Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          5Sd4gNqDjyF1xCw3XjMn5kgtCnXU9X5tE7lGh1UuvDw=
Subject key identifier:   CD:FB:32:ED:1E:70:3C:80:6B:CA:4D:AA:A9:18:78:CB:BB:22:E4:4F
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       0198D515A436E37D116A11333930FD6CA5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:21 +0000
Files and hashes:         1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: Qoaf9EdMDerkHbPaLHMI55qj9krkt5LfocNnuXOFUPY=)
                          3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
                          4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a4:36:e3:7d:11:6a:11:33:39:30:fd:6c:a5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Aug 23 04:00:21 2025 GMT
            Not After : Aug 24 04:00:21 2025 GMT
        Subject: CN=cdfb32ed1e703c806bca4daaa91878cbbb22e44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:45:37:38:25:96:8e:3f:52:a9:f9:58:02:9a:
                    70:97:fe:fa:ac:a9:5e:a8:db:15:9c:93:74:f9:87:
                    7c:03:6b:e9:b8:0f:f2:c6:38:30:6a:12:09:a9:cd:
                    a9:64:cc:bf:42:7c:d8:e2:72:6b:b6:f7:6b:a4:90:
                    e3:3f:21:33:a0:01:91:30:9c:b7:04:0d:88:e3:01:
                    91:11:ee:a6:2f:bd:96:d0:7c:9c:08:0b:24:d2:43:
                    e1:c6:a8:70:9a:22:5e:d3:5d:1b:d9:0c:dc:e2:96:
                    0b:04:45:2f:83:eb:4d:eb:a6:43:f6:68:bc:6f:77:
                    59:a8:4b:b5:00:e9:6d:cc:21:b9:9d:52:82:68:40:
                    e5:83:df:48:98:ed:c7:5d:1d:a8:42:c3:8d:50:59:
                    4a:de:72:87:4f:ae:e0:d0:5d:99:3e:d0:8b:d3:56:
                    40:39:d7:d4:60:60:0c:66:6a:97:8a:fd:4e:98:70:
                    5b:31:c9:fc:f8:98:48:5e:f4:35:f0:40:3b:d6:82:
                    2d:36:20:99:9f:9f:c3:87:37:32:91:ff:e4:b5:d0:
                    67:06:7d:51:a5:72:7a:a8:0b:f1:90:cb:b9:bb:97:
                    dd:fa:c1:eb:f4:d6:bd:d8:ed:9a:43:c0:67:f5:12:
                    a1:e0:d2:db:6e:3c:5d:80:e0:a6:e2:aa:3a:b2:61:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FB:32:ED:1E:70:3C:80:6B:CA:4D:AA:A9:18:78:CB:BB:22:E4:4F
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:b2:73:a1:ae:56:a0:1e:83:68:9d:99:40:1d:1a:3f:f2:
         26:39:1e:43:ee:35:15:5a:a4:14:ce:ba:a2:20:87:91:b6:06:
         c7:56:98:3f:52:57:b9:23:ed:f0:79:8a:75:60:04:4d:36:b4:
         98:e4:59:f9:44:8a:70:f3:f7:4a:3e:63:c5:0c:2b:31:c9:e2:
         0b:8a:05:a7:d2:fb:9a:7f:30:e0:43:87:bc:0a:58:5c:ae:80:
         25:de:5a:c2:5b:05:a1:69:94:0c:9c:37:26:9b:05:8d:c4:2b:
         ff:d9:38:68:29:b6:e4:23:ce:c8:5d:b1:22:cd:5a:5d:8c:6d:
         a8:67:79:64:ea:37:3b:bc:03:55:94:f2:10:61:7e:9e:f8:7d:
         15:7c:e9:e9:5c:12:4f:f5:e7:be:b5:a1:0b:d4:d2:1f:fc:8d:
         63:4c:6b:10:c4:dc:d9:06:bc:02:33:fd:aa:d6:4a:64:8c:a2:
         49:ec:0f:6f:5f:89:17:23:85:3c:af:1f:ff:2b:a8:4c:5a:24:
         30:ee:c0:48:3f:17:de:95:5d:db:a1:2d:a6:de:db:35:92:5d:
         db:b0:b6:bc:a9:aa:5f:7f:c1:07:3a:0b:79:5d:de:31:4a:0a:
         b4:96:80:b9:4d:74:6e:bb:3f:17:87:7c:d8:2c:b6:19:80:67:
         b1:8c:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client