Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File:                     sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier:          aqVrbb4HrzWZ6+t2i3Do5eTBSAsdHVWVJlehfYLRTok=
Subject key identifier:   3C:94:2F:DA:56:92:F1:E8:20:31:7D:6D:03:06:B1:A5:76:4D:B9:20
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer:       /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial:       0198D5836B4B6CB4BE49F5E58997D6494127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:16 +0000
Files and hashes:         1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
                          2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: vUWueJN0DO0kGbgjb8SInuZQazldpC16gvmxufjnwDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6b:4b:6c:b4:be:49:f5:e5:89:97:d6:49:41:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
        Validity
            Not Before: Aug 23 06:00:16 2025 GMT
            Not After : Aug 24 06:00:16 2025 GMT
        Subject: CN=3c942fda5692f1e820317d6d0306b1a5764db920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d0:90:2e:6e:91:8e:a2:11:02:30:85:a6:f2:
                    ca:3e:b6:54:df:26:81:e0:11:1f:e0:b9:8d:cd:50:
                    7c:64:16:04:b8:d0:57:3b:d6:6f:58:a1:ac:f6:a5:
                    6f:17:80:c8:af:ad:7e:20:3e:89:8a:d1:ac:7c:68:
                    4a:f2:12:74:5a:9a:f1:35:29:6b:3a:26:a1:3b:23:
                    24:03:fb:cc:9f:5c:da:ce:e4:52:5d:eb:26:f3:57:
                    78:ac:7e:a5:40:77:82:41:c3:cf:d1:3e:4f:ec:62:
                    56:0f:a7:3b:f4:00:24:bb:a3:94:89:08:41:2a:01:
                    73:99:ad:ab:d2:9a:ec:37:e1:88:df:d9:7a:89:e2:
                    04:7b:6e:6f:59:02:6d:52:bf:08:04:a4:b0:f1:37:
                    c7:a8:68:69:3f:e7:4f:e8:3f:2e:a3:a6:a3:2d:c1:
                    9a:e7:b0:1f:1b:25:6b:d0:4f:c8:e4:41:cc:2e:c4:
                    ce:98:8c:3e:bf:a7:63:ed:2f:c1:a4:fd:90:bc:5a:
                    4b:29:18:9c:87:3b:42:54:58:18:12:20:be:16:97:
                    6d:47:61:9f:82:06:73:e7:cf:f3:71:fa:a8:4f:c4:
                    aa:fd:6b:e4:c7:b8:eb:e8:12:6c:6f:2e:82:5e:66:
                    a3:57:44:7a:43:55:56:60:80:ee:82:9e:ad:80:97:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:2F:DA:56:92:F1:E8:20:31:7D:6D:03:06:B1:A5:76:4D:B9:20
            X509v3 Authority Key Identifier:
                keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:38:ee:06:23:78:7b:9b:e3:0f:82:65:b5:fb:8f:07:37:
         b0:de:fc:6e:57:3e:5b:03:2b:d3:c1:80:7f:4e:a4:5c:bf:76:
         18:ec:56:c6:98:93:6a:95:dc:3f:62:f3:04:21:cd:50:b0:35:
         cb:3b:9f:91:17:6a:1a:8c:49:80:ce:87:87:48:85:e9:60:90:
         7c:4b:42:ed:a3:a6:98:65:5e:99:32:ae:64:0b:d3:9a:51:cf:
         16:c1:40:63:2f:b2:c7:83:43:ec:f3:7d:03:93:9f:79:80:55:
         85:d4:e6:ae:f5:a9:cf:33:65:87:6e:84:54:3f:b0:cf:ce:21:
         fb:bd:62:0f:4e:9f:9f:ce:be:21:02:71:76:79:61:f1:1d:08:
         d4:c8:dc:79:c8:f0:44:07:80:1d:5a:5e:fe:63:5b:8e:e5:a2:
         69:0f:0b:ee:a0:8a:77:77:fc:84:23:81:e3:6a:de:02:71:52:
         0a:8d:5c:3c:f1:60:d8:eb:fd:33:74:41:b8:e8:23:74:bd:0b:
         d0:93:97:38:9a:28:94:f4:a9:65:11:ca:89:de:e6:cd:73:6c:
         6c:01:52:aa:2f:9b:6d:c3:e4:e4:5b:62:ac:cc:85:1d:31:f7:
         ac:c9:13:60:be:00:2a:02:2f:44:d1:3a:dc:29:94:23:42:9f:
         be:36:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:57 2025 by rpki-client