Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          /IXNkwUO7lJAx43XmHM24kRMUB1QN6flRhqRdH8ccV0=
Subject key identifier:   11:99:14:FB:AB:AF:78:E7:B7:BA:1D:25:D1:9F:93:63:73:FB:C0:56
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       019873E3497C5F09703AE98FC6419D78EACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 07:02:12 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:12 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:12 +0000
Files and hashes:         1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
                          2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
                          3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: uP/JMa/UQes51ZzHhQy5K10MYm7bBpOOnO+2vnviTOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:49:7c:5f:09:70:3a:e9:8f:c6:41:9d:78:ea:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Aug  4 07:02:12 2025 GMT
            Not After : Aug  5 07:02:12 2025 GMT
        Subject: CN=119914fbabaf78e7b7ba1d25d19f936373fbc056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:61:cb:7b:c1:5e:3c:74:bf:e2:8b:4c:53:
                    56:51:9c:35:d6:c0:b8:70:2b:09:54:49:92:59:aa:
                    e8:56:02:76:95:aa:8b:eb:07:88:40:48:d8:ec:df:
                    f9:9d:67:8e:43:cb:8d:4d:05:bc:0b:d3:31:f4:6c:
                    9a:ba:18:e1:10:91:be:13:f9:ad:8e:cd:f7:49:ef:
                    a6:a6:11:c2:d7:91:ce:f8:74:9c:75:e6:50:d8:cc:
                    e5:e9:15:27:76:f1:4b:12:27:5c:0e:6a:5d:d4:23:
                    dc:72:39:70:44:44:63:a8:c0:56:cc:d7:7a:b0:eb:
                    66:39:e7:7f:35:24:60:af:11:7f:72:2c:57:13:39:
                    8a:39:17:f2:1b:fa:7c:0e:ba:8f:54:2d:8e:4f:d1:
                    af:aa:20:dd:9c:67:16:72:ae:d2:aa:c6:df:7a:91:
                    b2:28:cb:15:b5:e1:83:3e:50:67:06:45:4b:ac:22:
                    80:12:e3:12:96:29:ed:53:0d:26:bd:1e:3f:05:25:
                    af:0b:8f:76:79:33:f7:55:31:7f:b7:99:aa:1d:d9:
                    df:06:ba:2a:f2:9d:c8:7c:03:e1:8a:41:f8:9c:db:
                    59:57:16:95:71:78:07:bf:41:32:d3:5e:9e:9d:2e:
                    cd:6f:1f:74:57:36:1c:44:be:6b:06:0f:f4:ac:12:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:14:FB:AB:AF:78:E7:B7:BA:1D:25:D1:9F:93:63:73:FB:C0:56
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:32:bd:d8:7a:b4:fe:24:71:ab:15:1e:d0:68:86:62:58:
         65:43:d8:4e:cf:f3:26:b8:10:de:b7:89:91:26:46:c0:60:e5:
         95:76:20:46:30:0f:af:de:86:3d:53:38:6f:8a:75:be:a0:09:
         fa:cb:9d:70:0d:d6:e7:6a:09:24:b8:83:c0:be:5f:f8:a5:57:
         63:fc:c0:f2:c5:8b:b8:fb:eb:ae:93:53:67:aa:d4:db:f2:ac:
         64:f8:d5:49:7a:10:11:35:0c:f8:8d:cb:ca:5f:1a:81:40:7c:
         ea:a3:6e:ed:85:05:67:ed:49:e5:2f:7e:56:d4:26:8c:6e:5c:
         ea:ae:01:6a:75:d9:c5:c2:52:72:5e:55:7b:d9:6c:9e:f0:92:
         1e:c5:07:5b:52:63:09:fc:d3:5e:ba:c4:c6:20:e3:53:6d:1b:
         67:ac:db:e2:c5:c3:86:c0:b5:d3:bd:31:05:3e:e4:f3:73:b4:
         82:4e:1d:49:46:2d:d9:a1:8d:e4:cd:61:a3:f5:dd:87:74:ee:
         01:ba:b8:b1:41:08:76:84:78:de:e9:e7:6a:2f:70:0f:d5:89:
         e7:8e:11:41:a8:d4:d2:54:c7:87:4a:79:93:f0:41:22:1d:be:
         a7:35:2b:53:0d:13:9c:c2:dd:62:c7:36:f1:7a:65:b4:a4:c6:
         83:d5:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:06 2025 by rpki-client