Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File:                     aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier:          2ygUw5nzdxDP0H30pwBYFGTljp1+A9yiS0vlDFrGGew=
Subject key identifier:   1F:6B:93:B9:DA:3E:71:DE:7B:EE:A4:4E:19:37:88:D1:2F:66:4C:F3
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer:       /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial:       01988167584B5CA72D77658A13C107EC8141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 22:01:30 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:30 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:30 +0000
Files and hashes:         1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
                          2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: GTqxZ4fF+VO6W3eRonFiCMzIJv4EuQ3UZZQHdEtyFkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:58:4b:5c:a7:2d:77:65:8a:13:c1:07:ec:81:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
        Validity
            Not Before: Aug  6 22:01:30 2025 GMT
            Not After : Aug  7 22:01:30 2025 GMT
        Subject: CN=1f6b93b9da3e71de7beea44e193788d12f664cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:68:66:fb:3d:02:42:8b:17:8a:68:89:97:
                    68:65:93:1f:11:34:c1:d8:ce:48:a4:dc:53:b8:99:
                    57:8c:72:d1:bd:2e:aa:27:cb:13:1d:31:77:f5:a3:
                    df:43:65:40:e4:e4:d1:eb:77:b0:a9:bd:c2:bd:1c:
                    c0:b5:a9:07:88:dd:2d:6d:ee:78:87:dd:9c:19:65:
                    2a:35:bf:c3:7e:3c:29:b5:13:91:ba:e2:94:86:fa:
                    b2:81:db:ca:ba:13:21:fc:43:b9:02:92:cf:90:9f:
                    f1:26:71:97:9f:53:e7:c0:ef:c0:f5:0e:f9:81:c9:
                    6d:5e:bb:5a:86:54:b1:2e:8e:e8:c4:cf:96:d6:ae:
                    67:d4:18:66:37:26:d6:2f:bb:ca:73:82:8c:ce:7c:
                    5d:45:b9:50:0d:4b:e6:cc:0c:3d:a4:e9:f3:32:ac:
                    6e:5d:d4:cc:e8:ca:1b:ed:a7:f2:2d:7c:a3:37:2c:
                    55:71:b1:d4:b4:27:8b:9f:67:96:cd:bf:1d:56:0c:
                    49:10:1d:54:7a:52:af:47:87:f5:dc:ce:b7:c8:15:
                    ce:36:41:ad:c6:7f:3e:1b:91:65:4d:b5:ec:f2:fb:
                    20:65:68:00:ed:8c:18:9c:b1:fb:12:bc:88:22:99:
                    9b:b2:f7:bf:d8:d2:da:cc:b5:7d:88:de:c1:2d:e2:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:93:B9:DA:3E:71:DE:7B:EE:A4:4E:19:37:88:D1:2F:66:4C:F3
            X509v3 Authority Key Identifier:
                keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e8:6d:cf:f8:38:ee:f7:10:a8:f5:0c:a9:58:3a:fb:01:de:
         99:cf:3b:39:2e:96:6a:b0:37:1d:aa:c2:b1:cb:69:45:67:20:
         7d:e5:f1:74:bc:fa:a9:a6:48:08:90:2f:d8:83:bd:d1:b3:97:
         38:a4:23:3c:70:78:56:e8:31:da:cd:8e:4d:51:c2:91:cf:fc:
         3b:d7:f7:58:b5:69:89:c6:7d:b3:f0:f6:03:82:4d:7b:ce:1f:
         7f:5d:0c:81:e8:f0:c5:a3:fd:63:ec:17:21:ac:8a:61:1e:4e:
         6e:1d:8e:6c:f6:f9:d4:84:16:86:f2:82:f5:77:fe:9c:17:5d:
         64:99:86:bd:80:12:10:bd:e3:da:37:86:e5:5d:9f:70:cd:67:
         82:ac:2d:b1:2f:bb:63:ad:66:ae:23:24:af:d9:89:0f:8a:10:
         2f:2e:e7:0f:c6:bd:6d:84:43:95:9c:5c:b2:e8:52:6b:40:82:
         8c:2a:6a:c3:f1:e0:bb:d5:cd:9e:81:49:54:42:7f:38:81:86:
         c3:f1:0f:50:f8:98:cc:01:e2:07:d6:9e:c7:a7:c6:9a:a1:8c:
         09:68:df:f4:16:dd:24:d1:5d:3c:f5:cc:ce:b5:f7:66:0e:2c:
         07:74:d5:05:33:69:a4:ac:1d:2f:a8:3c:65:e6:c5:b6:44:4e:
         12:03:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:49 2025 by rpki-client