Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          3FJ7X4g0t190qyZr+yXdALJV4GRSW4Y0ZaeguhKxOnA=
Subject key identifier:   51:86:F1:4F:23:03:3E:75:0F:5E:64:DE:70:CB:D4:77:B2:4C:76:DA
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       0198D515661EE902514C8EFE0C27842AEB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:05 +0000
Files and hashes:         1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: lGwBd0tWjSRCxfk5AAGOFyCS5CsDYuIFONNwJ4K5n6Q=)
                          3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
                          4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:66:1e:e9:02:51:4c:8e:fe:0c:27:84:2a:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Aug 23 04:00:05 2025 GMT
            Not After : Aug 24 04:00:05 2025 GMT
        Subject: CN=5186f14f23033e750f5e64de70cbd477b24c76da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:f1:60:ee:e5:ad:79:77:14:29:ed:58:20:
                    8b:dd:7b:f1:fa:9a:50:09:2e:cd:a0:de:94:ac:9e:
                    44:5e:5b:25:78:e6:a2:89:7b:ef:33:84:d8:08:a1:
                    b0:1f:a0:bb:b2:48:84:50:19:70:8c:21:f9:37:49:
                    a5:4a:73:43:2a:4f:d0:1e:4c:05:1e:60:c1:50:9c:
                    45:97:d7:b6:07:6d:91:fa:94:72:39:bc:9c:ca:38:
                    e3:01:cd:23:62:9e:26:9c:7b:7d:ae:ac:36:ac:06:
                    97:d0:a4:6e:8e:2d:0b:5a:83:5d:63:d4:f1:c4:94:
                    97:e8:9e:fe:96:0a:b0:3a:e8:67:11:7f:a6:23:e8:
                    cf:dd:05:a1:6c:72:45:73:62:7e:14:d3:26:fa:5a:
                    f4:5c:4a:38:6f:32:31:00:18:eb:8e:59:e3:ff:41:
                    8a:93:cc:b9:df:ca:78:e6:31:b5:10:6d:59:71:4e:
                    a8:4a:bd:5c:78:76:05:fc:ec:52:05:18:f2:19:22:
                    b1:d9:b1:e1:4e:56:4c:ae:34:72:69:26:e9:f1:86:
                    ea:88:39:e3:30:96:7b:db:25:97:6c:4b:23:28:52:
                    68:d8:0a:b4:a1:f1:ce:84:e9:70:ac:7c:0a:2d:69:
                    37:c4:1b:a8:4f:7f:cb:ff:43:ef:ea:d7:50:ec:bb:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:F1:4F:23:03:3E:75:0F:5E:64:DE:70:CB:D4:77:B2:4C:76:DA
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5c:ea:6d:ab:99:2d:94:fa:c5:e0:49:17:8c:c3:8d:06:79:
         da:4d:e2:df:20:12:b7:b2:07:e0:58:98:a9:88:ff:75:f9:52:
         ea:73:09:49:58:e5:1b:e6:a7:5d:a0:0c:97:3d:36:16:d6:fb:
         4b:ad:46:74:c7:a7:4b:97:6f:15:d2:3d:f9:cb:86:b4:96:f2:
         d1:86:17:4c:2d:fb:34:21:19:c3:72:14:e7:ad:7e:53:88:aa:
         6c:c4:ae:f4:80:c0:fe:5e:90:4d:12:f7:a4:3a:af:76:4b:f2:
         df:48:ee:66:65:97:be:ef:19:c1:66:5f:ed:82:f4:3a:82:b2:
         f5:ed:4c:5e:87:3e:1a:64:fb:5c:fc:cb:e4:bf:22:b4:ec:41:
         6d:30:a2:48:76:79:ab:4b:8d:6b:5e:5e:e3:78:f8:b2:05:5d:
         be:63:94:12:b2:4f:52:dd:f5:cb:e6:3b:25:d3:3e:ff:87:33:
         d4:47:5a:82:b2:ff:36:2e:8f:5a:be:ad:5c:41:01:57:29:bb:
         34:14:e4:d6:a5:43:eb:18:ea:12:40:1e:79:a1:6b:6e:c5:59:
         f4:09:34:d7:c9:b7:76:03:3b:1f:ad:23:2a:0b:f2:ff:d5:3d:
         d0:c9:0b:db:d8:61:48:07:0e:ca:6a:5b:23:c1:c0:23:96:7d:
         3a:c1:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client