Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File:                     eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier:          B/lyNDJDIFkJ5bQ1P/YECDNcS5O0dGfBEKMPexk0tXA=
Subject key identifier:   F6:08:75:3F:06:29:B2:4C:48:2E:88:48:B8:68:7E:3F:56:20:88:ED
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer:       /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial:       0198D6CD3D9C480C9D4F6B21CAFBE7DAF986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 12:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:31 +0000
Files and hashes:         1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
                          2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: Jb9jpBib6ym6stdga+zl6KhGOUgt6+TqjDl/5ivb7wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:3d:9c:48:0c:9d:4f:6b:21:ca:fb:e7:da:f9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
        Validity
            Not Before: Aug 23 12:00:31 2025 GMT
            Not After : Aug 24 12:00:31 2025 GMT
        Subject: CN=f608753f0629b24c482e8848b8687e3f562088ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:b8:0d:38:e4:53:95:19:14:e5:59:7c:ba:
                    3f:8a:97:70:14:d8:99:b9:1c:cc:e7:07:a0:f7:2a:
                    d1:6f:66:d0:3d:64:ff:a8:1a:c0:f6:c9:6e:db:86:
                    57:71:37:6d:75:12:cb:c3:a7:3f:e9:29:54:11:c9:
                    d1:23:40:3c:ab:00:f0:3d:7d:3f:b1:be:b6:99:95:
                    7f:8e:3c:20:c2:65:d0:ba:59:e8:49:5b:f2:3b:86:
                    7c:2e:2e:ac:71:6d:53:1a:78:d3:82:0c:f3:5e:3d:
                    cc:de:0a:ff:1c:46:13:5e:03:14:88:f0:12:ff:99:
                    1f:22:2f:2d:fb:86:db:4e:31:ab:93:61:6a:36:a8:
                    40:f6:1f:04:d9:75:08:a3:55:e6:2c:bc:28:fe:3e:
                    8d:c6:91:07:e7:b2:91:02:ec:9f:59:e1:d5:a8:09:
                    0a:99:be:e9:cc:c8:93:72:e0:eb:13:db:ac:9e:2e:
                    86:4a:1c:9e:d5:c3:07:cc:24:6b:49:16:c6:a5:e8:
                    e0:98:1e:8b:ad:c7:21:88:07:16:d6:12:b4:31:4c:
                    07:31:64:2c:b0:51:f4:3f:23:2c:0c:9b:ff:21:01:
                    99:00:d1:0d:49:9c:e5:38:d3:24:75:ec:61:09:ed:
                    cf:26:d7:31:90:11:d0:75:58:47:df:b1:41:10:6a:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:75:3F:06:29:B2:4C:48:2E:88:48:B8:68:7E:3F:56:20:88:ED
            X509v3 Authority Key Identifier:
                keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:8f:5c:c5:01:99:af:73:b6:2e:71:89:9a:6d:1a:08:62:
         0f:d9:27:b5:44:f1:16:0d:2c:c1:a3:92:80:e8:bb:01:df:97:
         32:f8:db:2a:72:38:e7:c5:28:8c:cf:de:bb:f6:34:f8:09:fb:
         b7:cf:53:72:31:2c:fc:f5:cb:9d:5b:0a:ee:74:0c:f1:b5:43:
         7e:45:3a:af:38:08:36:55:eb:55:15:fe:4e:3f:ce:82:87:27:
         48:f3:0d:84:60:11:21:51:5e:b9:35:0b:d0:ff:13:e9:c7:3f:
         99:ab:79:c2:70:72:23:8e:b3:12:99:0f:2a:db:73:15:dd:d4:
         b2:57:04:36:c8:15:4e:ab:f6:f4:ad:2e:de:67:44:2b:fc:8c:
         e4:a9:6c:8c:77:39:0b:38:1b:d5:f4:42:03:1b:43:57:24:ba:
         67:0f:ae:91:52:2a:36:63:20:2d:00:5a:a7:0b:43:fd:24:3f:
         9a:2d:68:76:cf:d9:7b:83:8f:de:7e:d0:ca:76:9a:4f:7f:0b:
         2f:b1:2e:90:3b:7f:ae:c4:34:5f:aa:63:4f:97:be:e0:f1:b0:
         94:f3:7c:77:fb:57:7c:65:f2:b5:ac:0b:92:1c:fe:16:ca:56:
         79:e9:b6:53:f7:f2:1d:4b:7f:ef:fc:4d:db:d5:fe:e2:31:6a:
         44:a4:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:00 2025 by rpki-client