Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File:                     r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier:          Gy3jisuVyHzuj97l0EYS1QGlqBvmmVr4D9uZa24VE9w=
Subject key identifier:   07:31:E5:6C:31:10:5D:4E:37:31:73:1E:1F:C7:C0:E3:F1:BF:87:DD
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer:       /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial:       0198FD368CC0EC3B60FC91FA6A47634D0A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number:          165C
Signing time:             Sat 30 Aug 2025 23:01:07 +0000
Manifest this update:     Sat 30 Aug 2025 23:01:07 +0000
Manifest next update:     Sun 31 Aug 2025 23:01:07 +0000
Files and hashes:         1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
                          2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: PNXRLGnOm0r+LV7zkbQfkZedBBGiZ1UhSjY3f0qszW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 Aug 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:fd:36:8c:c0:ec:3b:60:fc:91:fa:6a:47:63:4d:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
        Validity
            Not Before: Aug 30 23:01:07 2025 GMT
            Not After : Aug 31 23:01:07 2025 GMT
        Subject: CN=0731e56c31105d4e3731731e1fc7c0e3f1bf87dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:1c:1d:9e:cc:9e:f2:09:51:16:a6:2b:23:
                    d5:c7:cb:de:47:42:8e:06:fc:02:73:16:36:12:82:
                    c2:62:9d:ae:28:1a:67:6e:13:e8:10:59:4d:4f:17:
                    8a:21:37:a1:b2:f0:93:04:ef:71:8c:1d:09:8b:a7:
                    54:75:c4:2d:a0:e9:1f:0d:b9:ec:40:20:58:93:42:
                    6b:84:2a:24:fe:2b:c0:ab:5e:5e:07:5d:2a:88:b7:
                    86:38:42:3e:71:ab:03:0f:c4:5e:b8:2d:0b:06:11:
                    90:10:15:91:c5:27:9a:0c:84:be:92:53:3c:fe:89:
                    da:0f:8f:b2:ad:80:fc:d0:4a:03:78:09:13:05:e6:
                    05:02:20:1a:71:78:7d:d9:34:0a:ba:3d:04:f8:1c:
                    9f:da:27:ea:84:72:d3:9d:cb:49:26:ab:01:30:d7:
                    d7:c8:d9:d9:20:72:b8:6e:5c:61:21:62:c4:89:d3:
                    cb:92:39:20:f9:1a:26:a3:23:dd:8d:97:3b:b3:4a:
                    d6:44:aa:20:69:6b:f9:1a:a6:93:b0:b7:98:4c:ad:
                    06:8d:f7:a3:7b:06:e1:0d:0a:f5:a2:25:fc:12:b0:
                    f3:10:c3:59:a6:59:51:0c:bc:84:dd:53:bf:a2:6a:
                    78:89:7f:d2:26:8e:97:1e:d7:a2:b0:d0:be:78:06:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:31:E5:6C:31:10:5D:4E:37:31:73:1E:1F:C7:C0:E3:F1:BF:87:DD
            X509v3 Authority Key Identifier:
                keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e3:c6:30:6e:a5:76:fc:3f:dc:c1:57:27:79:29:0e:ae:e9:
         ee:47:8f:ea:14:64:06:87:2f:be:70:b0:38:1f:0d:6d:ba:64:
         a0:de:56:72:0e:0e:61:51:02:16:db:5f:90:83:77:66:2a:2e:
         92:4a:c9:f7:9d:01:4c:4d:9c:09:96:d1:10:db:6b:c2:f0:0a:
         e5:dd:72:1e:08:a6:48:9d:1a:e3:dd:5c:a4:41:f8:82:7e:ee:
         b9:bb:dd:6b:25:f5:8d:70:58:70:f2:56:7e:88:36:dc:63:7b:
         46:74:29:91:3d:44:e2:9b:80:c8:69:0a:41:e3:ea:56:c6:6c:
         af:af:41:d3:c0:b9:8d:b0:8f:ae:6b:8a:af:67:ba:8b:59:4b:
         e9:e9:25:09:68:38:c9:ce:d3:ca:c7:c8:39:d4:45:b8:f5:ae:
         17:0b:e2:12:fd:80:c1:f3:9a:f0:5e:f4:54:73:cf:85:95:59:
         55:d6:6e:04:bb:34:fe:a4:ec:bc:ce:54:74:8b:c8:7e:00:63:
         91:63:39:6e:b5:2e:8a:9c:4f:5b:fe:fb:e2:de:22:1c:8a:01:
         49:26:17:fd:ee:26:b6:cd:f2:8f:bc:1d:cd:24:3b:c5:58:14:
         c8:d8:b1:c2:a1:f3:c5:8e:b7:10:02:73:3f:60:67:33:b1:ac:
         0d:ae:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 01:32:32 2025 by rpki-client