Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          r8JYqlWUSouVt6OdCVbbH4kbCzU2GucYxjCs8n93oYM=
Subject key identifier:   FD:F9:0A:DF:28:D7:CA:C6:58:9A:8E:04:00:72:E7:24:88:70:7E:C9
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       01987A521DB4E9B91FDBA8B4CE77AD0B9255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          161E
Signing time:             Tue 05 Aug 2025 13:00:58 +0000
Manifest this update:     Tue 05 Aug 2025 13:00:58 +0000
Manifest next update:     Wed 06 Aug 2025 13:00:58 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: Ql/VsvxmHdUheJoo0kz+AGNU/LOAkqJAAAIEzhYiDaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:52:1d:b4:e9:b9:1f:db:a8:b4:ce:77:ad:0b:92:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Aug  5 13:00:58 2025 GMT
            Not After : Aug  6 13:00:58 2025 GMT
        Subject: CN=fdf90adf28d7cac6589a8e040072e72488707ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:9b:f7:ca:4e:b6:02:c7:94:c5:0b:a0:b5:
                    ae:e2:8c:54:87:57:d4:b2:a0:c5:52:73:e4:97:35:
                    3e:cb:2e:f4:71:c6:20:eb:06:ef:36:55:e9:ae:ef:
                    71:d1:af:18:3c:8d:48:a8:4e:47:81:0c:b2:6b:64:
                    9b:5b:9c:08:e5:dc:58:82:7b:5d:e2:b0:cb:7f:e3:
                    0b:fb:fd:5d:7e:9f:ce:7e:18:d1:fc:15:dd:df:c8:
                    39:fe:2d:d3:30:b7:82:8e:18:f3:72:ff:5e:4d:1a:
                    ef:f2:6d:10:10:38:aa:50:70:fc:40:6c:db:26:7a:
                    23:e6:b6:a9:89:66:53:91:35:04:fa:1a:0a:c8:e1:
                    2c:b7:1f:74:dc:44:57:82:f1:35:1c:70:85:e4:a5:
                    28:68:ad:5f:b6:45:a2:68:d5:36:eb:38:aa:f1:57:
                    c3:90:6a:4c:81:ba:49:bd:32:f3:2c:47:e8:f8:2f:
                    16:4a:42:27:b8:22:04:7f:af:23:53:4b:0e:4a:7e:
                    73:77:5a:8a:c0:70:70:96:d6:83:f2:c9:c6:ab:ab:
                    7f:ce:47:ef:7b:86:3d:07:0c:bf:33:6c:ff:22:73:
                    37:21:ca:ad:d8:89:1f:87:7c:29:07:c5:79:d8:df:
                    e6:ca:7a:eb:86:1f:1a:15:81:01:0d:b6:bd:de:9f:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F9:0A:DF:28:D7:CA:C6:58:9A:8E:04:00:72:E7:24:88:70:7E:C9
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:84:5b:69:bf:d7:81:a7:f8:98:31:98:e5:22:39:06:75:
         87:c0:21:30:2b:ff:de:79:c7:1c:c4:83:bb:d6:c1:ad:b3:43:
         d6:b0:d0:f3:98:ba:7a:13:9b:89:73:ab:8a:84:4b:58:64:e3:
         09:ad:7c:a3:84:73:c6:40:c0:88:13:4d:fa:8a:ce:85:cc:1b:
         b1:19:d1:e6:34:1d:ac:6f:47:32:d9:85:7a:d6:ba:ca:1e:99:
         2b:f8:c3:4b:4e:05:63:a3:10:17:0e:90:a5:72:0e:d1:1f:13:
         81:af:51:82:9c:b3:75:c3:ed:ed:82:bf:e6:fa:c3:c4:6f:d1:
         02:b8:21:b1:a9:d6:ee:46:c8:8c:f4:bf:87:7e:0a:70:cf:29:
         8f:fa:45:f4:87:89:86:ad:de:cb:7b:2e:f7:21:c2:5a:f2:6f:
         51:d9:70:bd:df:c3:5e:90:5f:e2:b2:f9:db:ca:8e:5a:c8:2a:
         63:60:db:db:00:18:af:11:03:47:4f:65:e9:8c:c5:14:5a:dd:
         b5:5a:50:80:ea:45:f6:92:83:2f:d9:ac:4d:c5:0d:90:2b:24:
         2b:92:82:2e:4a:16:d3:72:3c:9d:a2:e8:15:1c:99:e5:09:4f:
         d8:6e:4f:e4:55:33:26:93:96:b0:ee:e0:2f:c3:c4:01:c5:00:
         21:6e:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:29 2025 by rpki-client