Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File:                     DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier:          8jpEbTYPNe/wWx2z3ggiQOdsLbSKBjMJQPWBk3gBnFw=
Subject key identifier:   46:8B:74:ED:F6:E6:C4:9A:0C:F2:4D:38:FC:30:DE:CA:89:A9:73:73
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer:       /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial:       0198D5158EBCFE0E0160BF654A532E7BDCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 04:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:16 +0000
Files and hashes:         1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: 4F3hg+J2B2yNr1YNqpWdj8v5nS6IQHvKLe441mJO3J0=)
                          2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
                          3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:8e:bc:fe:0e:01:60:bf:65:4a:53:2e:7b:dc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
        Validity
            Not Before: Aug 23 04:00:16 2025 GMT
            Not After : Aug 24 04:00:16 2025 GMT
        Subject: CN=468b74edf6e6c49a0cf24d38fc30deca89a97373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:9c:5b:da:dc:b2:f3:fa:1a:f8:31:37:29:
                    60:61:c0:50:0b:40:ca:57:d8:88:77:ab:1e:d3:cf:
                    56:d4:c3:1e:4e:a9:1b:73:fb:14:36:4a:c4:99:5d:
                    05:00:d1:4d:ae:e1:d1:42:fc:65:3e:e8:0b:0b:e0:
                    69:ca:a8:e2:65:57:3d:6d:60:37:17:22:cd:37:fa:
                    23:d5:f9:52:dc:8f:88:a4:4b:c4:e6:e2:20:e3:e7:
                    fc:b3:2e:59:8b:b8:e0:65:ff:f8:8d:69:bd:72:fb:
                    c7:22:3a:7e:89:00:12:43:d3:81:f6:ab:44:63:9c:
                    7e:f9:23:1f:db:74:c5:01:a9:b4:7f:2a:6f:1c:9b:
                    e3:69:0e:b0:00:9a:27:70:20:b6:80:8f:b9:ff:1d:
                    9d:64:6e:b3:3b:63:f6:32:c3:80:b8:7a:57:5f:18:
                    a3:71:47:e2:37:96:ef:dc:57:ae:ac:7d:c6:8e:d0:
                    8d:3e:19:48:4c:39:dd:b9:60:b3:1b:e8:99:31:3f:
                    80:76:85:9d:5d:ef:17:24:7d:68:9e:04:35:bb:80:
                    55:0e:52:28:0c:7f:c1:8d:a9:e3:8d:a9:a4:fb:23:
                    ff:05:c5:79:5b:4d:9d:f5:29:1b:13:95:66:51:04:
                    59:2e:fc:31:74:d5:37:96:fa:25:76:a8:c4:60:bf:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:74:ED:F6:E6:C4:9A:0C:F2:4D:38:FC:30:DE:CA:89:A9:73:73
            X509v3 Authority Key Identifier:
                keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:bf:6f:15:3a:53:58:02:6c:55:78:30:69:6a:0a:1c:2e:
         52:58:e6:fe:93:c7:c1:d4:ff:0c:f6:6b:02:5c:06:92:43:b2:
         61:57:6d:e6:2d:19:86:43:1b:ce:1c:56:7c:4f:74:90:c0:d7:
         77:be:09:23:cb:09:fa:bd:cb:80:59:6e:16:17:65:bb:a7:b8:
         1b:2c:e5:ad:2b:35:1d:51:92:50:d0:81:04:fd:d9:90:bc:03:
         ff:6a:c7:75:e8:50:0b:77:a8:7c:be:c6:2a:5e:93:f9:9b:95:
         6b:43:18:db:bb:30:4e:b5:15:ea:79:22:ba:63:f5:8c:12:1f:
         8e:d4:c7:1f:66:2c:a9:8b:05:f3:5e:96:b5:a1:68:61:ed:ff:
         f4:48:24:e0:5c:31:71:09:9a:dc:d1:25:58:5f:d5:c4:c2:f5:
         e4:78:f7:6f:f2:fc:fa:83:cb:f6:61:56:00:32:fa:57:f4:56:
         52:e3:3a:ac:e1:85:da:b5:53:84:31:80:32:59:48:ba:c4:fd:
         18:72:51:33:3a:2e:f7:8e:f2:d1:9e:36:6c:50:92:5c:8f:13:
         5e:1d:eb:6c:10:e0:7d:58:17:62:3b:15:e1:80:7f:30:7b:83:
         9a:41:53:ba:c1:59:cf:e4:82:14:76:8e:ca:63:03:f5:00:5c:
         61:81:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:16 2025 by rpki-client