Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          dmlDFzm6GeizNNyIwjGZQze5PSfdSGj53rNblabvPRU=
Subject key identifier:   CA:29:8B:75:94:59:98:28:0D:0F:9F:D8:1B:B8:FD:6C:6D:3E:03:3E
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       01987DC0D8BCC73A10BC48D840A70BF84D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 05:00:46 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:46 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:46 +0000
Files and hashes:         1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: 9Mj0vreqpDRKG+EIAkfrKbNVIygSO7/m6br7LoCm1ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:d8:bc:c7:3a:10:bc:48:d8:40:a7:0b:f8:4d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Aug  6 05:00:46 2025 GMT
            Not After : Aug  7 05:00:46 2025 GMT
        Subject: CN=ca298b75945998280d0f9fd81bb8fd6c6d3e033e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:d4:74:78:92:aa:ed:9a:66:c0:63:79:08:
                    63:35:5a:2c:0d:32:99:d3:71:b3:1b:57:55:0d:c0:
                    d4:d5:e8:51:bd:84:e1:e8:a8:d9:2e:9e:13:f4:d1:
                    f3:e7:10:43:9b:86:eb:50:e3:54:41:15:fd:6b:f7:
                    10:57:67:4d:fd:87:6f:49:85:f7:a6:a4:9d:e3:66:
                    56:71:7f:c5:0f:3e:bd:5f:6e:d7:92:0e:43:41:3a:
                    ed:b6:a6:d6:14:25:2f:f0:2e:0f:44:c8:7f:55:0a:
                    95:64:c7:a3:5c:04:30:cd:48:75:64:92:1e:d7:79:
                    1d:1d:13:3d:99:14:d7:38:7e:b0:b2:aa:e4:f8:6b:
                    d6:07:6f:f8:dd:9e:28:f1:40:c8:dc:39:fe:f3:b4:
                    70:14:cb:9f:3f:0b:19:7f:22:6b:28:c6:1e:c7:e7:
                    ae:7d:07:3a:04:6f:8d:f7:ed:14:1e:2f:40:34:f0:
                    34:94:b2:a1:70:db:c7:c4:03:9b:8e:6a:ee:d0:87:
                    af:df:06:45:87:2d:5c:52:c8:5a:95:cb:ae:3c:e5:
                    03:de:c8:a6:2b:17:90:79:68:9b:c3:40:ab:1f:34:
                    8e:4b:8a:67:f4:67:9b:42:47:9a:ee:f6:fa:d8:a5:
                    8a:6e:21:cc:60:ef:f9:92:65:e1:c7:9f:1b:5f:90:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:29:8B:75:94:59:98:28:0D:0F:9F:D8:1B:B8:FD:6C:6D:3E:03:3E
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:67:2b:fc:ed:8d:70:d2:6b:12:5f:3e:2d:47:c7:7c:7e:fe:
         48:43:c2:c8:e3:42:50:91:2c:85:ff:c6:55:0e:e8:28:8c:65:
         3f:a7:2f:b3:b3:12:3c:46:34:d9:02:62:04:9d:fe:6d:67:fd:
         db:b9:e4:e6:61:ee:71:2c:2f:77:e7:2c:5b:68:3e:c9:5c:dc:
         71:68:df:94:17:7c:c5:55:e7:c7:60:d1:12:56:35:5c:db:e7:
         b9:0f:e8:07:7d:0f:16:b0:35:b3:47:bd:a7:4c:af:28:49:d2:
         f7:42:95:66:5c:3d:53:a7:fb:3d:de:b6:d8:cc:90:5e:34:10:
         47:ee:e6:4a:ab:2e:14:0a:47:65:32:78:3e:60:bc:e7:76:43:
         ac:f8:97:fc:1a:7e:aa:88:f3:1e:c6:69:6f:f7:6e:df:a7:59:
         76:46:cd:2b:c7:56:cf:d6:b5:e6:f0:ca:d6:86:51:73:b1:a6:
         d8:cf:83:46:94:cf:36:f8:54:1d:4f:1e:56:4f:b8:cc:bf:67:
         0b:86:1b:0b:89:7c:dd:b1:aa:7f:b4:78:64:79:99:0f:6e:86:
         f4:6c:cb:5b:0d:7d:bc:7a:c6:f6:2b:a4:5a:c1:28:fd:de:11:
         74:f5:8c:8f:13:30:e3:7b:24:f1:d6:72:c3:c3:5d:1b:46:c5:
         fa:f8:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:26 2025 by rpki-client