Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          c6/xushYu1Wt6dZ8enOBXQvRfK+OgxrjorXDJEPC2d0=
Subject key identifier:   6E:06:2D:BA:00:E0:6D:1E:F6:D1:6B:10:DA:B5:E3:B2:CA:A6:24:CA
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       0198D5F193752F27B39FD7DE4393D6497CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 08:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:35 +0000
Files and hashes:         1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
                          2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: RJRm8QVgLgbrmBbK8fsp0euizuMxYtAa57JZo/WRcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:93:75:2f:27:b3:9f:d7:de:43:93:d6:49:7c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Aug 23 08:00:35 2025 GMT
            Not After : Aug 24 08:00:35 2025 GMT
        Subject: CN=6e062dba00e06d1ef6d16b10dab5e3b2caa624ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:b8:62:2b:2c:f4:c6:e6:ab:82:77:26:5d:
                    a2:e9:c9:52:cf:5a:9b:67:b1:99:2e:c7:dd:b6:81:
                    ec:38:8f:d2:8d:84:48:db:82:b5:1a:ea:aa:5e:6a:
                    cd:a9:89:a9:c4:78:39:18:98:b3:7b:77:35:53:79:
                    3d:36:e3:27:25:61:5b:1b:4f:3d:69:2a:6c:10:52:
                    e0:a5:89:a9:3e:3d:ae:5d:3d:1e:27:7c:ea:85:fd:
                    f7:ec:1f:d1:68:d1:50:e1:63:c3:ab:69:6e:d2:d3:
                    ed:5a:72:6c:d2:1e:78:a7:89:3d:8b:ed:69:fb:14:
                    fc:b3:d9:af:62:ba:b5:b6:89:15:ec:9e:c9:6e:95:
                    d2:01:7f:cb:90:66:f2:3c:20:9a:a0:43:a2:28:de:
                    60:ba:9b:ef:0a:65:c1:ac:5e:f6:31:23:da:b9:10:
                    ab:fd:b9:4f:19:58:14:71:2f:fe:09:31:c8:f5:52:
                    7b:f0:0a:2c:2b:ef:01:70:54:e8:52:f3:cf:da:3d:
                    b1:98:d0:d8:3f:b8:bf:fe:96:55:6c:76:be:9d:72:
                    53:a8:e0:d0:8a:11:bb:a4:3f:38:bd:ef:0a:19:be:
                    0d:67:76:11:42:a3:b2:60:0e:6f:b2:fb:51:d8:d4:
                    b7:19:3b:ac:23:ff:f5:af:85:95:ad:58:b7:cd:17:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:2D:BA:00:E0:6D:1E:F6:D1:6B:10:DA:B5:E3:B2:CA:A6:24:CA
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:96:83:7c:c9:26:b3:b3:3d:2b:14:28:05:66:77:f6:e9:9f:
         77:fd:41:42:de:60:4c:c2:ff:68:80:ca:ac:d3:e9:81:8b:32:
         3f:45:de:61:96:0a:e5:59:ee:a2:f8:b5:52:a4:52:a4:c5:c1:
         63:b7:4e:63:03:3e:c3:20:ed:37:e0:0d:f5:cf:91:2d:fc:91:
         04:e9:03:14:92:67:0f:89:d8:88:94:ff:af:06:9c:6f:40:59:
         ef:c6:37:8f:29:84:1a:31:57:6d:51:dc:14:f3:db:fc:0d:88:
         c7:f9:ea:5e:6b:e7:24:04:57:8c:ba:06:ca:85:c0:5f:76:2b:
         56:21:e9:c6:a5:b2:f3:1b:7c:0e:fb:13:10:a3:d9:89:23:26:
         70:98:9c:9a:a4:04:52:93:ec:3b:52:ce:f9:6f:90:7b:6b:6f:
         8f:fc:71:f5:61:d7:d9:47:e9:14:e5:f3:b8:cd:13:5f:13:f6:
         06:bc:e3:55:2d:e5:1d:c2:a3:78:2b:5a:aa:47:52:65:91:06:
         f1:a5:6d:f5:a0:0a:d1:7b:c1:bd:68:a0:fc:20:ba:43:e2:c9:
         87:fb:64:6e:c0:07:9c:98:c4:f2:25:bb:ab:38:e9:42:99:39:
         a5:dd:2f:c7:6c:41:46:4c:05:e0:66:2f:d7:42:be:e9:60:da:
         95:8e:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:56 2025 by rpki-client