Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          /AnpxXPfWICu/EcXojbSrDHw57IO6i/rijk/ywb5+wI=
Subject key identifier:   48:75:31:06:28:2A:C9:A4:AE:9A:87:D9:23:C6:67:07:67:6B:67:E8
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       0198D706290BA7434A6844D2890C35675187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 13:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:41 +0000
Files and hashes:         1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
                          2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: 8RGP4aTaK9kb8gxKcOAlwk9cajxctw7YhHGiPOx/lzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:29:0b:a7:43:4a:68:44:d2:89:0c:35:67:51:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: Aug 23 13:02:41 2025 GMT
            Not After : Aug 24 13:02:41 2025 GMT
        Subject: CN=48753106282ac9a4ae9a87d923c66707676b67e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:2b:cc:59:e7:89:ae:20:ad:cc:e9:93:fd:
                    bb:2c:82:5e:ed:7e:bd:21:9e:4e:d6:f9:2c:3a:fd:
                    8c:e3:61:fe:94:63:02:99:6b:28:84:ee:ef:88:a7:
                    6c:bc:d2:4a:8b:47:9b:a3:7b:16:fd:eb:f7:f4:55:
                    5e:92:52:d2:65:0c:f1:bd:61:d8:4f:2c:3e:fc:1b:
                    7d:2b:dd:61:72:cd:fe:9a:4e:9b:5d:09:22:03:e0:
                    62:cd:3d:25:22:45:b9:8b:b2:c2:6a:db:66:17:86:
                    0e:b5:69:c9:87:37:5a:52:02:9c:f5:22:cd:53:4c:
                    fd:ce:a6:b5:95:35:12:ff:7b:9e:5c:e6:f7:8a:51:
                    06:8a:e7:6e:69:66:d3:a3:d1:31:f0:ae:2a:d4:ce:
                    f3:4d:f9:1e:5c:0c:a1:92:75:77:2e:39:65:8c:55:
                    1e:81:7f:e0:b0:76:14:3f:df:23:a6:82:c2:58:a5:
                    a8:2a:e2:c9:93:75:8f:b2:69:9a:d5:99:0e:ef:33:
                    df:c1:c4:2c:d2:bf:2d:a6:76:3d:d4:c5:f1:83:c8:
                    a5:55:72:b3:99:31:a1:98:02:a1:bb:73:41:4a:0b:
                    e1:7e:11:02:67:d5:aa:0a:40:88:63:21:2c:9b:e4:
                    74:d7:32:3d:10:ec:14:ae:29:f4:73:35:b4:1b:44:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:75:31:06:28:2A:C9:A4:AE:9A:87:D9:23:C6:67:07:67:6B:67:E8
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:8e:77:10:35:d3:31:95:92:a8:dd:7d:5b:1d:cd:aa:9f:
         9a:ee:ae:c7:d5:46:01:ab:73:ab:4f:7e:28:d6:a1:02:30:61:
         ab:e1:c4:d3:56:89:18:56:17:31:22:56:01:c7:ff:e2:02:d9:
         11:7a:2e:f6:68:7a:43:63:70:75:7a:52:e9:2c:c9:6a:77:81:
         86:06:05:2a:5a:bc:56:6b:d2:79:a8:62:01:63:90:42:33:fd:
         d6:b5:ec:e6:34:60:3e:c4:3a:88:e2:57:23:12:a7:e3:5e:b1:
         fc:bc:c5:48:15:6d:6e:9f:e6:4b:da:2f:a8:89:33:45:04:e4:
         90:05:4a:3a:6f:37:2b:ec:39:1e:54:00:b3:6d:42:d8:3d:23:
         33:a7:07:80:32:dc:83:c4:70:15:29:85:8a:af:d0:70:44:2a:
         9e:f0:ce:b4:26:79:dc:6d:bf:5c:b1:45:d1:41:c0:98:d3:a9:
         9d:b7:c8:af:37:51:ec:32:4b:94:b8:55:02:9f:3d:8f:a7:37:
         d7:cb:1a:88:54:97:86:2d:3a:63:a0:d2:27:8b:d9:6e:ad:ea:
         66:df:87:ed:85:e2:4f:5b:02:25:fa:f2:c4:18:13:9c:3d:20:
         ca:2f:30:85:0b:83:53:1b:e4:af:3d:5e:9d:56:b8:1d:fc:a9:
         f6:0e:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:28 2025 by rpki-client