Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          zKQtiJ83TcOsejFdG/2x6VT9WN/cEhUAZEi3c13iqqI=
Subject key identifier:   A8:16:B8:81:F3:00:BA:01:BC:56:3F:63:F5:9E:CC:CB:BB:21:71:21
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       019880F93D10FAF405A8AC4034B0FF683A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 20:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:14 +0000
Files and hashes:         1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: ntc6K94XbXrD6/snHxMir+YWsB8Y3UEFldXcmX+DsMg=)
                          2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:3d:10:fa:f4:05:a8:ac:40:34:b0:ff:68:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Aug  6 20:01:14 2025 GMT
            Not After : Aug  7 20:01:14 2025 GMT
        Subject: CN=a816b881f300ba01bc563f63f59ecccbbb217121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:02:09:58:aa:c5:86:93:34:ff:1c:2f:5b:
                    ec:3b:7d:b9:32:61:20:3e:80:13:99:9e:84:57:45:
                    9e:50:8f:68:2d:9d:1a:d9:99:bf:78:a2:f4:10:2a:
                    22:df:71:82:ef:41:55:55:61:30:32:46:43:e7:97:
                    d6:ea:b0:7f:a1:8d:74:8a:2b:12:f7:b4:e5:0d:b4:
                    3a:5c:d9:ad:03:1b:14:d8:7c:e8:12:f1:d8:d7:a4:
                    9e:40:30:0f:8f:1c:c2:5f:19:8c:8b:6b:b3:85:bb:
                    b0:78:45:c3:cb:1f:45:f3:e1:71:aa:e9:68:27:61:
                    79:fd:fd:12:fd:af:73:ce:af:dd:92:09:0c:52:80:
                    02:98:e8:a8:4f:6f:95:c5:73:c2:a2:98:2d:e0:a5:
                    c6:36:cb:da:58:ca:10:dc:0d:19:5c:63:12:47:43:
                    c0:32:37:c8:55:2f:c5:a7:45:b3:be:78:21:7c:98:
                    d6:b8:a7:57:6b:b8:53:7f:ea:90:98:3d:48:bf:46:
                    3e:67:19:ae:11:bc:89:82:fc:d0:d7:c3:6e:ee:65:
                    95:38:65:c9:68:52:12:4b:c7:06:04:b4:40:1d:cc:
                    99:a0:02:30:1c:27:7f:5e:3f:fa:56:d5:20:f1:30:
                    d1:64:92:16:78:22:ff:79:2f:ab:34:bc:f9:7d:36:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:16:B8:81:F3:00:BA:01:BC:56:3F:63:F5:9E:CC:CB:BB:21:71:21
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:27:71:1e:33:98:ee:a2:02:ee:dc:52:f0:b2:9e:cd:8c:dd:
         96:95:24:fd:8a:9e:11:49:f7:82:50:38:64:d2:73:bc:a4:41:
         42:90:3d:88:fe:84:20:24:1e:95:df:35:dc:8f:be:41:7b:91:
         fe:07:e0:66:4a:06:54:53:0f:c3:fb:e1:b4:43:92:0c:15:ff:
         58:d8:63:a2:17:c5:2c:07:c4:67:39:2d:24:08:a9:f9:6e:d8:
         3b:eb:99:0f:19:f9:04:13:2a:86:2e:86:d2:9f:6f:9c:47:76:
         d4:0d:46:ea:af:6b:9b:18:64:47:d3:67:28:bf:59:dd:eb:62:
         8e:fe:61:08:d2:cc:b8:c9:db:7f:b8:80:2f:d0:79:d2:d9:98:
         a7:f2:30:e3:26:08:5a:5e:de:ac:d0:54:b4:7b:82:c1:8e:fa:
         f1:cc:b6:8f:5d:74:33:02:b8:e7:dc:2c:af:df:78:c3:0a:cd:
         86:fe:62:51:be:07:83:68:68:01:2c:76:1d:e7:77:bb:53:03:
         ff:e0:0a:a6:a0:f8:d5:6d:6c:99:06:10:07:49:dd:b0:8f:5b:
         60:c0:dd:c6:65:2a:83:9a:dd:0e:83:3f:e9:d6:8b:05:f2:6d:
         71:13:9a:21:e8:13:b3:4a:b4:65:6b:b1:7d:61:81:62:b3:f0:
         2e:c1:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:27 2025 by rpki-client