Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          pKd7Knl0pAT39Sq5IcrfphJDsGHO+nGsSFgTrPTVHuQ=
Subject key identifier:   25:F4:21:68:9B:EC:52:33:C2:A5:93:C6:81:4A:D1:80:CB:CB:CE:99
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       0198D65F9D7CFD80CD704649DB74DF9A9539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:47 +0000
Files and hashes:         1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: vUnxaNNrpApXxriGup15KId+uBd4FGFOWCvyQK5nRYk=)
                          2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:9d:7c:fd:80:cd:70:46:49:db:74:df:9a:95:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: Aug 23 10:00:47 2025 GMT
            Not After : Aug 24 10:00:47 2025 GMT
        Subject: CN=25f421689bec5233c2a593c6814ad180cbcbce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:16:b4:4a:e7:fb:b3:f6:99:e5:1a:84:3f:
                    fb:97:79:5b:23:47:8c:70:01:aa:a2:2e:45:e8:e1:
                    55:17:b5:19:6d:7f:7f:4a:a0:01:3f:4c:55:1e:77:
                    57:20:92:e0:4c:ea:1e:4d:c8:22:a1:d7:44:06:31:
                    2d:62:c5:bf:dc:3a:35:7e:f0:b0:10:76:a6:e6:b0:
                    f3:43:5c:32:2a:e3:b6:84:76:1b:6d:bb:7e:2d:ea:
                    8e:86:3d:28:ed:6c:5a:94:ae:24:ee:b4:00:52:8b:
                    47:fb:77:19:df:2d:11:ba:ab:d3:fc:4e:b3:03:d1:
                    47:ff:70:62:6f:61:5b:4f:eb:64:4b:03:f1:56:82:
                    d1:3d:39:29:9b:26:c4:f9:d1:cc:f1:d9:2c:48:65:
                    c3:53:bb:85:45:fe:f4:ee:55:5f:e6:a8:62:7b:ff:
                    06:1a:cf:4b:9b:7b:dd:61:a3:0e:92:82:85:ad:cf:
                    a6:5b:86:17:73:ac:95:72:0b:73:d6:6b:cc:ad:be:
                    14:3d:1b:b9:95:14:5e:59:1c:28:ab:25:9c:4f:8a:
                    7b:7c:5e:30:b6:ea:f1:8f:5c:fa:b1:c7:9e:4a:03:
                    97:f9:c0:68:de:66:76:51:11:ee:de:08:f5:3d:fa:
                    8c:eb:4e:f3:73:bf:36:22:d9:de:3d:28:3b:79:27:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F4:21:68:9B:EC:52:33:C2:A5:93:C6:81:4A:D1:80:CB:CB:CE:99
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d9:84:ad:49:6a:8f:5f:cd:93:b7:b7:22:b7:d3:ba:fa:82:
         ed:55:89:a4:7c:9b:10:45:7b:3f:46:1b:05:e6:43:98:a8:6b:
         c3:8f:77:07:34:11:e3:ee:70:c9:36:61:0e:dc:32:61:98:27:
         00:ca:8a:38:0f:f1:fc:d4:d8:c6:05:08:69:ae:6c:6d:43:5b:
         96:f0:ba:16:71:a0:a9:76:ce:3a:f3:a4:46:25:29:a1:31:55:
         bf:ab:29:1d:13:a1:7f:f4:87:6e:b0:aa:e6:19:f7:fb:f3:99:
         9a:b7:20:06:76:a3:9a:ae:df:d9:18:1a:c6:37:20:ac:5e:b5:
         24:aa:38:4f:af:fe:75:72:b8:75:01:72:92:25:33:d2:a6:5d:
         fc:9f:f0:36:0a:80:b2:d3:4c:6c:69:75:98:68:96:3a:14:b7:
         03:b3:3b:0e:24:e9:4f:7c:eb:d3:16:72:41:de:19:4c:b6:4a:
         9c:d0:28:af:5f:dc:bc:62:56:98:74:b1:fe:69:a4:85:f2:4b:
         0d:21:13:6a:4c:9d:34:52:38:17:64:a4:ee:76:b9:50:6f:4b:
         4f:a7:08:46:7a:af:04:22:04:aa:03:a0:6a:a4:91:30:d3:99:
         3f:14:9f:17:34:11:91:87:9d:1b:f3:e9:7f:dc:4f:b4:cd:11:
         0a:49:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:58 2025 by rpki-client