Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File:                     TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier:          30xJOYYFNd7Imz2ynlMmZlKzIsruZGXe3PGyYI9zqpI=
Subject key identifier:   D1:7F:51:6F:0C:75:70:07:1D:CB:E5:BD:EE:1B:74:6E:13:8D:08:DF
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer:       /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial:       0198D7734A10BBA934B71DD7FC366308FD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 15:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:53 +0000
Files and hashes:         1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: ohx0FKLpzlQ2ONltX/LYdKE5YVMfZGNQNpAJZ+BCZFE=)
                          2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:4a:10:bb:a9:34:b7:1d:d7:fc:36:63:08:fd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
        Validity
            Not Before: Aug 23 15:01:53 2025 GMT
            Not After : Aug 24 15:01:53 2025 GMT
        Subject: CN=d17f516f0c7570071dcbe5bdee1b746e138d08df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:2a:d0:5d:6a:31:8b:4d:a2:37:6b:04:5c:
                    24:ab:de:28:5e:fc:22:4f:0d:6a:47:08:1e:66:fc:
                    80:9d:ec:44:65:70:7b:e8:ed:3c:6a:36:8f:ad:34:
                    84:2c:b2:33:10:9c:05:b0:4a:41:ae:fe:b2:7d:c8:
                    ed:ae:ef:18:76:d6:56:46:65:b6:dc:15:09:d6:d6:
                    3f:d1:a6:ec:92:fe:27:4a:d2:c4:b3:a9:d2:8c:53:
                    eb:6f:15:dd:1a:df:5c:21:df:87:e2:55:bf:c9:d8:
                    46:77:e3:82:39:a8:e4:ee:e2:1e:4c:d5:81:d6:d7:
                    72:c4:5d:a6:c0:bd:d2:fe:cd:32:ed:ea:0c:5c:12:
                    98:85:45:56:f1:fa:9e:b2:d3:46:3a:e4:b3:2a:a8:
                    87:46:ae:10:97:e3:bb:80:65:3a:b6:a8:8f:b6:c6:
                    6a:cf:b6:61:21:6e:9e:b0:67:da:4f:a7:f7:c5:1b:
                    57:5b:50:0b:30:30:d6:64:fa:b9:ca:81:85:18:68:
                    f5:41:8a:3d:61:c2:f3:23:91:45:da:b7:cf:9c:81:
                    41:6f:15:57:12:a8:45:54:d0:96:25:10:f0:f4:8a:
                    c6:a1:e8:8c:04:1b:37:e4:97:ca:d5:6d:dc:6d:c3:
                    f9:82:74:6d:48:01:be:96:91:2d:d9:1c:ef:64:74:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7F:51:6F:0C:75:70:07:1D:CB:E5:BD:EE:1B:74:6E:13:8D:08:DF
            X509v3 Authority Key Identifier:
                keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:a4:69:b7:61:75:b3:24:a2:f7:f6:4b:59:bc:44:8e:38:
         89:f7:de:01:ae:5f:0d:fc:9c:a4:eb:6d:f9:45:72:6e:a3:ff:
         9e:fa:11:96:ec:2f:ef:22:0e:5a:e3:9b:6a:cb:ef:a3:bc:d3:
         52:6a:74:8f:75:a5:22:ac:00:8f:36:dc:76:6c:2b:e7:6f:85:
         5d:a6:ca:0a:56:8d:dc:fe:0b:03:02:49:4f:59:74:72:9c:0d:
         8e:40:36:be:c4:fa:3c:d1:a2:13:06:02:3a:27:bf:80:ff:71:
         fa:f6:80:d1:81:c2:66:06:e8:1f:32:f3:a3:81:29:94:44:c5:
         a3:f1:d1:df:01:4e:97:60:a2:bd:79:59:6d:53:e6:db:12:12:
         a2:d9:f1:a8:29:ef:b5:eb:37:db:7c:d4:19:99:c6:5e:c8:46:
         fb:5a:1f:76:8b:c9:a7:97:a5:81:89:9e:fd:02:5b:42:a1:f9:
         21:0b:3a:09:26:39:2b:4c:fb:de:bc:6c:f9:48:3b:94:67:60:
         ec:25:03:a6:9a:89:b5:52:c1:ab:9b:8e:17:e7:9c:b2:32:fe:
         d7:62:8a:8c:71:c8:29:d4:a5:0e:e9:e7:a4:da:47:e3:aa:bf:
         7b:b2:8e:54:e8:7b:4a:d2:fb:9b:01:e9:5a:30:fa:8b:1a:3d:
         ac:cd:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:38 2025 by rpki-client