Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File:                     67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier:          HHI8BxhHWxeFmEobK3sFh4dzEXTS5dpmY63vNC/DUSU=
Subject key identifier:   DE:75:AC:54:A4:53:C0:60:9F:37:12:A1:A5:E7:11:A9:20:45:B8:26
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer:       /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial:       01987DC15129C8F0B68AA770258F86686C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 05:01:17 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:17 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:17 +0000
Files and hashes:         1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: 4hKkm3MDb0DZzIIt33n7A5Rk8HVRPVUkMt92Um3S8/A=)
                          2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
                          3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:51:29:c8:f0:b6:8a:a7:70:25:8f:86:68:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
        Validity
            Not Before: Aug  6 05:01:17 2025 GMT
            Not After : Aug  7 05:01:17 2025 GMT
        Subject: CN=de75ac54a453c0609f3712a1a5e711a92045b826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:25:df:42:ff:71:1c:77:8c:9a:25:80:41:
                    c2:ca:7b:c6:25:48:0b:b0:2b:ea:2e:43:42:a5:e0:
                    3d:cb:d9:73:75:56:4f:d1:db:77:e5:db:4d:11:25:
                    0c:30:d3:7e:da:c1:81:a1:d5:d1:a6:fc:3b:2d:f1:
                    ce:ff:69:a0:9f:d9:0e:00:03:69:78:ff:ba:de:0a:
                    13:62:9e:40:42:1a:28:24:20:b8:f9:91:f7:08:04:
                    b1:6e:f2:f9:9c:af:94:37:42:48:96:1a:8b:95:6a:
                    a4:d2:48:ff:e2:01:64:ee:15:8d:b7:c2:0b:ae:1f:
                    d2:02:76:b1:4a:88:fd:e5:06:06:e3:8d:d0:b4:ed:
                    ef:70:64:6e:2b:68:2a:9b:79:28:d4:f0:eb:e7:32:
                    bf:b1:97:56:99:11:8a:da:30:6c:8c:25:36:e9:bd:
                    cf:7e:77:bd:07:2e:d2:74:70:0f:cf:fd:83:84:0a:
                    5f:c1:fb:50:06:c4:f4:ae:4f:75:c6:de:cf:40:11:
                    81:d7:f7:1b:1f:64:d0:6d:df:c6:b8:69:35:a8:f2:
                    75:fb:9f:b0:44:d6:b3:2f:28:32:f2:a7:f1:86:4e:
                    da:7a:53:ac:74:aa:d5:a6:2b:2e:2f:f3:5b:2d:63:
                    16:4f:6f:1e:0a:85:7d:97:9a:34:af:75:e0:4d:b2:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:AC:54:A4:53:C0:60:9F:37:12:A1:A5:E7:11:A9:20:45:B8:26
            X509v3 Authority Key Identifier:
                keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:22:8e:cc:df:65:b6:73:3d:d8:4f:02:51:ea:f7:e2:db:de:
         f0:69:52:bf:ea:b2:f2:5f:c1:4b:f9:3e:20:4b:d0:e3:66:ce:
         22:68:7b:07:0a:22:a6:ca:c9:48:96:a5:00:b5:fd:c9:ae:e3:
         8c:a7:bf:8c:f4:e4:f3:61:66:a8:71:e0:f9:58:ac:48:19:0d:
         b3:4d:8d:90:d7:ec:bc:8e:79:a4:a5:84:6e:28:c4:b5:89:05:
         4d:dc:0b:cc:76:ce:7c:c1:12:48:1c:3b:54:2c:5a:f2:e7:0d:
         53:52:16:e4:d2:e5:bf:ab:fd:16:55:32:1d:0b:a4:e9:56:68:
         55:26:d3:91:f0:31:29:d6:28:cc:fc:d3:4e:78:dd:cc:0b:c8:
         29:e7:e3:ed:cc:6a:db:ec:e6:68:97:6a:15:de:92:5d:a3:f2:
         ca:b4:d7:6f:69:17:16:77:ea:b6:bd:5e:1f:35:df:d6:25:59:
         91:7e:f6:12:02:fd:a6:58:69:20:23:e2:a9:ef:f9:b4:00:02:
         73:6a:48:61:7e:1b:26:f1:a5:90:a3:1c:a8:13:cb:4a:32:b5:
         86:bd:ab:66:b7:7c:77:1b:40:9c:46:16:f7:5e:93:b4:25:a0:
         cb:16:37:54:e7:4c:ff:30:0b:6e:22:ce:db:ae:b4:43:8a:de:
         a4:40:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:01 2025 by rpki-client