Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          /SlHf7YjkutQejJHDkBALwIvhgtjr7rzzz+qcB9BOcM=
Subject key identifier:   BF:4F:CB:75:80:8D:FB:27:C9:2B:E4:94:A6:AA:49:B5:D3:A9:3A:52
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       019873E33693415F38EF521B9C3B328D4022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 07:02:06 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:06 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:06 +0000
Files and hashes:         1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: nbMeF+dYm4r7Izj4ZXNAQRomW+wR/T2446C7Na2I6qo=)
                          2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:36:93:41:5f:38:ef:52:1b:9c:3b:32:8d:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Aug  4 07:02:06 2025 GMT
            Not After : Aug  5 07:02:06 2025 GMT
        Subject: CN=bf4fcb75808dfb27c92be494a6aa49b5d3a93a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:ef:f2:55:a1:ab:3d:fd:f8:fa:5c:08:f2:
                    8d:96:dc:20:ae:d8:39:a9:11:dd:88:3a:34:cb:68:
                    5e:69:9b:11:d1:84:6f:80:6b:ff:f0:79:a6:ba:ad:
                    b7:78:c2:d8:26:71:55:30:63:73:8b:eb:e3:5f:fa:
                    9d:e9:e4:a7:7a:ec:c9:e4:54:c4:2a:ce:01:5f:6a:
                    86:6a:ce:eb:b0:df:2f:00:ab:71:89:ae:04:0b:bc:
                    d0:da:97:4d:3f:18:ac:1e:36:c9:2a:08:58:5b:92:
                    d9:7f:64:d4:55:b3:2a:20:e0:60:c1:05:48:f5:d4:
                    89:76:15:99:05:8f:0a:1b:33:00:8c:6c:e4:ce:ac:
                    24:35:6d:d3:6d:86:5d:87:dd:ec:3c:81:53:62:2c:
                    8c:ce:36:95:bd:25:9e:34:02:72:dc:96:4c:b5:ff:
                    b9:b7:47:7c:12:4e:a4:4b:a0:c8:6a:2c:62:9a:38:
                    a5:5b:58:aa:81:e0:0e:d4:8f:d8:c8:a1:dc:a1:01:
                    76:8e:cb:dd:fc:55:e5:42:e3:b6:20:3f:2b:81:35:
                    44:df:72:11:aa:04:99:cc:8f:c2:53:2a:d8:8a:05:
                    af:5e:ec:af:0d:a0:6c:10:bd:c8:0a:f8:83:f9:22:
                    e6:0b:20:7e:cf:a0:2e:94:5e:fe:05:f4:df:64:3d:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:CB:75:80:8D:FB:27:C9:2B:E4:94:A6:AA:49:B5:D3:A9:3A:52
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:96:ee:3b:96:bf:88:04:ec:99:c0:5a:b0:67:59:d3:56:
         39:e3:6f:82:f5:cf:db:61:b7:7f:92:c7:60:cc:76:fb:00:26:
         b7:0c:aa:a7:54:c6:74:6a:26:5e:20:65:a2:9e:e0:c2:c3:6c:
         14:b6:55:f3:78:6d:71:f6:05:61:8c:25:7d:f2:bc:fa:af:cd:
         84:95:0f:08:95:fe:3a:93:3d:21:9c:dd:34:67:99:62:6d:c2:
         02:0d:89:b4:0b:10:2e:7a:21:cd:33:b3:cd:57:42:1b:08:18:
         ef:cb:a5:f3:15:12:6a:a3:79:af:58:6f:44:95:e0:b5:33:cf:
         cc:a7:cc:bc:dd:65:8f:f7:71:23:df:61:99:2d:96:9d:00:8b:
         2b:c4:f2:60:30:ef:78:d5:9b:a3:7f:68:9b:d2:1f:2c:31:2b:
         f3:5e:c8:09:ff:32:2d:50:93:4c:18:69:eb:f6:c8:35:88:e0:
         90:49:d3:a2:ea:75:03:05:04:38:91:30:c0:bf:80:48:18:b5:
         24:8a:bd:0e:d5:5c:25:01:6d:20:17:49:4b:98:8f:0b:38:ea:
         81:fd:71:6b:9b:ea:80:f3:b7:48:aa:e7:7c:aa:2f:e2:63:81:
         8a:4d:d7:0d:a9:6b:ec:87:e1:6e:c7:89:bf:96:7d:ba:f8:6b:
         b2:a0:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:24 2025 by rpki-client