Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          I+XfVC6+pDOvSnkXY7cm3o4fBjOKurcygU+hAFBdyIA=
Subject key identifier:   59:C6:06:FB:0E:94:CA:09:14:D9:12:22:5E:45:C1:86:AE:3A:F9:CD
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       0198D5F1A6937C77CCC09821908172FBAAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 08:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:40 +0000
Files and hashes:         1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
                          2: Lmvz7UtyX1lXwrZFQxyw10f965g.roa (hash: vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=)
                          3: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
                          4: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
                          5: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: d9C1Byx390rqn6SYXEjhMwXD8AeyxZxjOwBI/Ex3GPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:a6:93:7c:77:cc:c0:98:21:90:81:72:fb:aa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Aug 23 08:00:40 2025 GMT
            Not After : Aug 24 08:00:40 2025 GMT
        Subject: CN=59c606fb0e94ca0914d912225e45c186ae3af9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:7a:d6:98:3f:f6:82:4a:a7:35:11:86:90:
                    53:cf:40:c8:f2:d0:5a:7b:8b:66:72:e9:49:cd:6e:
                    7d:94:c3:cb:a2:83:66:dc:73:60:d4:b7:16:6f:d4:
                    72:21:f5:2c:0a:72:32:5c:03:7e:07:f6:45:f7:3d:
                    53:56:66:12:a9:9a:15:11:33:ee:65:17:62:7e:ad:
                    fc:bf:c9:4d:6e:41:d5:64:2f:d9:56:a2:ca:a4:0e:
                    02:b6:01:72:78:05:48:18:7f:9f:dd:5a:24:4c:86:
                    5b:b0:0d:87:c1:3a:c5:a4:3f:a6:5f:02:d2:80:a9:
                    ec:80:12:b0:ec:18:ca:6a:cb:d7:f1:61:22:1c:94:
                    69:0a:c7:0e:39:9e:22:25:ee:29:73:ff:0b:55:c0:
                    8e:f9:5a:5b:f1:79:c3:8c:05:40:f4:22:42:60:57:
                    8b:df:c7:46:5b:56:d3:bf:f1:aa:a9:fb:65:85:c5:
                    6e:86:74:6d:a6:11:33:55:d7:78:ac:6b:ee:73:17:
                    20:70:8b:49:42:a6:11:d8:b9:21:af:cb:1a:f4:e3:
                    40:40:25:d4:16:3c:3d:84:a6:71:c3:b7:08:ba:f2:
                    83:e8:c6:71:4e:48:89:3e:36:44:d3:e9:05:3a:0f:
                    50:dc:cc:3a:04:40:1d:70:b5:3f:2f:1a:64:9a:cd:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:06:FB:0E:94:CA:09:14:D9:12:22:5E:45:C1:86:AE:3A:F9:CD
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f8:7e:14:b2:d8:e1:f1:6f:6c:9b:44:33:00:59:2f:de:74:
         d4:e7:74:95:35:e7:df:9f:a6:09:28:e1:e1:cf:77:44:52:eb:
         69:6b:18:84:8a:58:70:87:22:18:09:76:25:dc:c8:7e:6d:34:
         b4:69:e2:0c:a3:ff:df:6d:75:b7:d5:09:76:6c:62:97:58:53:
         85:ab:3f:57:92:a3:0c:20:af:64:61:19:3f:99:9a:c0:5f:33:
         e7:0e:15:57:98:78:96:f0:58:9b:09:e4:54:c3:4c:c1:bc:75:
         40:55:05:1f:e6:55:ae:1b:11:d5:8b:98:39:22:6c:12:aa:05:
         b1:98:80:7c:6d:38:d0:59:c5:af:62:f3:74:03:cb:f9:fe:4b:
         15:bc:ff:e6:84:4e:07:73:5e:69:18:55:5f:66:a6:3f:f0:0e:
         14:5f:a8:77:61:38:69:63:d8:18:0c:6c:9e:ef:27:e8:92:fd:
         73:fe:a4:e4:96:64:02:51:c8:ca:9f:88:23:50:f7:54:67:b1:
         34:16:87:0d:cb:fb:13:e3:30:11:58:d8:36:9d:13:c6:a8:d2:
         4f:a2:de:14:46:73:a7:66:05:3e:18:e9:88:38:a9:78:98:94:
         d2:2a:ac:f9:e5:56:e1:a9:72:7d:f3:5b:29:ec:36:52:8c:49:
         7e:b8:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:18 2025 by rpki-client