Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          G0174HM/DKpcHdin2U5NRnfRpKqPbOLQspsOECbhaSA=
Subject key identifier:   22:D3:38:56:45:A9:20:43:CD:F6:F3:DF:DC:0B:31:8D:15:4C:66:A5
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       0198D65F35054E9F383F49ADEEE6EC3BE9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:20 +0000
Files and hashes:         1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: qvN/qvFQ8g/9L3LvmSXC17ehY1MBr1nLdzE9H2Oewg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:35:05:4e:9f:38:3f:49:ad:ee:e6:ec:3b:e9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Aug 23 10:00:20 2025 GMT
            Not After : Aug 24 10:00:20 2025 GMT
        Subject: CN=22d3385645a92043cdf6f3dfdc0b318d154c66a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:8b:97:cd:b0:46:b1:19:23:fe:08:65:27:
                    6b:19:ea:01:4f:7b:40:4c:2a:9d:36:20:6e:e8:aa:
                    d1:55:73:6c:f9:85:01:55:cd:54:58:c0:42:dc:e0:
                    73:22:6e:6e:20:68:07:97:30:d6:67:88:91:c9:10:
                    7c:5c:4d:ff:ea:5f:57:40:a2:99:f2:00:b6:d3:13:
                    25:14:60:61:4e:ac:1a:7a:f7:25:03:4a:b5:8a:a2:
                    82:c5:dc:c1:df:9d:e4:d3:2b:45:df:de:b3:35:a0:
                    5b:09:de:96:8f:1e:4b:57:f5:3a:0f:09:f0:90:65:
                    17:59:94:0f:7a:17:9a:e3:f8:72:81:7f:68:9e:89:
                    88:22:46:79:2f:fd:44:65:2e:af:25:a5:23:97:f4:
                    44:a4:ff:c6:20:9b:2a:4a:4b:aa:c0:0f:57:b1:d2:
                    a6:b7:95:e3:f8:db:a0:29:68:96:5b:3a:c4:93:a4:
                    f5:58:0e:87:15:51:25:5b:ed:a2:ac:b9:be:60:74:
                    55:37:a0:11:34:2a:b2:aa:1a:5e:d7:4e:25:b4:fc:
                    11:90:f8:8a:ac:95:35:b9:1d:bd:7e:35:49:39:25:
                    54:b9:2e:9f:cf:da:23:dd:69:26:8e:cb:70:5c:7f:
                    3b:d1:1f:2f:a0:cf:c5:bf:9f:83:39:dd:08:6e:d8:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:38:56:45:A9:20:43:CD:F6:F3:DF:DC:0B:31:8D:15:4C:66:A5
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:20:ac:c8:63:18:c5:6a:3e:10:ea:c6:4b:87:bd:6b:62:
         ee:d9:60:ce:46:f6:3b:98:17:41:19:f9:98:9d:cc:a9:db:02:
         2b:42:24:bd:dc:19:bd:3d:a6:a9:2d:07:98:bb:b6:6c:4c:7d:
         8f:af:ef:56:72:01:2b:b8:a7:36:aa:a8:89:52:3b:0d:d7:24:
         8c:99:3d:41:ed:8d:44:0d:c1:dd:b0:d8:f1:3b:24:2c:8f:f5:
         4d:e7:06:33:c3:cb:fd:43:88:ec:35:96:84:4c:f9:a2:02:87:
         c5:0e:53:e5:93:5f:69:75:93:15:7d:c1:7b:1f:4a:89:0b:2a:
         86:9f:a0:a4:38:9f:00:9b:d0:98:f6:3c:bc:fa:2f:7f:fa:fc:
         f4:41:46:ff:c0:00:08:fc:f7:8c:5c:7b:69:fc:54:e3:f7:fa:
         0a:a5:c3:e9:74:5a:d5:d2:0d:8b:39:4f:c1:a9:c5:2f:0e:a2:
         bc:58:f5:78:1f:c7:ae:65:40:ce:25:f1:7d:a0:ba:dc:4c:a8:
         3e:0d:f0:11:18:a4:7f:8e:a1:ad:1b:65:71:47:9e:49:a9:07:
         fa:05:e2:1a:0c:39:1f:86:9e:26:14:e1:f6:ec:7d:c5:a5:dc:
         99:e9:eb:84:f1:56:ba:5a:76:9c:a4:42:2f:61:b5:0a:e3:47:
         03:0f:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:10 2025 by rpki-client