Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          OzFX7p0kyZTZVnX89lfg5OU2nS7ZgaJk+6hh5VdE2+k=
Subject key identifier:   7E:6D:C7:85:E2:8D:B0:B4:EA:E9:2C:11:6F:2C:77:41:11:44:31:08
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       0198D4044EBA13316B023CE120B16735AAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          164B
Signing time:             Fri 22 Aug 2025 23:01:48 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:48 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:48 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: o44YDtg0GXARRiWTAEZzyGfr5udGmx7lME3RYTQHMfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:4e:ba:13:31:6b:02:3c:e1:20:b1:67:35:aa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Aug 22 23:01:48 2025 GMT
            Not After : Aug 23 23:01:48 2025 GMT
        Subject: CN=7e6dc785e28db0b4eae92c116f2c774111443108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:04:f3:91:6d:cb:fc:09:ee:66:fd:29:42:b1:
                    05:3c:5b:b7:e9:4d:ed:d0:7a:f4:a5:b3:78:0c:5d:
                    d1:67:13:30:1c:91:e9:5e:2c:bc:c8:09:4f:9a:26:
                    89:2b:72:01:46:85:27:53:70:77:be:ff:5e:83:0a:
                    0d:81:fb:28:8b:99:76:ad:4e:9f:9e:c8:d1:66:7d:
                    9c:ad:ff:0c:ff:e4:d3:8b:d1:f2:de:c8:79:dc:e3:
                    22:17:5e:c4:15:d5:b5:06:17:f0:6a:db:2a:18:d7:
                    f7:a7:55:78:6f:58:65:0e:ec:5d:86:ba:07:65:17:
                    5d:32:9a:ba:22:cc:ac:36:2c:74:8a:5a:a7:b5:0d:
                    a7:be:14:ea:e0:7e:22:fc:7a:a6:ab:2d:b3:c7:84:
                    ba:c2:a0:6e:ee:5a:e5:0c:86:59:74:6a:c0:e4:69:
                    56:d6:28:f5:33:9c:c9:e8:65:98:5e:b2:25:7a:9a:
                    88:60:ab:28:4f:b6:e5:91:6f:d8:dd:9d:d4:43:9f:
                    f1:e4:dc:48:6f:ff:1c:47:65:c5:84:39:4b:16:0e:
                    26:0d:6b:2b:e7:a1:a8:37:f5:47:0f:9d:c3:34:c4:
                    c7:af:36:ce:77:87:4b:66:7d:44:e5:0e:58:25:55:
                    6c:e2:61:94:55:2a:5e:21:b1:55:ad:df:ea:c6:6c:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:C7:85:E2:8D:B0:B4:EA:E9:2C:11:6F:2C:77:41:11:44:31:08
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:f9:96:fd:57:de:31:64:09:f7:6a:6c:80:bb:ce:96:a6:
         68:c2:35:e5:89:c5:57:5b:0b:bf:84:e3:74:90:30:c2:ef:83:
         9a:97:81:23:02:d7:75:dd:88:23:6d:40:7e:d2:6c:90:87:17:
         5d:2f:70:24:0f:73:72:e6:14:f1:a8:ba:36:25:aa:b9:eb:1f:
         12:a5:fd:22:24:81:19:d4:34:1b:9d:5f:70:b1:7b:86:64:5d:
         2a:fb:15:ff:56:f2:74:ca:16:ae:b6:53:b5:e8:5a:a5:89:4e:
         cc:a0:64:e6:67:3d:39:60:92:91:06:ba:64:4e:46:94:1d:26:
         01:86:02:66:11:a8:bd:5b:b3:11:5e:72:50:28:4f:49:db:50:
         20:54:ea:c4:4a:f3:ff:6e:c1:bd:34:19:03:fc:4a:4b:96:c3:
         d1:7f:f9:4d:9c:06:23:54:11:2f:4f:a3:00:34:d0:f8:ab:0c:
         06:e4:5b:07:9a:1d:7b:52:23:13:f2:a1:f2:fb:bb:bd:e9:28:
         90:f1:3d:be:c9:fc:e0:b5:9f:c7:c4:a2:9d:10:3c:b4:1d:8b:
         65:bd:ad:db:70:84:bf:61:82:76:6c:25:1d:b5:41:b0:87:11:
         7c:de:0a:32:55:3b:c7:19:28:bd:ad:26:f3:5a:6f:79:28:6f:
         7d:c6:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:12 2025 by rpki-client