Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          whFXF4r/LniA5hjebOlTCZLl3+xn4RlOfDbxPJ2cyqQ=
Subject key identifier:   94:07:58:1E:44:AA:6D:47:78:92:C1:2E:50:39:E5:13:C5:F2:FB:EE
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       0198D4A82F5F64D5B3E76E3159A3424D6886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:48 +0000
Files and hashes:         1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: NeMC5zNvn9MUWU/H3C9132oshxNvVP1K5GOmLArhstI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:2f:5f:64:d5:b3:e7:6e:31:59:a3:42:4d:68:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: Aug 23 02:00:48 2025 GMT
            Not After : Aug 24 02:00:48 2025 GMT
        Subject: CN=9407581e44aa6d477892c12e5039e513c5f2fbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:8d:0d:9e:89:f6:ca:94:05:3c:f3:22:bb:
                    a8:f1:71:93:bc:cc:60:5e:44:08:b3:b2:e8:d6:4e:
                    e6:21:1e:fd:e4:b2:b0:9b:fe:8e:81:33:b1:ba:43:
                    80:8a:1c:b5:31:f9:f0:63:ca:7f:35:54:68:3c:b1:
                    15:e1:f6:f6:e5:f1:e4:b2:08:c5:4f:db:57:04:07:
                    ab:3d:32:fa:c0:cc:d3:b6:07:b4:b6:f4:b3:48:f3:
                    1a:0a:30:00:4b:c1:75:17:79:0b:b0:8d:45:b9:bd:
                    46:88:65:6e:f3:97:32:b7:a4:ee:54:18:f3:19:e7:
                    1a:c4:7f:f1:18:66:66:78:05:a5:86:7e:8e:7c:f2:
                    78:c0:58:cf:84:df:2d:60:17:0f:bd:0c:24:bb:b1:
                    20:94:67:53:bf:e1:b8:fa:e5:2a:d7:a7:c2:7b:ab:
                    e2:81:a7:a8:e5:13:4c:76:c1:0a:e7:f5:ee:78:87:
                    07:85:a0:d7:67:66:a0:a3:11:0b:c5:fb:47:15:4b:
                    e0:ba:9b:e9:6d:4f:6c:e4:2b:0b:e0:9f:b5:b4:93:
                    2c:58:5f:0f:12:91:47:29:87:fb:65:fa:ec:4b:26:
                    82:30:5d:01:29:76:38:61:e4:91:27:c9:20:77:0e:
                    61:94:7b:53:5f:dc:3b:a8:28:18:48:c0:a5:e2:ea:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:07:58:1E:44:AA:6D:47:78:92:C1:2E:50:39:E5:13:C5:F2:FB:EE
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:67:af:91:59:41:80:2e:48:8c:71:ac:b4:12:be:8e:01:
         bc:60:d3:e1:ac:3f:35:6a:bb:99:71:e9:a6:00:fc:55:84:28:
         11:0a:cb:33:64:1a:48:9c:9e:7e:56:2c:05:9a:56:59:af:11:
         9a:18:04:42:ac:4f:98:50:11:4a:9a:76:6c:10:54:d0:98:0a:
         e0:fa:34:9e:08:18:df:b0:2d:57:2e:67:34:23:22:4c:6e:81:
         78:8f:4a:c0:7b:82:1f:24:e2:cb:f1:23:28:ee:90:93:70:cb:
         ff:89:23:72:61:08:b8:30:34:80:d0:45:f0:97:0f:bc:68:c1:
         16:18:da:76:5e:05:ee:09:77:c6:f6:c0:58:55:10:2e:ee:51:
         0b:04:1a:05:39:df:0a:48:32:05:0c:af:5b:bc:ef:b3:b2:5f:
         cb:03:8b:a7:27:e5:c3:1a:f7:4a:03:0f:cd:56:99:b2:27:28:
         e2:7e:d8:12:fb:ea:f7:1e:45:0c:cc:52:51:05:ba:11:a9:74:
         8b:f1:e8:8e:fa:a4:8a:f5:39:e6:64:4c:51:6c:eb:36:f1:2f:
         08:0c:96:b9:61:7c:fa:b0:d3:3b:bc:41:95:f7:53:3f:36:d5:
         67:69:2d:3c:f4:ff:a9:f8:43:b0:50:49:15:4f:ec:55:a3:63:
         a9:4e:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:20 2025 by rpki-client