Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File:                     Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier:          G+xTaBhad5F8AipjuZWGv1CevkMe/Hi1QlN5D2geBoo=
Subject key identifier:   7C:03:AB:84:C5:DA:76:7E:88:96:3D:28:65:7E:E1:DE:45:4D:09:8E
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer:       /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial:       0198D4E0826EAB9BF83D6747835AD5ECE2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:19 +0000
Files and hashes:         1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
                          2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: q68pRnl1yvz0gnNB4jEM8q/ZonzVbkcP5k5D1leBSNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:82:6e:ab:9b:f8:3d:67:47:83:5a:d5:ec:e2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
        Validity
            Not Before: Aug 23 03:02:19 2025 GMT
            Not After : Aug 24 03:02:19 2025 GMT
        Subject: CN=7c03ab84c5da767e88963d28657ee1de454d098e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:20:28:fe:7e:63:53:c7:53:2e:b6:2f:81:
                    b5:b0:c8:15:c6:f1:5d:98:27:85:1d:22:e2:83:6f:
                    73:ca:ba:4d:f4:d4:98:77:3f:40:92:1e:c4:ff:5e:
                    30:1c:23:69:39:80:d9:70:0e:3f:cb:5c:84:77:67:
                    d0:f5:11:10:04:4e:c5:1b:fe:23:70:ea:89:33:ac:
                    47:9f:3c:52:8f:a9:88:82:2c:95:bb:64:79:1b:c9:
                    9b:d8:11:90:ac:fd:c7:c9:1d:9d:05:35:1f:6b:26:
                    0b:5b:a8:a1:f6:cf:63:8a:43:f5:b4:22:4d:f9:9b:
                    35:b0:71:61:7e:6a:57:db:b9:83:86:4a:a4:51:d7:
                    cd:54:6c:b0:15:03:4c:e5:e7:4b:01:e4:da:1d:5a:
                    df:22:08:92:32:8e:d4:05:16:68:24:fb:3a:dd:2b:
                    bb:59:49:2d:80:8b:7a:de:99:aa:2d:6f:59:c4:93:
                    f5:26:cf:48:dd:a6:33:94:17:a1:86:df:6d:cb:7a:
                    1e:ca:64:7c:ba:a6:9f:0f:84:86:39:a1:5c:05:25:
                    94:6f:5e:74:e4:f2:f0:07:f7:e0:67:87:ca:91:20:
                    06:a5:6d:f6:ee:21:dc:5c:01:3d:41:ee:64:72:60:
                    0d:ef:96:af:78:04:87:09:ef:48:55:e7:b4:0f:62:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:03:AB:84:C5:DA:76:7E:88:96:3D:28:65:7E:E1:DE:45:4D:09:8E
            X509v3 Authority Key Identifier:
                keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:8e:b8:ec:62:3d:90:6f:a1:9d:86:b6:d5:53:31:91:13:
         57:1e:84:e8:9d:c9:b4:c1:f9:77:43:fc:3b:2d:af:12:dd:83:
         d3:18:a7:e5:82:3d:3e:11:5b:79:70:f3:18:c7:31:fa:35:24:
         6a:44:ef:42:fc:b4:84:b5:1c:47:67:c9:f5:96:b3:65:f2:24:
         02:4f:c3:e2:ae:0a:63:32:c4:3d:1c:16:e5:c3:65:04:f8:1a:
         a5:d2:5e:8a:3c:d5:38:1b:d9:54:c1:92:26:f2:a4:2f:a0:86:
         5b:c8:cb:94:31:3e:9b:23:d3:a7:71:3a:5d:47:59:c5:da:c4:
         34:a4:d9:2a:db:35:f6:8e:7e:9c:1b:57:f7:47:1f:9e:f9:39:
         f7:e5:50:5f:83:2b:47:da:62:e0:70:4f:b1:90:7e:b8:a4:0b:
         a8:9d:ec:18:ae:c2:5a:7d:95:fd:6c:1f:5e:57:0c:f7:86:1a:
         62:eb:39:b3:1d:40:60:c0:28:45:0e:80:fc:b5:51:d1:f4:f3:
         8f:5c:1a:ee:f2:49:1b:02:de:78:83:2d:eb:c1:32:3d:c4:66:
         84:ae:4c:ad:a7:37:66:2b:5c:42:32:aa:ce:63:2e:a8:4e:f7:
         1d:7f:a1:3e:98:cf:e8:59:f8:56:87:70:cb:f3:8b:c9:0e:d7:
         f1:92:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:02 2025 by rpki-client