Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          SjXAsjtD+3VapUiIAJKszXLbaJ/Lh/GqMe4t0jPiji0=
Subject key identifier:   8F:01:D6:7B:5B:39:3A:B9:D3:7C:09:90:77:49:DE:54:1D:18:A0:37
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       0198D773B4A723E0B3698726AD8517DA167C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 15:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:21 +0000
Files and hashes:         1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: KWxBUddOdGxwCIfJE/B8KJQW70dRRiCHI6+Wv/DubLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:b4:a7:23:e0:b3:69:87:26:ad:85:17:da:16:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Aug 23 15:02:21 2025 GMT
            Not After : Aug 24 15:02:21 2025 GMT
        Subject: CN=8f01d67b5b393ab9d37c09907749de541d18a037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:fd:27:3f:91:6b:45:fc:56:41:c9:cf:b3:
                    ec:ac:d1:cd:42:b6:6c:1e:06:f6:35:85:0a:3b:f8:
                    37:bb:15:f3:f3:27:19:29:4c:56:dd:78:cd:99:2a:
                    58:02:80:cb:dd:b9:65:eb:ae:35:b9:9b:5c:f6:b6:
                    94:8d:33:91:7a:34:17:c9:54:6e:ed:15:5b:76:f5:
                    1b:3e:19:1f:f6:ae:00:ba:01:4c:3e:49:7b:ef:54:
                    5c:bd:1c:b4:51:a7:b8:e0:ec:8d:2b:8d:36:99:47:
                    78:c4:35:d4:1b:f3:8d:ae:a8:0c:9a:7b:5d:89:ff:
                    41:77:2d:89:a5:e0:0b:86:1a:1c:30:ca:1d:0c:53:
                    7b:31:03:85:5b:33:c2:43:59:66:89:55:1a:72:b9:
                    5f:a6:cd:9d:9b:36:c3:ea:02:91:f1:00:56:2b:89:
                    ee:f7:93:73:7b:67:f2:c3:c5:ad:3c:a8:c7:f4:5a:
                    02:7d:6f:06:74:c6:03:94:d0:90:29:5a:9f:3f:e0:
                    7d:91:b4:cf:cb:43:e1:d3:3e:78:be:7a:a0:83:fc:
                    07:d6:03:56:2b:f3:48:6e:71:86:82:7f:46:24:e5:
                    a0:24:6b:20:e6:67:0c:55:e7:9c:1c:44:65:ea:2f:
                    6b:a6:65:1e:85:3d:7b:34:88:15:4f:d7:af:10:66:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:D6:7B:5B:39:3A:B9:D3:7C:09:90:77:49:DE:54:1D:18:A0:37
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:05:c9:f2:40:50:87:2e:c0:0d:b0:43:d6:2f:d9:43:4d:c2:
         39:3b:69:72:ec:e5:1e:89:f3:94:83:cd:a2:ca:76:e2:2b:91:
         6d:b9:9d:ac:2f:35:d4:85:f4:1c:2a:b7:b0:91:32:da:85:69:
         12:ce:df:52:92:1b:fc:21:9c:21:a1:06:da:c2:b3:9e:2c:c0:
         42:d4:5b:c6:69:a8:91:c5:0a:8f:03:db:b4:c6:49:6b:92:5a:
         5a:a6:3d:6b:bb:d1:ff:30:b2:6e:f3:74:8b:95:71:91:dd:5d:
         28:c4:e4:8d:eb:49:c0:58:2d:7d:08:e1:40:28:98:c2:6e:6e:
         d1:d2:78:13:a0:ac:84:ce:3b:8a:85:ee:d8:7c:95:8d:39:da:
         15:7d:96:84:2b:09:fa:6a:85:3b:85:97:d1:b0:25:6a:88:c1:
         6d:78:64:cc:36:16:4b:7f:32:ae:ef:bc:65:a9:8b:a5:e0:ce:
         b7:e1:10:af:af:e0:38:73:81:ae:20:47:5a:81:5f:ce:3a:5f:
         2d:07:b6:53:09:73:8c:c8:31:7a:52:3a:07:b1:d8:14:53:35:
         c9:47:1c:1c:55:93:f9:8b:fe:a0:9e:7d:b5:e8:d0:9b:13:ec:
         e2:a5:14:af:60:b7:c9:fc:7a:75:00:34:e3:63:47:34:81:61:
         17:79:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:18 2025 by rpki-client