Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          g5rZJgFjarl96fK3binYCq9PD3WmXG53D8C6cQMgOlA=
Subject key identifier:   8B:71:B8:DC:A3:2B:87:62:D1:0D:00:04:27:29:45:30:6F:5D:A9:9A
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       0198D4E01249ACCFCA59E32BAE805E443C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 03:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:51 +0000
Files and hashes:         1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: fs2yrKEcN5hFsywbOvTY0iyMlAJqP9V7fRqa8UdZJgk=)
                          2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
                          3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
                          4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
                          5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:12:49:ac:cf:ca:59:e3:2b:ae:80:5e:44:3c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Aug 23 03:01:51 2025 GMT
            Not After : Aug 24 03:01:51 2025 GMT
        Subject: CN=8b71b8dca32b8762d10d0004272945306f5da99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:d5:d8:dd:3f:ec:6b:16:d3:c9:83:c2:44:
                    70:5b:1b:36:c5:b0:df:62:1e:ab:d7:83:30:be:b4:
                    58:92:5d:24:da:da:f7:07:3d:58:67:87:eb:40:dc:
                    39:ed:c9:29:d6:75:3f:a8:74:5a:f4:6e:5a:e4:c0:
                    d4:e3:7b:a7:dc:34:bc:18:63:39:c2:51:74:72:8a:
                    3a:6b:0b:05:43:51:3c:df:a6:cb:cc:ec:11:92:89:
                    70:cd:7a:33:cc:d0:66:45:e9:2b:fa:84:76:fd:4d:
                    a4:f0:69:53:b8:73:10:50:ff:df:a4:89:40:7d:c5:
                    08:ef:51:02:92:aa:aa:42:b6:08:54:58:04:ca:82:
                    93:d8:6b:81:2f:76:b9:b2:b3:38:a9:54:f1:8b:32:
                    4c:ac:b9:ec:05:2f:d2:08:eb:14:5e:56:c6:20:0d:
                    0b:2b:8a:f9:c0:95:46:df:bc:50:33:52:86:52:68:
                    70:97:31:8c:b7:6f:aa:ea:ec:d3:97:19:8d:24:0c:
                    89:88:3d:03:b6:21:78:a8:cd:6a:ac:65:ca:ea:a6:
                    78:e9:d6:7e:ed:d9:90:2d:c3:00:a9:41:cf:1d:e5:
                    f7:92:fc:06:f7:56:8a:e4:3f:23:f6:18:fb:9d:22:
                    4f:66:21:e9:6b:6c:d6:5a:36:98:61:60:52:3e:ff:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:B8:DC:A3:2B:87:62:D1:0D:00:04:27:29:45:30:6F:5D:A9:9A
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:b0:9c:c7:ec:5b:e1:25:d7:7d:aa:f8:2b:5f:e6:cc:b6:
         7e:b9:94:1d:24:cf:38:f5:c8:ac:ba:8f:73:6e:e2:e9:61:ad:
         92:e2:94:80:94:28:af:21:01:4a:32:29:9d:8a:9c:0c:de:d8:
         c0:6f:15:f9:a6:e8:dc:69:8e:f2:e7:40:fa:8b:87:48:23:b4:
         10:19:9f:6b:02:2e:6e:59:13:91:86:fa:1a:0c:62:c3:1f:5a:
         fb:f0:10:6b:c6:c2:e0:6f:ff:a0:a5:bf:43:db:27:b4:80:b5:
         9c:d7:48:4f:57:b5:79:53:2c:41:44:c6:77:7c:32:54:5e:04:
         21:96:17:db:19:f7:b8:d2:57:de:4f:55:35:2e:27:f4:42:09:
         cc:12:ea:ae:59:f2:7b:98:f0:42:02:68:d4:b9:55:74:22:9e:
         6a:8c:99:d5:b3:88:ff:bd:a5:46:ee:35:92:c4:95:33:ae:53:
         40:b3:1c:26:8c:c8:24:67:a8:b5:1e:6d:09:64:63:48:33:37:
         8a:ef:58:5f:8e:1f:b9:98:f7:ea:c5:6b:90:60:ab:49:79:fd:
         8b:2a:7f:1b:82:2f:cc:7e:f2:f2:f0:7e:b0:20:7e:e4:ac:43:
         45:e0:f3:04:09:77:a6:8f:f8:f2:5c:f6:b6:a9:f5:ee:56:e3:
         55:1a:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:06 2025 by rpki-client