Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File:                     z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier:          AxK8pN/CN38Bk0rv+/b4hxtfwmyKQRNB5pKHddvZeCk=
Subject key identifier:   27:C8:76:86:51:25:66:6F:46:C4:82:D3:D2:32:2D:3C:59:01:9C:61
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer:       /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial:       0198C9B867020FAF622B99C2829EBF3599B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number:          164C
Signing time:             Wed 20 Aug 2025 23:02:41 +0000
Manifest this update:     Wed 20 Aug 2025 23:02:41 +0000
Manifest next update:     Thu 21 Aug 2025 23:02:41 +0000
Files and hashes:         1: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (hash: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=)
                          2: Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa (hash: ofRGxwyei53l51n5v+e08DV9i8dygPEuLXkTPl6qbNI=)
                          3: YCaEZB50rCphFHNs0SPFVykePLA.roa (hash: AXiMRnv2MY2eYU5zXOJ4Cp11rWQHmU+zWOZeXxL9Un4=)
                          4: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
                          5: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: KELxT9zvygRH2N1KSJoVHhgaKbAf4F3jFM3tMIEmlPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:b8:67:02:0f:af:62:2b:99:c2:82:9e:bf:35:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
        Validity
            Not Before: Aug 20 23:02:41 2025 GMT
            Not After : Aug 21 23:02:41 2025 GMT
        Subject: CN=27c876865125666f46c482d3d2322d3c59019c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:65:6f:0a:56:5d:48:22:de:f6:c9:18:49:
                    3e:76:08:d2:89:af:4b:3f:b3:78:41:5b:a6:4a:d4:
                    a3:ff:90:76:97:e6:68:07:2c:ba:50:bf:27:f9:78:
                    6d:44:ec:a8:8a:5e:f8:62:50:ff:3a:c6:38:be:da:
                    dc:31:44:a4:88:01:69:10:85:71:a5:fc:62:02:6b:
                    2d:9e:8e:7f:2d:ef:dd:db:a8:1f:76:59:8f:30:53:
                    1a:18:30:67:cf:77:c5:93:48:5a:fa:52:9a:70:25:
                    09:24:f5:d7:c7:16:50:c8:e8:20:b7:3a:7e:d2:76:
                    65:96:07:34:e8:b1:c8:72:46:f9:bb:a9:d1:c3:7e:
                    c0:98:04:40:82:fb:a7:cf:7f:fa:78:68:31:4c:ef:
                    f4:f5:33:7b:a6:cc:14:11:5f:f5:08:55:14:57:37:
                    9d:34:48:b8:ec:25:a8:db:7b:5a:b3:b7:2d:12:64:
                    59:c5:f8:3a:20:81:88:a9:17:f1:e1:40:0d:0b:4f:
                    e2:cf:1d:8b:41:cf:ed:4f:b7:76:06:ac:70:1e:41:
                    10:6c:5a:e2:23:b4:63:52:6f:f3:02:da:cd:a7:52:
                    78:15:c8:87:66:0b:7b:56:d7:f4:f4:61:47:17:c7:
                    24:46:c3:af:0b:f0:78:34:ca:b7:3e:08:73:9e:c0:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:76:86:51:25:66:6F:46:C4:82:D3:D2:32:2D:3C:59:01:9C:61
            X509v3 Authority Key Identifier:
                keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2d:60:64:8c:3c:47:b6:af:db:b9:c2:dd:82:72:cc:89:6e:
         8e:d4:58:28:60:0b:6a:c0:a1:bd:21:73:d2:7a:e2:c1:9a:2c:
         d6:56:e7:3a:ea:cd:39:f4:e3:0b:38:48:82:95:60:25:da:c4:
         78:51:05:b5:48:d5:c1:06:fe:c1:a9:b0:f7:0a:9f:e9:35:6b:
         ff:e3:d7:5d:d9:ab:a7:73:bd:7d:c0:13:c6:2f:36:f7:c8:07:
         ff:2f:58:3d:45:c8:83:02:b2:80:9f:ef:cf:72:38:91:20:81:
         fb:2a:b9:2a:25:ef:ad:0a:e5:38:c9:4c:86:6e:3c:f1:17:bb:
         af:19:94:3e:48:10:ee:6b:df:90:88:2d:e6:d5:36:02:81:99:
         b8:b9:e2:76:52:f0:4f:06:7d:ac:97:c6:40:cd:ff:bb:b5:72:
         31:08:7e:98:cb:07:18:e3:75:67:f1:00:bb:13:85:ad:cb:44:
         ff:25:7c:6b:49:f8:e3:26:07:25:df:4b:db:64:24:e2:51:44:
         b6:2e:d4:e7:c6:d1:c2:12:28:62:e9:2a:22:e3:3b:34:bc:b3:
         d8:6e:3a:4d:24:37:13:40:58:b2:8d:b2:05:77:7d:75:d1:9b:
         8f:a2:b3:00:eb:f8:f7:aa:ca:ba:ad:42:8d:da:48:d0:0f:06:
         ee:52:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:06 2025 by rpki-client