Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File:                     pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier:          LOKaF5lu8V4HENPkAonlO4iTst80o3WCDUB5+CiXuzI=
Subject key identifier:   43:EF:D8:86:DE:1C:1D:C4:23:A8:1C:54:93:D5:AA:0B:85:3E:EA:D5
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer:       /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial:       0198820C33C32D730D0E1854749272C3EBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 01:01:34 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:34 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:34 +0000
Files and hashes:         1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: 4+Xsi2Xc5AOG7bjQW7iq4YiKOQt35DzxXM+c/TGdSlI=)
                          2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:33:c3:2d:73:0d:0e:18:54:74:92:72:c3:eb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
        Validity
            Not Before: Aug  7 01:01:34 2025 GMT
            Not After : Aug  8 01:01:34 2025 GMT
        Subject: CN=43efd886de1c1dc423a81c5493d5aa0b853eead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:6c:a8:9e:00:99:0b:9b:90:04:13:e6:18:
                    1e:e8:9c:f4:ad:53:fe:24:82:34:6b:52:3f:2f:59:
                    e2:bc:48:1e:f5:24:47:59:71:7a:43:21:f3:28:e0:
                    c7:e4:15:7d:31:bb:20:2b:2b:8c:e6:83:6e:00:a7:
                    ad:f4:3d:11:a7:19:fd:b8:75:09:22:7c:33:0b:4c:
                    90:c6:28:bd:1b:57:a1:d0:9d:8a:57:8b:85:2e:1f:
                    6d:ec:b8:62:fd:67:5c:34:00:27:b2:4a:ec:67:54:
                    9d:8f:1a:b0:dc:29:4b:9b:f8:c9:9c:65:17:62:41:
                    b4:1f:92:a8:95:05:d1:42:fd:81:72:de:8e:35:13:
                    f3:27:cb:b1:43:73:ad:8c:62:71:20:8b:81:dc:e6:
                    3a:fc:a5:c7:f1:eb:54:5c:14:47:d4:c9:02:9a:43:
                    04:33:cc:7d:fa:71:b5:59:6b:f3:37:97:ca:8d:10:
                    70:15:aa:be:38:c4:28:39:cd:4a:fc:ed:02:54:27:
                    a3:b3:8a:d3:f2:db:94:a9:99:ac:f9:df:4a:42:20:
                    a1:55:aa:04:15:1f:0e:bd:8d:a6:09:d1:e1:42:8d:
                    b6:63:89:77:19:79:e9:f4:a7:f3:e7:1c:40:84:e5:
                    1d:5c:e8:51:bd:6d:32:d1:05:54:88:ea:29:26:55:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:D8:86:DE:1C:1D:C4:23:A8:1C:54:93:D5:AA:0B:85:3E:EA:D5
            X509v3 Authority Key Identifier:
                keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:30:37:ff:b5:1e:5a:51:69:72:f4:85:f0:9d:6b:21:7a:
         b1:9f:95:6b:47:79:ff:9d:04:14:8e:0c:d9:68:fc:58:c5:f3:
         44:e4:5d:b6:57:b4:09:bf:f1:c9:7c:9f:12:fc:5e:36:59:54:
         3c:2e:cd:76:57:3f:90:6c:e1:1f:cb:e8:bf:c0:1a:ff:ee:f2:
         a9:dc:da:cc:d8:f3:57:3f:d1:66:22:86:9c:e4:f6:09:06:af:
         b8:ea:8c:37:05:8e:ea:b2:d1:80:fb:ec:98:e1:fc:8b:16:cf:
         b0:a7:a2:96:11:63:83:cc:da:93:6d:bd:79:45:07:cc:fb:c4:
         28:c6:02:f6:4e:5b:14:95:00:b8:88:a8:c1:91:d4:83:f7:70:
         0f:84:b2:01:bf:8a:fc:e7:fe:f4:f9:e9:77:7a:03:58:ac:52:
         b1:28:8e:92:28:97:5c:54:71:3f:5c:e6:64:40:d9:03:3e:68:
         a1:be:e1:f2:e3:ca:65:7e:ad:a0:0c:6e:81:89:ac:5b:44:4c:
         99:74:35:c0:c1:9f:0a:78:de:db:1d:bb:c0:60:ea:0e:7e:78:
         e3:54:81:9e:8d:88:7f:71:12:45:58:1c:c5:e7:7e:be:df:78:
         06:b5:b1:94:1c:bc:4f:e9:ec:c8:08:a7:90:01:56:c3:70:92:
         a7:94:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:06 2025 by rpki-client