Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File:                     SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier:          OZBLzoBQav/C03zWXtE3D60xFYs9ysw1diiS2SA6cQI=
Subject key identifier:   03:F4:E1:B0:78:BC:9D:A1:2C:8C:86:36:94:C4:D6:B8:12:9A:9D:A6
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer:       /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial:       0198D7A924C3CA14CAD2EA0772D38337D83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 16:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:43 +0000
Files and hashes:         1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: AFqMKwYsw1uTn17++UDyz+gDh1YR8chxCM0HSli640I=)
                          2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:24:c3:ca:14:ca:d2:ea:07:72:d3:83:37:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
        Validity
            Not Before: Aug 23 16:00:43 2025 GMT
            Not After : Aug 24 16:00:43 2025 GMT
        Subject: CN=03f4e1b078bc9da12c8c863694c4d6b8129a9da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:89:3e:ff:e9:01:a5:88:04:e9:3d:51:7c:
                    b4:82:d1:45:fd:8b:b6:5a:57:dd:b3:08:0f:25:67:
                    1d:88:c5:af:0b:cd:45:63:7a:da:9b:29:45:5c:0f:
                    ec:ef:1f:04:d9:fa:27:c4:a2:c2:ec:6c:ef:6f:85:
                    be:2a:e5:44:ae:09:ab:2d:82:c8:ae:54:e6:99:b1:
                    fc:64:4c:fb:5f:e6:b7:7b:00:5d:be:83:ee:5a:63:
                    83:f7:1f:17:a1:41:89:56:c0:5f:1d:49:fe:aa:90:
                    4f:0e:70:be:9f:86:f9:11:60:d9:9c:77:e8:e5:1f:
                    a2:4a:c2:d8:b8:7b:92:19:93:50:e4:8e:e3:e4:10:
                    22:74:2c:ee:1a:35:37:41:60:dc:61:59:4b:13:d3:
                    85:9d:74:a1:b9:6d:74:c7:88:5f:9c:d8:9b:eb:1e:
                    8b:3b:65:bf:31:73:3a:db:31:6f:e1:7d:d8:80:37:
                    98:df:d5:d4:aa:47:19:54:b8:33:32:49:8a:9f:e4:
                    8b:2e:81:b1:4d:6b:77:fe:22:47:72:33:a4:41:7c:
                    eb:b7:17:0b:9a:1f:fe:ee:61:47:26:a1:52:c8:07:
                    70:0e:80:86:07:a3:85:cd:01:12:75:7b:96:3a:00:
                    cb:a9:d4:82:7e:56:2b:e9:c5:50:8d:f2:b9:e7:57:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:E1:B0:78:BC:9D:A1:2C:8C:86:36:94:C4:D6:B8:12:9A:9D:A6
            X509v3 Authority Key Identifier:
                keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:18:fd:73:7c:cf:6b:78:9b:e4:4e:15:f0:e5:3e:bf:bd:
         9a:3b:9b:2d:1e:da:e5:57:90:d8:9b:f0:a3:a3:b5:41:46:85:
         f3:e6:1e:47:96:e5:75:3e:8f:31:eb:66:5f:87:6b:f3:1f:e1:
         c9:82:bd:0a:95:8e:f3:1b:ea:cc:5e:87:51:41:3b:55:d7:0c:
         bd:6a:5d:87:ee:b1:02:cc:94:a0:61:c4:53:13:a2:32:7c:a1:
         10:c9:22:83:b6:4c:5a:c5:7c:d3:d6:2d:24:e8:f4:da:ca:c5:
         5f:19:70:78:61:e7:d8:65:bd:00:06:7b:36:00:7c:f5:89:d0:
         bc:cf:97:54:93:b8:10:99:67:ee:b4:98:78:b5:de:47:ed:74:
         3a:29:66:16:b8:b9:f8:3e:29:3a:45:93:42:db:9f:6f:a8:43:
         ab:a2:5b:ec:31:da:d4:c2:ab:72:a3:2f:c9:27:7f:22:12:f9:
         4c:fa:91:9a:13:2a:48:b9:c2:24:9b:af:76:a3:1e:8c:08:25:
         07:43:0c:cd:d1:4e:c6:02:34:38:51:9e:6e:44:d7:b4:e6:01:
         1b:07:a2:8d:a2:8d:ad:dc:57:92:5c:82:1d:2a:b8:96:c1:ea:
         f1:bf:36:60:74:d7:d3:84:ee:36:69:65:5c:c5:92:d6:97:34:
         ae:44:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:47 2025 by rpki-client