Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          IdOUsuuMrBuybnsgnD/d6hmpBd8fycTCAzqR7pAFQ6Q=
Subject key identifier:   3B:55:C4:EE:ED:39:8B:E8:07:5C:11:5B:FE:F5:67:68:23:65:D6:18
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       0198D4737A91998DAA268F288C97225C649F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 01:03:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:14 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:14 +0000
Files and hashes:         1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
                          2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
                          3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
                          4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: H/k6mxRiLA3k0hulLCwVAgPnKLIN3wqr3wWngwJY9eg=)
                          5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:7a:91:99:8d:aa:26:8f:28:8c:97:22:5c:64:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Aug 23 01:03:14 2025 GMT
            Not After : Aug 24 01:03:14 2025 GMT
        Subject: CN=3b55c4eeed398be8075c115bfef567682365d618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:01:a0:79:5d:47:a5:16:6a:4e:ed:1c:c0:
                    cd:5e:6c:90:8c:5d:9a:60:45:79:cd:b0:53:d9:71:
                    6a:3e:2c:02:15:81:23:cd:e0:a6:16:2d:20:43:0f:
                    21:73:cf:e1:c7:f4:af:e5:fd:da:6e:b9:03:f9:74:
                    83:a0:9f:b7:de:d9:27:b6:55:a0:22:d9:ff:cd:90:
                    4a:81:e0:d8:17:f6:c3:af:19:34:31:9c:70:9c:6b:
                    41:4b:af:53:ed:83:fe:2a:50:ea:29:40:b8:3b:01:
                    5c:e0:ec:f4:86:ee:fa:7b:90:80:67:3b:cf:ed:28:
                    85:52:69:d8:ae:46:0b:d2:dc:b7:93:35:22:b4:51:
                    64:6d:6e:f5:59:8f:8d:d5:e0:f0:4a:a4:57:fd:cc:
                    62:d6:e3:bd:85:32:38:12:96:a5:25:a1:e5:67:11:
                    48:93:d8:df:c3:bb:5b:9c:88:d3:09:21:91:ab:af:
                    f1:aa:70:0e:25:1d:3b:3f:45:b6:4c:80:af:bb:23:
                    34:55:df:36:52:41:47:e4:e3:a6:29:af:ab:20:64:
                    ab:d7:9b:03:21:41:88:0e:58:e8:26:57:1c:4a:d5:
                    d6:07:07:64:af:77:d4:22:1f:d1:f9:8d:1d:bf:f6:
                    48:e4:c4:53:b4:c3:ba:c1:65:e8:e5:6b:b2:d7:01:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:C4:EE:ED:39:8B:E8:07:5C:11:5B:FE:F5:67:68:23:65:D6:18
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:00:b6:65:4a:77:41:b4:8c:13:f8:61:ae:83:d6:f5:0f:
         8b:6c:ce:9c:72:54:cb:d9:27:a7:92:1a:9e:90:ff:f0:3d:9e:
         64:7b:67:25:57:d7:47:6f:c3:1a:25:7d:d8:a7:ab:8e:71:ec:
         32:c1:20:7b:0e:62:a7:7f:9d:3f:e4:16:53:1f:5f:30:a5:a3:
         4d:51:7b:8c:d8:9a:a8:6f:8a:ba:5e:61:50:f2:27:87:8c:05:
         61:29:bc:3c:fa:24:8a:ba:3f:cd:e6:73:7a:fc:ee:72:c7:85:
         2f:0a:8c:88:17:99:3a:ea:5a:06:87:0a:f2:e2:3d:ba:77:89:
         1a:58:d0:37:1b:85:79:b6:2e:c8:88:51:68:e8:00:10:66:93:
         3e:0b:cd:39:7e:34:7a:e1:49:a2:d7:ad:28:d4:a2:2e:eb:92:
         6f:c6:82:5b:29:94:3f:08:9d:3a:47:37:69:69:9e:63:c2:03:
         8d:b9:2c:bb:6f:9d:fb:dc:3b:6e:d0:c1:fd:ab:c7:de:65:f9:
         16:bb:bf:96:cc:d0:1b:d6:77:9e:ed:89:04:15:c7:73:82:23:
         48:a0:10:15:7c:8a:84:55:d9:f6:c2:39:54:5d:ce:36:0f:27:
         47:23:56:8a:52:62:7e:89:74:c0:1a:e3:3a:24:90:c2:50:d9:
         25:16:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:45 2025 by rpki-client