Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          yEZrB16dFa6Wkv0gWFcw8IE7XBLjF53xbtbPW4Qlbmw=
Subject key identifier:   A9:B2:CA:0E:27:3E:66:FD:16:98:49:C8:7C:21:B8:12:E7:55:DB:3F
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       0198D5F1997B1874A7F6E1162388F79C535D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:36 +0000
Files and hashes:         1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: jg2N8N/5NzqsmeWBHf6e2DeD1Nmh4dP4s89UZ9+G1BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:99:7b:18:74:a7:f6:e1:16:23:88:f7:9c:53:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Aug 23 08:00:36 2025 GMT
            Not After : Aug 24 08:00:36 2025 GMT
        Subject: CN=a9b2ca0e273e66fd169849c87c21b812e755db3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:ed:30:c9:31:25:80:8e:88:9d:5e:09:56:
                    31:98:7f:a8:9b:d2:2a:da:04:2f:b3:a0:22:39:38:
                    64:50:5e:43:d6:fc:93:12:f3:27:00:0a:91:ed:47:
                    35:28:28:57:21:46:f9:00:21:4c:be:a1:c0:c6:5e:
                    5e:78:84:03:fc:46:78:67:da:0c:2b:cf:cb:a2:12:
                    55:f2:c0:79:46:c4:18:6a:ac:74:93:02:39:82:e8:
                    b0:d6:31:69:ce:46:24:7b:a5:00:c7:67:de:42:04:
                    91:87:ed:fb:e1:fd:e5:42:2c:a5:98:73:d4:74:93:
                    20:f2:23:1c:4a:76:75:7e:8a:e4:44:d8:24:1c:24:
                    e1:90:cd:8e:02:a7:53:78:69:5e:76:5d:c0:f4:57:
                    8c:cd:37:66:00:ae:47:94:91:b7:91:74:3a:eb:dc:
                    50:6c:15:0d:30:b7:e5:45:5f:6b:90:69:f9:46:6f:
                    0f:d9:3a:e3:d0:16:a9:f8:3d:89:ca:54:89:9b:03:
                    c9:76:4f:e8:e1:08:78:ce:e7:18:32:6f:bb:49:83:
                    34:f5:85:13:26:c9:24:99:f2:29:5a:c1:a2:9c:86:
                    2a:7d:01:8a:f9:b2:1b:43:4a:ff:03:62:60:1d:c7:
                    4d:13:8a:05:50:20:79:b4:89:1d:5c:99:aa:23:ab:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B2:CA:0E:27:3E:66:FD:16:98:49:C8:7C:21:B8:12:E7:55:DB:3F
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:16:c0:5f:60:e8:46:ba:cf:15:01:9e:a3:e7:5c:18:2c:
         35:21:14:4b:85:84:ff:17:b8:09:32:2c:8c:e6:5c:5c:8c:a2:
         7a:26:d3:56:12:9f:b3:b0:b2:f5:bf:75:74:2c:54:f2:82:7f:
         6e:54:78:c0:49:35:46:03:36:8d:de:54:ed:b6:66:8c:4f:99:
         09:27:46:7a:dd:f8:74:72:19:74:de:da:ba:7f:5d:a1:e2:e3:
         e7:d3:d5:fe:60:ba:85:64:aa:aa:c1:7c:11:46:5c:02:90:a1:
         9d:e5:a7:79:b7:8d:a5:54:e8:60:44:2a:2f:27:9f:1d:77:4f:
         ed:36:69:d8:72:48:72:c5:36:d6:29:b1:8f:78:9c:c1:83:e5:
         72:a6:ef:dc:8b:7e:37:a9:d4:da:8d:d1:0c:7e:7f:f5:b4:05:
         38:7e:60:db:5f:f7:41:fe:57:8f:e1:dd:2a:00:4d:0d:1b:19:
         d2:66:8c:16:fa:d2:54:ec:a9:01:44:8b:fd:d3:14:91:f7:d0:
         67:73:69:f4:7e:5d:43:b2:1c:8b:16:fe:b2:67:3e:ac:bc:d9:
         be:99:ce:b0:20:2a:68:f6:13:8f:b2:b0:f8:a5:c5:99:08:80:
         d6:73:76:00:25:8d:8d:7d:d7:21:88:61:b5:17:a4:a2:41:cc:
         0a:c4:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:15 2025 by rpki-client