Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          tb4k8mt15Dn/HQm9rktscC5ocFSok+28H4RtI/hXmD0=
Subject key identifier:   5A:E1:83:E0:E3:D6:DA:32:64:B7:BF:EB:07:90:62:3F:73:72:C7:15
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       0198D47277F6A0D7812068A4CCB8E8C48E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:08 +0000
Files and hashes:         1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
                          2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
                          3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
                          4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: N50qrqCbZ0plmUpgD41fOAiE/s7ucyX20cwkZPtDwi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:77:f6:a0:d7:81:20:68:a4:cc:b8:e8:c4:8e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Aug 23 01:02:08 2025 GMT
            Not After : Aug 24 01:02:08 2025 GMT
        Subject: CN=5ae183e0e3d6da3264b7bfeb0790623f7372c715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:f6:26:93:d1:9e:f5:ff:1a:4e:20:42:c7:
                    39:d7:97:f6:a8:0e:98:58:9c:14:e0:d6:6c:29:53:
                    26:e4:19:5d:50:07:46:52:c7:fe:21:9c:21:6f:f0:
                    8a:9b:3a:ec:a8:52:33:f4:bb:0b:08:7a:cf:2b:f8:
                    c0:aa:51:50:24:84:22:11:5d:ca:ec:99:a9:89:83:
                    d3:45:f6:27:30:53:6d:b1:19:bd:86:27:3d:6c:85:
                    02:47:9c:2f:01:90:18:64:20:b0:2c:cf:a5:59:95:
                    8b:15:6a:38:d2:cc:80:c5:60:5f:83:09:95:47:c4:
                    45:f1:fe:e1:2c:de:e3:a0:6c:f6:c6:64:37:12:a9:
                    52:b2:13:c4:36:69:dc:a1:8d:76:da:ef:5c:6e:f7:
                    10:0f:c6:6e:eb:e5:4c:94:b2:d2:c4:86:95:f1:55:
                    d4:65:e0:d2:e8:3b:96:8d:01:f8:90:24:23:63:ba:
                    26:a3:57:81:54:52:39:a0:eb:fb:59:7f:a3:2a:c6:
                    af:50:0b:e8:3c:2b:55:79:e2:e5:38:0b:da:0d:df:
                    c3:7c:f3:61:4e:03:ed:a3:66:77:ae:29:35:93:4a:
                    01:e8:fd:e7:4a:32:ca:70:89:46:5a:89:be:ef:79:
                    d0:00:a3:83:32:48:4c:8c:33:1a:19:a2:d9:28:97:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:83:E0:E3:D6:DA:32:64:B7:BF:EB:07:90:62:3F:73:72:C7:15
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:66:ed:75:19:4a:f5:22:60:29:4a:c9:a9:be:e5:07:a8:6c:
         58:2e:26:1a:4e:ca:30:78:95:8e:1e:e5:88:90:5a:91:89:b8:
         22:4c:df:32:0c:7a:5e:bc:f2:8f:48:35:ca:93:57:2d:7d:a0:
         f8:25:a6:ed:a1:81:8f:31:fd:e5:a8:e9:38:b8:9d:28:b6:93:
         98:1d:e8:9a:6c:6c:56:47:e1:ed:80:c4:20:30:22:e0:af:0b:
         bf:eb:78:a7:ec:c4:4c:5a:1b:6e:62:e7:1a:2f:19:b3:ee:5a:
         e4:02:1c:9b:73:fe:8f:87:bc:bf:d9:a2:58:c7:43:f4:c2:88:
         ca:50:88:8f:fc:f7:93:44:61:92:d9:c7:1c:fb:e4:1e:f9:28:
         da:33:72:b2:d2:85:74:d4:53:61:94:c0:b7:dd:49:bc:21:12:
         d1:25:f3:2e:58:0c:d7:09:46:e1:bf:59:22:95:76:91:0a:99:
         06:cd:9b:3f:c5:67:2a:94:57:f8:f3:fc:1c:0c:ab:29:f8:70:
         ec:2b:db:f6:3c:05:fe:84:f3:e1:5d:09:08:23:79:13:72:a4:
         ba:14:88:91:58:b7:bb:ff:f4:ca:9e:4f:d4:ff:6b:a2:fa:5d:
         25:83:48:ee:41:1d:af:24:ad:6d:52:06:1d:a1:53:5c:1f:0c:
         34:d5:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:43 2025 by rpki-client