Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          wCyHMj9fccqgh6rL3z6+ihV0RMMlpSJvdxJ/bvSOcjU=
Subject key identifier:   C3:CA:BC:51:B8:CF:45:21:83:7E:4E:BA:D0:19:84:33:47:01:20:8E
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       0198D54EBB464C60474F80F7950FB9B34E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 05:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:43 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: CNh0EooulNnqlfpKGU3cMUdMwQLhZyzaXRq7NWwKVqw=)
                          2: eJ7uPrM8JY33NNPBvoVZtJuwfgo.roa (hash: 9nSK/KxQ/IGq4AdrWK6p4xTHdEJaVTMR/Qd+c8XyqcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:bb:46:4c:60:47:4f:80:f7:95:0f:b9:b3:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: Aug 23 05:02:43 2025 GMT
            Not After : Aug 24 05:02:43 2025 GMT
        Subject: CN=c3cabc51b8cf4521837e4ebad01984334701208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:b8:56:fb:94:a5:2b:5f:e9:5a:3a:d7:cc:
                    a2:25:17:fc:29:11:ae:16:d2:21:52:57:d0:fc:da:
                    0d:7e:b6:6b:c6:29:d8:fc:56:a8:74:50:8f:3f:27:
                    c6:02:20:35:f6:95:d2:a6:2f:c4:bf:1e:39:bc:d3:
                    c3:5c:a9:fd:7e:08:07:87:57:06:a1:eb:f7:81:41:
                    85:c5:9b:3c:f5:e1:6e:a3:41:9e:de:d4:03:d9:62:
                    c7:d7:44:86:e5:b6:ac:4b:0c:94:f5:d5:2d:7b:3a:
                    78:7d:22:b4:a2:c0:54:24:9f:b3:7f:71:2a:da:89:
                    f4:1e:e7:5c:ba:f6:99:39:0a:d7:d9:d1:1e:dd:cc:
                    23:7e:0e:44:b0:77:00:af:ca:37:db:47:82:f1:77:
                    0a:f0:6f:de:b7:2b:64:66:67:ff:ba:e0:de:af:8d:
                    b2:19:ff:8b:5c:79:16:dc:4f:14:e7:4b:e8:91:5a:
                    34:29:c8:c0:3c:0e:ae:4c:5f:b4:af:a7:42:24:3d:
                    0a:79:11:01:f8:31:8a:15:5e:fb:25:22:f4:d5:02:
                    1b:12:53:58:8e:28:c0:04:4b:09:d0:6d:dc:4f:49:
                    9c:c7:d6:e6:bc:a9:f5:3c:b4:c5:c3:10:27:ca:34:
                    56:c3:fa:81:44:c7:8b:3a:d9:5a:01:2e:37:e3:b8:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CA:BC:51:B8:CF:45:21:83:7E:4E:BA:D0:19:84:33:47:01:20:8E
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:72:d3:5e:67:82:9f:ce:43:33:d6:73:34:54:43:66:a5:74:
         b1:34:b7:ad:1d:20:b2:b1:1f:7f:fe:03:47:15:b2:31:16:91:
         60:24:da:f5:af:d8:6a:83:df:3c:41:ee:19:15:8f:5b:63:5c:
         a4:c0:c0:3d:63:d8:2e:7c:08:52:8b:86:41:b2:08:a2:ba:70:
         ee:83:62:18:6e:4b:65:0f:b6:32:9b:33:93:3a:37:11:89:f3:
         70:7a:7b:59:9b:a0:ea:32:c2:40:b5:43:32:b0:64:a3:b3:97:
         6c:4d:11:d8:b9:6f:19:e4:94:c5:92:3e:a7:40:6e:ae:a4:a9:
         06:2d:58:34:02:84:09:55:aa:e5:91:18:da:f9:15:2a:ef:d0:
         5d:07:d0:c1:59:53:9f:94:45:4e:cf:ca:55:20:f2:50:d4:17:
         52:25:94:f2:cc:8a:ce:e3:df:28:dc:80:e0:83:a6:a6:b5:88:
         f9:a1:22:05:54:38:04:48:72:a9:74:54:76:bd:7b:20:f2:1d:
         04:37:82:d1:bc:41:55:a4:e5:2b:53:5a:86:f0:e6:f4:9d:c8:
         27:c3:e6:3f:ee:44:37:fb:9f:a7:52:99:de:27:e5:ca:49:d6:
         7a:51:b5:41:21:b9:33:a4:c2:f1:30:c7:10:6b:4a:cf:ef:d4:
         be:7b:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client