Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          NuSg5oBfFw18nCHhtA0y30uwDrGWOXkIezcJ9t4llGM=
Subject key identifier:   E1:1F:70:44:64:93:7E:84:DC:16:46:52:6B:2C:6A:62:90:09:EB:33
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       0198733D538F67B395F2D9D33FD75A4BB3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          164D
Signing time:             Mon 04 Aug 2025 04:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:55 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: CPHjvbVsCNnExytG36vKD/FqhUjge+TwwPhVhmD4HCs=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:53:8f:67:b3:95:f2:d9:d3:3f:d7:5a:4b:b3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Aug  4 04:00:55 2025 GMT
            Not After : Aug  5 04:00:55 2025 GMT
        Subject: CN=e11f704464937e84dc1646526b2c6a629009eb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:44:37:71:af:35:ea:f8:51:e5:04:c7:35:
                    fd:4d:d3:4b:53:7e:06:c4:6a:0c:3a:03:c6:53:52:
                    02:4f:38:30:09:79:47:fc:3a:b5:0f:8e:7c:b1:20:
                    ef:97:57:1b:d1:33:b2:14:36:90:c2:2d:1e:25:74:
                    f3:17:2a:99:8d:d2:cc:e6:50:9b:6e:fd:41:6f:3a:
                    00:38:32:59:d1:d5:41:48:be:5e:64:e0:68:58:94:
                    86:0e:8a:2e:5a:66:ea:07:8f:1b:1a:72:72:d0:41:
                    e6:a8:7c:7c:e8:1e:1f:96:81:25:26:7e:d6:f4:5c:
                    7a:a9:53:2f:e2:b6:f8:f3:58:12:46:11:29:a1:89:
                    0f:d5:67:36:87:6c:87:40:6e:3a:92:2e:57:65:9b:
                    c0:28:bb:cc:d0:34:d3:26:8e:84:17:5e:ae:52:ac:
                    76:cd:8f:c8:90:09:4a:94:79:62:a3:12:21:ca:c4:
                    09:05:8c:90:5a:65:4e:b3:3f:88:3a:f7:0e:4a:23:
                    d8:3f:ac:43:b9:9f:ad:aa:e8:65:6a:ce:14:76:f3:
                    40:f9:dc:c1:b3:af:33:ba:e4:a4:d9:89:34:df:0b:
                    57:fe:d9:42:c1:d5:70:96:bb:46:52:10:90:d6:a6:
                    44:c8:78:e0:34:df:d6:cc:6b:4c:f7:90:1b:ac:d5:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:70:44:64:93:7E:84:DC:16:46:52:6B:2C:6A:62:90:09:EB:33
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:3c:41:2d:fa:f5:8b:f0:ac:5d:4e:ea:f4:e7:cc:01:50:
         3c:e6:d8:5f:5f:20:ab:0f:b7:99:08:72:85:6a:e2:88:57:42:
         52:21:58:a7:09:30:61:33:5d:40:a7:b9:94:17:dc:42:66:ff:
         66:39:1f:51:a8:4c:25:64:a5:4e:f5:a8:80:64:1b:d5:08:83:
         45:d7:e6:e7:00:d7:b1:58:10:ad:71:59:fd:59:87:62:55:ac:
         0b:1b:4d:0d:1a:c3:c4:54:72:76:7e:b6:ee:36:4d:1c:68:b0:
         d5:ff:40:7d:76:36:77:64:de:51:b7:d5:54:06:b8:4a:39:04:
         f1:74:a8:05:e0:0c:dd:38:6f:6b:47:d4:a4:40:89:8a:dc:03:
         04:9a:93:2b:86:c6:3f:46:0c:e5:3b:cb:0a:73:ac:24:18:84:
         a1:3a:8d:3d:d8:f5:da:7f:3b:45:bf:98:9e:2a:bd:41:c8:11:
         04:e8:81:fd:f4:6e:16:01:39:6a:00:14:59:c0:eb:61:5e:49:
         de:39:cb:ac:9d:14:a1:8e:9a:16:c1:27:99:c6:e6:af:5f:b2:
         dc:b7:38:e9:16:f2:f5:23:89:2c:51:6c:f5:e9:82:59:33:57:
         5a:85:0c:5e:b4:8b:78:6e:db:48:15:ae:97:c3:9b:86:88:b8:
         e6:5c:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:08 2025 by rpki-client