Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          BAz6Fdv1fdatIUd5FGA4HWA+uw6o0s045l+/zQgMhcc=
Subject key identifier:   DD:7E:C4:2E:37:B1:74:29:93:A8:C2:DD:A1:89:FC:4C:64:C2:22:04
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       0198D5BBF275BABAC67EBFDE4565ABA2BBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:00 +0000
Files and hashes:         1: 1-9AP2m6e3Yu4skuF6PnUZU7ynjw.roa (hash: SxUOeSb5IZbPcr5PULvmHmKXVLJgmiMvzroaF4Tx6vM=)
                          2: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: fDTnC7ox30IZpKOIFqPibcRPtw4XEgv/0ffD1LP4HxM=)
                          3: 2tFj9_tuvHdE6yjNxLbekXML8wY.roa (hash: /lbJk8NoZ4p8z6eLLr9xWEF8qpeemJ917/7L62Dt9OY=)
                          4: OhDCqCKfAFaXsXhd0gKQoDKYCvI.roa (hash: QLijyVoBjHRCj6G7QWN6t5aH2KftVDSPxZ4yQhURnSM=)
                          5: gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa (hash: bX3sQ6zhlmJhD+C6SZtKleOngtVc916nv+7v57xeexs=)
                          6: tiYFwAJDJd26p4Ey1IP7FxpONvg.roa (hash: jiqo6KPoLT8BsZ7lPEc/rIbVXD1zFAqeKQ1qUkmvE44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f2:75:ba:ba:c6:7e:bf:de:45:65:ab:a2:bb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Aug 23 07:02:00 2025 GMT
            Not After : Aug 24 07:02:00 2025 GMT
        Subject: CN=dd7ec42e37b1742993a8c2dda189fc4c64c22204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:68:d9:51:c6:9b:6a:de:19:aa:d5:76:49:
                    d6:d7:3a:cc:2a:ca:77:24:d6:67:e5:62:e2:3c:65:
                    43:8a:d5:2e:1a:f1:16:9d:f7:b1:3c:2a:75:72:16:
                    3b:26:31:bf:72:2b:09:95:bb:88:95:b5:0b:09:c6:
                    87:38:57:d4:71:e2:df:1f:29:d3:84:a4:f8:5e:3b:
                    97:1a:8b:e4:b2:25:fc:a0:07:02:64:84:e2:eb:60:
                    99:81:5c:e8:51:71:9a:ed:6c:85:5a:58:f2:7b:85:
                    49:53:b2:2a:db:de:6d:ad:6e:27:48:24:75:e0:6f:
                    92:89:d2:37:6e:53:ca:22:b4:89:ff:79:11:a2:7f:
                    a7:3d:10:3c:9f:8e:80:e0:c3:ae:0d:ca:dd:fc:62:
                    65:20:d9:7a:fa:e9:21:a9:e6:5a:3f:eb:61:6a:a1:
                    05:97:c1:cf:17:24:55:74:58:b9:38:00:27:f0:0b:
                    c8:51:ca:27:6a:e8:2c:dc:a1:5c:db:d5:a4:c4:e3:
                    c7:06:40:1d:eb:f1:26:cc:99:81:2c:9a:d2:ad:18:
                    56:29:58:9e:51:4a:36:9c:d9:ca:23:e1:2c:f5:8c:
                    eb:5e:83:c4:7a:51:ee:f8:ff:46:ba:1b:3f:da:f4:
                    b2:33:cb:02:26:d3:e5:fc:33:eb:0e:e9:81:97:8c:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:C4:2E:37:B1:74:29:93:A8:C2:DD:A1:89:FC:4C:64:C2:22:04
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:27:0d:c9:01:ca:62:90:d5:04:eb:90:2d:c5:65:1f:78:c9:
         85:41:c6:57:7d:16:de:53:d9:af:20:76:ca:02:72:9d:7e:5d:
         85:9c:d3:42:dc:89:52:59:b7:10:e4:2a:a0:1e:f5:af:eb:aa:
         d9:fd:6a:5b:0a:e0:8b:6b:e7:d3:0c:31:6a:57:ac:73:be:12:
         14:48:c8:93:2b:ee:e1:5e:2d:8a:90:23:a4:8c:d7:f1:69:56:
         6c:c7:7f:af:02:ad:a5:25:b0:fe:b4:c8:99:5a:3d:95:dc:40:
         c9:a0:a3:71:0d:f5:9f:5e:44:1e:01:a0:a0:59:47:87:14:2b:
         cc:22:4f:b4:72:e9:61:b7:27:7f:82:df:7e:e9:9c:ed:ee:31:
         a7:63:92:4d:73:08:76:cd:97:27:f6:70:ab:18:22:4c:f9:19:
         e9:22:9d:2a:57:1c:88:f7:cb:49:08:8f:de:23:52:c1:5b:54:
         8d:39:3e:d7:dc:93:c9:cf:90:1e:15:72:f2:1d:f4:54:a7:68:
         20:a6:71:44:9d:81:b8:07:14:8d:10:30:f2:52:6b:59:68:36:
         e0:a9:eb:d5:06:f0:e1:6c:ac:b3:24:19:b9:33:fa:36:d0:36:
         b5:cb:d2:3e:d0:9b:bd:87:45:f1:10:9f:ab:80:f8:39:ab:48:
         d7:08:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:36 2025 by rpki-client