf:cc:08:0d:0a:b5:2f:c9:ff:7b:5c:d0:79:7b:
                    ea:94:79:ba:94:4a:a0:9a:4f:c5:23:c9:7e:52:4a:
                    da:0c:f6:60:9c:bb:50:b7:38:a8:84:c7:27:02:0a:
                    9e:20:bc:70:8c:4d:94:7b:d6:99:01:25:2b:f1:2f:
                    0c:4d:52:1e:d7:b5:ae:ed:ad:d5:23:9b:22:0c:63:
                    5a:d4:25:87:ab:60:d7:c9:ba:23:8d:96:38:4d:38:
                    fa:70:3f:fc:40:fc:0c:0f:b4:84:91:a1:16:52:49:
                    88:58:e3:61:cb:c9:81:ca:c3:08:54:75:8d:01:97:
                    1b:d4:99:d8:c0:dc:43:0f:12:d2:4a:8c:eb:7d:86:
                    6e:b9:17:ea:7c:eb:1d:35:cb:10:83:33:93:c6:56:
                    49:92:c7:45:d6:f3:46:f1:f0:9b:aa:8e:15:e9:9b:
                    28:10:99:92:16:ce:b9:77:75:df:76:d8:f3:18:77:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2D:37:BC:B0:10:F2:B5:1A:86:D5:72:99:EB:8E:FC:57:14:B8:54
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:91:fb:d2:56:f2:0b:c1:5c:66:c8:d7:9a:1b:fe:e8:a9:b0:
         d3:48:da:3e:27:58:99:b9:4d:f2:fc:50:23:a0:50:1d:35:7d:
         71:39:b7:f7:4d:b9:62:e8:ec:2e:0c:6b:23:d8:5e:16:14:ab:
         28:58:79:c4:07:cc:f1:8a:19:6e:34:85:b3:17:d2:e7:07:fa:
         15:31:e5:0a:b4:e5:f3:e8:31:77:a9:28:e2:41:b5:4a:25:f3:
         7a:f1:a0:39:02:ff:6d:6c:30:64:61:ee:ed:25:73:53:10:80:
         be:45:5f:9c:a0:30:e6:d0:ad:b3:af:31:9f:e9:96:6d:bb:13:
         07:1b:df:0d:d8:33:9f:25:0e:5f:93:82:3c:63:6a:5c:ba:04:
         88:64:c9:91:1f:5d:16:67:76:6f:90:c1:52:e7:e9:97:88:fe:
         68:31:e0:56:3d:b8:44:af:ca:18:40:ed:43:a1:4c:8f:a8:a5:
         cf:4e:9e:82:b1:63:65:b4:2c:c0:01:53:3b:d0:ac:77:5c:a3:
         81:f8:32:07:cb:f0:e3:46:b3:90:96:68:e6:e2:69:67:10:a9:
         87:59:29:26:69:ea:59:5b:82:3b:12:af:9a:1d:80:9c:50:e3:
         b6:b1:8a:7a:f2:81:02:da:a2:b5:b7:8f:31:f7:08:26:57:37:
         48:c0:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:02 2025 by rpki-client