Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          rldc64Err+rPchMZp4vQllzPsg50Jp/8rBbjL7NST+4=
Subject key identifier:   F4:19:6F:EE:E0:73:73:6E:C7:5B:DA:65:E2:A3:01:C0:30:AB:F4:F1
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       0198D6610F9A89F58BEB18BAFB29FB5CD91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:21 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: N72DJ+9ro7Pv5XH9TwYccytAqdrem08svGzdCdWTR3I=)
                          2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:0f:9a:89:f5:8b:eb:18:ba:fb:29:fb:5c:d9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Aug 23 10:02:21 2025 GMT
            Not After : Aug 24 10:02:21 2025 GMT
        Subject: CN=f4196feee073736ec75bda65e2a301c030abf4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:32:d7:a3:59:42:3c:e7:1e:2e:5e:53:41:
                    c6:11:3b:ee:e6:fe:d0:75:5e:e5:68:a1:56:4d:07:
                    96:2a:bf:ac:f9:c8:f7:94:07:c5:9e:a7:51:ec:e3:
                    1b:2c:6d:ab:d1:7a:5f:89:4b:ba:d9:6f:49:6b:b0:
                    e6:12:87:81:fb:68:89:73:82:6d:ed:21:df:c4:8b:
                    e1:86:62:54:be:91:45:63:d8:90:c4:12:74:62:bd:
                    71:8a:7a:a9:71:de:17:f4:59:66:b6:b0:b1:5f:c8:
                    b1:34:0b:b3:81:3d:72:3c:88:fb:d0:66:78:fa:30:
                    18:92:a9:f1:df:6e:ad:14:72:b8:fe:3e:53:e7:dc:
                    de:a4:5e:0f:16:85:6c:1a:d4:f9:ae:ba:a8:8c:1b:
                    ad:88:6a:35:df:6a:af:63:6d:39:bb:c0:d3:a5:39:
                    d0:2a:b2:c4:48:2d:01:ad:1f:4e:88:07:5e:f2:93:
                    5d:83:68:4c:66:a2:84:b3:c1:91:15:40:30:d4:77:
                    ca:32:ba:bf:42:79:8e:8d:8a:e4:ba:84:e8:9a:07:
                    22:8d:83:32:c9:50:53:f3:d2:f9:59:54:da:40:6f:
                    2a:78:46:9a:db:f1:94:d6:c9:01:6f:b5:7f:d0:17:
                    b1:65:1c:97:24:d1:d5:62:97:33:32:75:a6:f4:9b:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:6F:EE:E0:73:73:6E:C7:5B:DA:65:E2:A3:01:C0:30:AB:F4:F1
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:f3:37:ea:67:65:ed:89:d9:da:53:a6:c8:99:10:31:bd:
         0f:25:95:52:c5:09:41:40:f5:52:19:71:22:b8:2c:02:5e:21:
         bf:d4:43:77:2a:c1:dd:a6:05:8e:5c:54:46:81:55:bb:fd:92:
         5e:59:98:eb:1b:c3:e2:95:2b:78:7b:ba:e0:78:71:87:36:38:
         ff:59:4f:9a:db:a9:31:36:f4:bc:91:6e:b3:0c:b6:ee:2f:eb:
         de:b9:99:d7:bd:5d:7d:87:75:04:07:d3:a5:fe:62:46:19:14:
         6a:af:72:f1:ec:8f:54:1b:32:d9:9a:9c:a6:29:d2:d8:8e:d7:
         e6:55:a9:63:de:33:7c:25:4e:a1:85:d9:10:d1:c5:a0:ee:17:
         00:2e:3d:74:55:96:1e:35:29:81:28:e8:e3:3a:4f:c0:3b:5d:
         fd:86:90:94:0e:7e:dd:21:af:e3:3e:c4:d3:a1:4d:81:1e:ef:
         f8:d2:8b:5a:0d:1c:be:29:08:4b:6e:fc:01:4f:a0:25:fd:e2:
         69:46:93:de:53:b7:b5:30:b0:a6:1c:db:45:17:95:12:34:74:
         28:2c:29:a4:90:d3:96:8c:7f:ec:2a:3c:c6:80:3b:4b:86:c2:
         76:b7:ba:b2:71:c5:be:63:94:43:e1:4b:68:c1:7e:17:a3:f6:
         8f:ee:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:57 2025 by rpki-client