Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File:                     Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier:          W0SeAz1DTXGrQ2YpfPqp3IddxiEEsxc0KqFtr6bU6x0=
Subject key identifier:   A9:B1:83:E9:0D:C4:F6:E7:F7:7C:3B:2C:CC:D9:B0:B8:C9:45:FC:A9
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer:       /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial:       019881D5A47E423508C34EA1C21F6B422BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 00:01:58 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:58 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:58 +0000
Files and hashes:         1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=)
                          2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: TmE7AUINbwlZBAJVRxFv62MDip7td/dtUzyirNLt5uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:a4:7e:42:35:08:c3:4e:a1:c2:1f:6b:42:2b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
        Validity
            Not Before: Aug  7 00:01:58 2025 GMT
            Not After : Aug  8 00:01:58 2025 GMT
        Subject: CN=a9b183e90dc4f6e7f77c3b2cccd9b0b8c945fca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:ec:3f:e2:68:e4:11:e1:9f:2b:cc:2d:58:
                    c6:96:af:e7:05:7d:5c:3f:9a:70:76:6e:58:33:91:
                    b3:92:2a:c1:4a:89:41:70:44:47:37:ba:4f:6a:3a:
                    0a:6c:44:13:c7:f5:af:13:3f:b1:a4:7b:a0:80:eb:
                    cc:32:b6:cc:1b:67:2d:16:35:13:07:50:e7:42:97:
                    ab:66:3e:39:c9:6f:ca:48:af:45:04:69:31:67:0c:
                    e3:a9:33:a2:bc:57:3c:56:7b:54:c0:95:4e:78:ac:
                    de:40:9d:64:20:60:84:5d:ef:d4:88:a8:c8:b6:45:
                    f6:89:ae:e9:7a:e7:92:b3:12:0e:02:6f:88:35:26:
                    35:8c:71:ad:8b:f0:c8:a2:b0:af:63:06:15:be:42:
                    85:f5:75:c4:4d:60:29:a4:5b:3f:64:43:2f:1f:5d:
                    ee:fa:bb:96:3b:41:8c:a9:78:d5:89:76:f6:88:c6:
                    2c:8e:b4:36:44:a8:aa:f4:af:30:45:82:6e:10:cb:
                    19:dd:c7:55:45:d0:f2:f3:c2:76:8f:8f:e1:09:64:
                    9d:8a:51:42:3b:a2:68:cf:f5:97:ba:6d:ba:7e:6d:
                    16:e9:2c:90:d7:43:bc:81:25:f8:79:64:13:ac:97:
                    f1:b3:f1:b1:9f:36:e0:36:36:bf:56:78:b9:bb:6e:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B1:83:E9:0D:C4:F6:E7:F7:7C:3B:2C:CC:D9:B0:B8:C9:45:FC:A9
            X509v3 Authority Key Identifier:
                keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:bd:5f:13:4e:49:2d:8d:aa:87:9b:d1:5b:d6:21:b5:69:
         c9:4d:29:9a:fb:ac:f9:d7:17:87:ef:fa:45:1d:b2:9c:36:75:
         e1:11:58:0b:aa:2c:95:f9:ce:38:e2:8c:2a:e4:f5:eb:1d:6a:
         db:8d:17:7d:92:e0:5c:99:95:cf:ef:a6:6a:6e:d7:77:30:1e:
         af:76:d8:f8:35:cc:51:5a:0f:c6:d1:32:3f:74:0b:97:da:df:
         57:3d:c6:e7:37:5e:26:ed:a4:0c:ff:dd:fd:b5:94:79:0c:4a:
         83:cc:55:23:ee:bb:e8:d5:6f:d1:b8:ad:4b:4b:b0:3f:af:2d:
         01:96:16:5f:3f:04:da:5b:73:13:4f:1e:a4:73:11:fe:0d:b0:
         90:5b:84:3d:18:87:28:e1:08:ac:33:a1:12:3b:f3:10:1b:93:
         6d:85:5b:d8:bf:2a:e6:f6:79:cc:05:c2:a2:4d:91:3f:5c:e7:
         6d:18:45:af:4b:a5:4e:00:62:1d:ad:e4:98:1b:76:aa:83:91:
         8c:b0:92:af:ef:7c:4c:f1:8d:06:e9:63:2a:a5:7e:3c:8e:a0:
         24:3d:04:9c:66:9b:3e:76:fa:02:25:42:54:2f:72:d9:cd:83:
         47:00:ab:51:ec:eb:93:10:31:a0:51:3b:63:35:34:ab:cf:52:
         8f:63:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:26 2025 by rpki-client