Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          lhYuMLkyjezeHG5r+27o+VvkVMH2qzytKj4W2C3QSKo=
Subject key identifier:   61:E7:42:5E:F1:DB:AF:9F:C7:34:94:55:B0:6D:53:18:AD:4E:29:39
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019882B0E28700418C5245DECBE0DFCC8574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 04:01:27 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:27 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:27 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: qWz9jCUCokJffJr1y5f0jJzZKnbgmSz3qDQq2HwTN4Q=)
                          2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:e2:87:00:41:8c:52:45:de:cb:e0:df:cc:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Aug  7 04:01:27 2025 GMT
            Not After : Aug  8 04:01:27 2025 GMT
        Subject: CN=61e7425ef1dbaf9fc7349455b06d5318ad4e2939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:4f:30:fe:d2:ee:27:e1:2d:f9:c6:ca:91:
                    17:00:f0:ef:eb:64:a5:07:2e:46:84:60:2e:2d:89:
                    78:09:5d:82:1f:87:10:ed:28:a2:14:53:97:d8:9c:
                    fd:83:26:22:29:d4:84:15:c4:63:fb:55:22:f1:76:
                    68:ee:e2:42:2e:86:4f:1c:ef:93:38:42:0c:1a:9e:
                    99:83:f4:99:3b:25:1b:94:2a:99:61:fe:a0:5a:ce:
                    35:47:27:fe:60:0e:cf:50:5e:80:0c:06:e6:21:53:
                    fa:c2:b3:92:97:d1:62:89:66:d2:b0:41:a7:f8:06:
                    c4:cc:57:7b:3a:ef:9e:e5:13:9c:52:ba:33:75:45:
                    52:3d:a9:13:81:f0:af:12:b3:65:18:0a:4b:74:6b:
                    bf:0c:99:a0:1e:9e:f4:27:77:07:c9:a1:d9:86:9f:
                    0a:cf:32:78:90:62:04:4d:bb:ab:2c:05:66:56:72:
                    25:a4:e8:00:88:d8:4d:62:ea:e4:fe:b1:ac:c1:cb:
                    20:a7:78:12:e6:f5:4b:a0:ff:9e:e3:85:8a:dc:0c:
                    ad:24:5f:d3:7c:17:b5:a0:c7:f7:af:a6:c2:aa:0d:
                    dd:3d:e7:08:21:bb:6d:83:91:8f:eb:35:ac:b2:c6:
                    2a:9d:7d:3d:ee:e7:aa:f1:16:8f:bb:d2:13:bc:df:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:42:5E:F1:DB:AF:9F:C7:34:94:55:B0:6D:53:18:AD:4E:29:39
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:97:57:59:e0:d4:91:75:34:55:ec:d9:7a:c6:15:53:1a:6d:
         39:7e:a8:7e:2c:67:12:35:00:46:86:95:c3:37:58:ee:e2:b5:
         8d:ce:df:09:d4:f3:80:b1:1b:15:1d:68:d2:35:16:e9:c0:21:
         ba:3e:ab:ec:61:fd:49:d6:c2:f8:6e:73:9c:f7:7a:ff:98:b5:
         47:ed:e3:ff:77:85:e0:6e:42:4c:ac:8e:16:ca:78:1c:57:5e:
         bf:e2:42:da:33:50:38:dd:d5:c4:76:e9:00:a4:e5:e6:3f:5f:
         82:b5:63:49:77:e2:3b:5f:2e:98:ab:61:15:0b:91:fb:99:d2:
         c4:f7:9c:9c:17:4c:2e:d7:3b:18:44:11:74:74:29:b9:d2:cf:
         ae:95:54:31:66:41:1f:ab:ea:8c:2f:c4:29:37:64:95:8a:4a:
         9a:25:fa:a0:9f:de:fa:9f:97:17:7d:1b:93:f5:50:58:54:e8:
         aa:66:7c:fb:81:ec:10:16:0e:c9:43:47:05:bf:8e:ac:dc:69:
         0c:bf:a9:2c:63:ca:94:61:1d:2b:60:68:08:76:ff:de:79:a3:
         4b:7f:ac:4d:2f:ba:17:80:46:2a:d5:bc:22:95:1f:f9:5b:f9:
         c0:e2:b3:d6:0b:7e:1f:c3:13:b6:50:6a:61:d4:b0:df:48:40:
         f1:67:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:11 2025 by rpki-client