Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          qSepQ3Ipmx+kYsJgZ+b0xPsAnkT/JrEXD3NY8Gq9Vgo=
Subject key identifier:   65:65:8F:63:5B:33:9E:93:DA:02:2E:86:58:73:EC:6E:00:48:39:DC
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       0198D65F350B635F2A751DE3B68B42517E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:20 +0000
Files and hashes:         1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
                          2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: 9PxNEX9UU2orMEDVdmdp4TMXe2oCDzLvGhQv6vtAm64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:35:0b:63:5f:2a:75:1d:e3:b6:8b:42:51:7e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Aug 23 10:00:20 2025 GMT
            Not After : Aug 24 10:00:20 2025 GMT
        Subject: CN=65658f635b339e93da022e865873ec6e004839dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:1b:26:97:e6:a6:4d:dd:f8:b4:8a:60:cb:
                    da:81:e3:f2:69:f5:b9:81:c6:02:b8:0a:dc:bd:7f:
                    42:0c:0f:a8:61:a8:42:7a:01:ec:41:7f:9b:5a:ff:
                    8b:4f:32:72:6f:dd:8c:f2:c9:06:ee:24:c3:d9:68:
                    a4:15:76:5c:96:2a:71:a0:17:63:2b:f5:f2:b7:2c:
                    4d:2d:a7:71:17:17:c6:37:6d:e4:92:93:da:a4:17:
                    d2:21:96:b1:7f:3b:6a:5f:09:ea:54:75:4a:ba:9a:
                    f6:a7:e6:57:61:51:e2:fd:26:69:ef:bf:50:bc:60:
                    38:50:d6:8c:62:78:06:05:ba:87:0b:3e:1d:80:47:
                    4b:14:7e:67:3f:f9:f3:e5:c0:93:9f:aa:b2:83:4a:
                    58:69:09:be:3f:a9:46:19:a5:29:bd:c2:76:d3:e4:
                    73:30:67:68:23:a7:55:c1:58:07:af:70:0e:36:48:
                    09:67:41:f7:ea:de:6a:0f:c4:b7:6c:07:aa:6b:b5:
                    e7:fc:a6:ae:3f:8d:72:ae:19:0b:d9:ca:96:11:76:
                    71:06:21:3a:5f:ab:98:0e:4c:27:59:46:9e:6c:71:
                    76:7c:f2:9e:0d:06:06:43:67:76:34:cb:a4:26:e4:
                    e8:a5:13:68:ad:7f:07:60:eb:fe:3c:6e:cd:a4:8e:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:65:8F:63:5B:33:9E:93:DA:02:2E:86:58:73:EC:6E:00:48:39:DC
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:40:6d:c3:64:2d:44:61:bf:76:b9:b2:5d:0c:95:d9:4f:e2:
         d8:a4:8d:b9:ee:87:4d:b5:fb:7e:6f:5e:05:e7:e0:70:e9:5a:
         d7:a1:fb:10:79:85:87:85:35:d0:7e:58:d9:5b:d4:50:99:78:
         ab:1c:b3:1d:13:3b:2d:ce:59:e7:be:0c:aa:bb:88:a0:6c:ce:
         50:c3:17:aa:a4:7d:00:9c:04:21:fe:33:36:54:01:46:71:64:
         b1:57:57:f7:dc:39:c9:41:e7:50:56:3d:8d:6a:7c:cc:53:97:
         f3:c7:ad:b8:71:b7:39:df:e1:c0:b6:c6:98:96:3d:99:6b:95:
         ea:c4:e7:81:de:b1:88:23:1c:70:1a:a5:9b:25:c0:d4:81:9c:
         97:0b:c4:2a:7a:26:b1:fa:6b:64:30:b2:33:70:85:fc:a8:52:
         8f:ff:b3:e5:b4:b3:d8:af:49:4b:da:b4:ce:d5:4d:64:a2:d9:
         55:52:53:43:c3:7b:f3:c4:d3:a9:e6:58:76:0a:1c:5d:aa:17:
         8f:90:8d:7f:70:24:80:19:84:a1:f6:58:8a:ef:62:11:c7:5d:
         a6:9d:81:0f:66:36:26:c3:f5:ec:6b:9a:86:15:fd:b3:2c:32:
         ec:cc:d2:ca:19:cf:26:19:af:b9:39:13:09:bd:33:e6:d2:09:
         56:b1:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:09 2025 by rpki-client