Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File:                     aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier:          CUsSbPn0Fxbmem2+IuQ1JDhRKTKC+Uwte5y0h9LBg+I=
Subject key identifier:   4D:6A:09:E9:D0:0F:E3:7B:7A:09:C4:9C:6F:69:18:AD:DD:80:ED:AA
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer:       /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial:       0198D51600063F4C9FF0D99D2EA42BF5A6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 04:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:45 +0000
Files and hashes:         1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=)
                          2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: 9fm5BjHNH97k/psBtbKEv9HwGOLYY/Uruk0JMfZumKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:00:06:3f:4c:9f:f0:d9:9d:2e:a4:2b:f5:a6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
        Validity
            Not Before: Aug 23 04:00:45 2025 GMT
            Not After : Aug 24 04:00:45 2025 GMT
        Subject: CN=4d6a09e9d00fe37b7a09c49c6f6918addd80edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:82:b8:23:9e:3f:c7:b7:c0:35:79:7b:54:
                    1a:89:ab:44:7b:cf:f9:ab:a3:10:8e:e1:00:b4:45:
                    7e:97:21:69:3f:ba:bd:6e:e8:bc:58:96:51:fa:f0:
                    40:8f:2f:4f:3d:6f:58:f6:38:a0:32:04:7e:b5:22:
                    f1:d8:48:ff:c9:23:e1:e3:f1:47:c7:a5:f7:56:b5:
                    da:4e:7b:a7:2a:03:c7:87:ec:af:0a:a8:13:95:03:
                    fe:9e:8d:f7:9d:f1:bf:e1:e8:9e:52:e6:5a:68:32:
                    83:32:54:46:de:7e:78:32:db:3a:87:19:42:ee:32:
                    bf:69:06:da:77:a4:51:7d:fa:18:b5:da:1e:4a:54:
                    ab:4a:6c:94:15:94:1a:fc:37:2c:e3:e1:f2:e9:f5:
                    b1:8a:89:8d:7a:93:dc:6c:0e:ac:9b:f8:9b:50:b9:
                    41:d6:68:89:49:f1:85:76:5c:ee:ce:d0:38:10:e2:
                    a1:ee:a3:26:ed:14:b8:d1:c6:74:3f:c0:95:8b:ed:
                    53:f1:6a:81:44:6b:fa:55:f2:20:c3:2b:8d:09:bb:
                    bb:a2:bd:ba:59:bb:f2:04:c6:44:58:b1:4c:00:14:
                    4c:1d:18:5b:72:dd:17:e7:12:5e:f5:ec:24:a4:bd:
                    c6:74:4a:3e:4d:d5:87:a6:fd:7d:2e:ea:26:c9:90:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:09:E9:D0:0F:E3:7B:7A:09:C4:9C:6F:69:18:AD:DD:80:ED:AA
            X509v3 Authority Key Identifier:
                keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:a6:ff:bf:81:07:90:e5:26:5d:93:7d:0c:76:eb:34:f2:
         b4:13:a2:38:0a:79:b1:71:59:01:aa:ee:cf:30:87:e5:9d:71:
         d6:1d:fb:b7:c9:cc:b0:88:06:e4:26:49:3e:f7:7a:13:5c:a2:
         7b:11:d3:c7:b0:f6:6b:56:14:c4:3e:b5:6e:a8:77:42:51:29:
         51:be:1e:8f:09:29:97:e6:0b:63:3f:2a:82:2b:e0:8d:19:97:
         2d:58:68:53:83:77:6e:b8:ad:39:f1:be:a2:4f:02:29:79:fa:
         c7:99:76:70:76:3b:11:60:75:df:52:51:9c:cf:ae:b9:43:d8:
         3a:08:03:d4:c3:0e:3f:61:bb:54:9a:0a:2b:97:84:08:21:8a:
         56:fd:f6:c7:4b:87:a6:5c:fe:57:b6:9c:65:af:52:3b:95:1e:
         39:28:cd:f1:ad:73:a9:73:3a:f1:83:6c:9a:bc:6f:6d:1c:ce:
         d7:6a:05:23:df:55:99:67:a1:fb:46:b1:a3:37:ec:99:e6:76:
         ee:c9:da:fc:f2:5b:74:00:42:c1:52:b6:e4:22:da:40:08:15:
         b1:b9:d3:3c:9a:fc:df:81:1d:b8:f2:00:23:a6:46:45:1a:e4:
         c7:5b:a9:93:3e:4b:a6:f0:8d:6d:75:d1:ed:4a:bf:ed:40:51:
         b5:08:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:15 2025 by rpki-client