Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File:                     r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier:          L1t/yJAzTr8X7oKvUFRDM6nd+YRqEGZihKQjU3PJQac=
Subject key identifier:   F9:B1:34:32:49:EF:D3:65:8F:D3:73:AB:28:A0:65:A3:EB:4E:27:ED
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer:       /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial:       01987E65A9A597193B8BE4FC0CA5C0FF626F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 08:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:48 +0000
Files and hashes:         1: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (hash: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=)
                          2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: KbTlSddL32UhbjpvhS9MtfbcoGci8vtQPGhuvbOcIHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:a9:a5:97:19:3b:8b:e4:fc:0c:a5:c0:ff:62:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
        Validity
            Not Before: Aug  6 08:00:48 2025 GMT
            Not After : Aug  7 08:00:48 2025 GMT
        Subject: CN=f9b1343249efd3658fd373ab28a065a3eb4e27ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:a6:43:89:14:99:be:3d:1a:00:32:e8:2b:
                    ae:cb:55:41:ef:4f:7a:d6:ab:59:18:c1:58:a4:aa:
                    2d:ad:f8:38:c8:4e:c4:32:fd:e4:72:e1:a4:3e:a8:
                    bd:06:32:6a:ba:d5:6b:0e:b9:0d:83:f3:1e:b1:9f:
                    19:5d:d5:97:c1:79:42:4c:3f:60:03:32:d6:cc:83:
                    2a:fe:e6:72:cf:bc:dd:29:94:9a:a0:65:33:79:c6:
                    8b:6b:78:8c:42:42:9c:d4:55:23:d1:50:bc:2a:4c:
                    6b:26:48:54:af:6d:0d:a4:cc:6b:0f:05:23:78:a7:
                    fc:2f:d7:16:eb:e0:0f:42:04:3c:2f:f4:f3:08:57:
                    86:2a:6a:31:d0:04:9e:41:a6:df:e8:b0:9a:de:e8:
                    6c:73:f1:eb:84:6e:bb:bd:21:9d:84:46:87:f4:2e:
                    44:5e:b4:c5:81:02:c7:ae:06:d3:90:44:66:65:eb:
                    7d:2d:76:a7:da:14:4b:76:8a:d7:f9:bc:a4:78:4b:
                    43:98:3e:ae:f4:6d:05:2e:3a:da:4d:80:84:5b:48:
                    02:0a:31:90:5e:32:72:d1:39:1b:50:c0:43:d8:66:
                    59:19:00:bd:12:8f:bb:2f:d8:1f:41:e9:c3:e1:36:
                    93:60:ef:12:1e:57:4a:34:18:54:3d:3f:86:9f:72:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:34:32:49:EF:D3:65:8F:D3:73:AB:28:A0:65:A3:EB:4E:27:ED
            X509v3 Authority Key Identifier:
                keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:72:9f:a3:f2:0e:71:76:a9:16:d9:bf:5c:ba:6e:82:14:ef:
         b8:bf:0c:54:52:3a:80:c8:13:5b:61:ae:8d:76:60:c9:db:e0:
         f8:bb:d0:85:35:09:0a:65:ce:fe:25:e1:44:20:c2:ad:dd:5d:
         7b:61:3c:ca:5e:b3:c9:b4:fa:95:b7:fe:60:6c:1a:ac:4f:44:
         6f:d8:87:71:e1:63:59:ac:a9:51:fd:cc:34:56:d0:43:35:7e:
         a6:ab:a9:d8:15:1d:f5:c3:ea:1b:af:a3:96:f9:e4:5e:c1:e5:
         61:dc:70:06:de:cb:54:fb:a9:5e:86:b1:33:06:d2:42:e6:a0:
         68:d7:b0:d4:c8:b8:32:77:5c:f4:be:61:ca:75:9c:3c:2f:90:
         ac:aa:ce:64:ae:5c:65:75:4f:23:b9:bf:77:aa:a3:b1:41:ff:
         8f:68:b6:58:70:69:fc:e8:9b:b2:80:23:a6:76:7f:df:a9:2d:
         c0:2c:8c:95:4c:21:f1:bb:d9:34:75:8a:57:32:bf:5f:91:f4:
         ec:25:4b:a3:c8:03:7f:c6:44:59:9e:7e:42:08:09:7f:88:ff:
         20:d5:ec:b5:82:df:df:25:7d:0f:2a:e5:92:7a:b9:7d:b7:c7:
         a6:ed:a9:ec:cd:a3:ed:9f:41:57:2a:2b:71:42:29:2f:fe:4e:
         98:b4:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:17 2025 by rpki-client