Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          vfg8FiD/2KaZ+qMIvR7DPkU+RB4nw99Fdz5ExDBmzh4=
Subject key identifier:   67:E9:10:86:6A:84:C9:D7:42:42:2D:0B:9E:2E:BC:9C:3C:BB:3D:51
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       0198D58370058BBC78AD7E7A9CDCF02BCC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: lm1i/WCu7v2A8pqLARrGJUKPtdcvuKAdoCGXB05kJh4=)
                          2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:70:05:8b:bc:78:ad:7e:7a:9c:dc:f0:2b:cc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=67e910866a84c9d742422d0b9e2ebc9c3cbb3d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:6a:e5:2b:4d:2d:fb:31:64:64:46:78:d9:
                    19:cc:78:5f:34:a6:1a:e1:c4:96:fe:73:1c:a7:71:
                    00:60:3e:a7:0c:fd:48:3a:b3:52:ba:9f:b4:4b:e1:
                    6c:13:76:07:96:82:e5:2e:1f:45:37:b3:ca:6d:c9:
                    d9:7e:bb:35:b2:62:8a:eb:ff:c9:60:9b:a3:95:88:
                    ad:bf:6c:66:56:05:6e:87:f1:ab:d0:81:93:04:e9:
                    4e:bc:e0:10:2a:9b:97:95:23:d5:39:d8:36:6a:ed:
                    4e:a8:5e:4e:46:91:d8:67:b0:8c:3d:c4:88:58:40:
                    4c:82:b1:fb:bd:34:59:6d:b8:f3:1e:7c:75:f1:00:
                    fa:b7:56:90:f9:9b:e2:15:f6:ef:a7:96:cc:8e:5a:
                    24:61:34:2f:a9:33:2b:96:34:11:8c:6a:8c:49:c5:
                    39:8a:27:0a:2e:53:3a:56:be:22:b1:55:fe:f9:21:
                    e5:a9:31:9e:6d:f0:8b:ac:4d:7c:89:07:8d:e9:a9:
                    49:ad:e7:8b:66:46:e7:46:3a:69:bb:fb:92:48:f8:
                    d2:f7:16:c9:17:fe:92:dd:0b:78:1e:d0:f5:58:5e:
                    db:c0:5e:1f:5e:48:b4:f5:aa:04:f0:cf:90:e4:e7:
                    57:bd:0c:c8:5b:3c:ca:92:3d:ee:24:8d:67:92:eb:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E9:10:86:6A:84:C9:D7:42:42:2D:0B:9E:2E:BC:9C:3C:BB:3D:51
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:27:5d:05:ec:3b:f4:e6:56:0c:27:ae:30:14:16:88:5a:
         aa:29:ad:d1:c8:43:7c:56:79:b0:30:e6:64:8d:cb:f0:79:7c:
         91:a3:9c:8f:de:65:fd:61:ee:41:11:d5:3d:8b:ee:88:3d:d6:
         2b:c7:46:20:45:81:1e:51:26:73:09:72:4f:89:85:84:01:d2:
         fc:10:04:8b:28:1b:6c:9c:da:9e:02:f7:83:e8:62:d5:a3:38:
         90:d8:56:14:e7:49:71:7e:65:f7:21:1f:f7:c4:28:7a:e2:ff:
         42:08:c8:8b:f1:db:ef:c4:53:bf:31:73:48:7c:0d:f7:d2:38:
         dd:25:ea:a9:0d:52:9e:7a:2c:9c:bc:7e:91:58:b7:6d:33:76:
         f7:0d:e4:d8:0f:4f:7f:e6:a9:a9:7d:50:e6:68:63:83:37:e4:
         79:1e:68:d3:06:c7:53:22:f7:82:80:ed:52:e6:fa:f6:aa:c0:
         eb:6b:9c:b1:13:5b:62:fd:a7:8e:39:9d:1a:1e:66:df:78:6e:
         13:41:25:bf:b5:9d:0f:0a:a0:49:9e:11:74:fc:c4:de:61:14:
         6d:20:21:71:a5:ff:16:d0:7a:a2:db:3e:83:61:3b:74:2c:c3:
         93:94:44:8c:e6:09:fc:ca:a8:f2:f7:1e:2b:6e:16:d6:e2:3d:
         d7:53:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:32 2025 by rpki-client