Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File:                     29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier:          YzTeI0MK2r/OutIMHZIvGamRLDwfRwS/CI8op2s5CI4=
Subject key identifier:   90:6C:C7:E8:0B:2F:E0:06:99:29:D7:21:A8:B6:B1:E3:CB:3D:12:F6
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer:       /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial:       01987ABFBDA5DB06F203C3A48E7EB75552EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number:          161F
Signing time:             Tue 05 Aug 2025 15:00:42 +0000
Manifest this update:     Tue 05 Aug 2025 15:00:42 +0000
Manifest next update:     Wed 06 Aug 2025 15:00:42 +0000
Files and hashes:         1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 8AQVmeG1tBCcWwGWa418PcwrjVq45W9ZIVnNYpBLwsI=)
                          2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
                          3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
                          4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:bf:bd:a5:db:06:f2:03:c3:a4:8e:7e:b7:55:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: Aug  5 15:00:42 2025 GMT
            Not After : Aug  6 15:00:42 2025 GMT
        Subject: CN=906cc7e80b2fe0069929d721a8b6b1e3cb3d12f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:c1:d1:22:d2:b6:d5:96:2e:fc:e2:8c:48:
                    1d:96:1b:cd:f7:ff:7b:1d:60:73:e5:81:d5:29:a4:
                    a4:6b:df:6f:56:12:11:b6:4a:58:dc:16:19:4f:f0:
                    af:19:7f:49:83:0d:b9:95:64:46:5b:b3:a8:5a:db:
                    cc:b7:e4:8c:de:08:4b:7b:36:60:87:28:fa:f4:e1:
                    e0:3b:82:e4:af:83:78:0d:f6:b8:cd:c8:65:82:b1:
                    45:12:6b:66:a1:43:27:ae:47:fb:a4:d7:79:ed:8a:
                    8e:b4:e7:17:7c:d1:b4:7a:fd:de:99:77:40:de:1f:
                    9a:83:f6:ef:c2:03:ae:f3:7a:68:b0:f2:79:c2:9f:
                    56:92:de:ce:0a:47:2e:1d:39:3e:ab:d0:cc:8d:38:
                    41:44:7a:6b:47:5f:5a:8a:b6:79:9a:f6:a1:d9:d9:
                    55:7e:fa:22:a3:ba:0c:2b:f8:de:17:41:6a:25:ee:
                    a4:3a:64:76:59:ab:cb:7e:79:14:b0:37:53:63:42:
                    04:08:e9:52:f6:59:bf:83:6b:86:a5:db:03:08:4f:
                    83:af:32:39:26:47:ad:fe:82:56:74:e8:af:44:06:
                    cc:7c:56:05:9a:0d:3e:e2:8b:02:8c:4a:db:7e:12:
                    05:e7:2a:9f:25:0b:2e:94:90:54:40:ba:e0:b9:7c:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:C7:E8:0B:2F:E0:06:99:29:D7:21:A8:B6:B1:E3:CB:3D:12:F6
            X509v3 Authority Key Identifier:
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:aa:0c:23:6b:35:17:fe:33:fc:be:8a:6c:0d:ff:1f:1a:
         8d:dc:bb:8c:fd:4a:b4:a2:58:84:d9:96:60:79:1b:5b:14:78:
         7c:15:29:f9:96:93:c0:f5:50:e4:70:fc:17:2b:97:83:4e:0f:
         dc:e3:04:aa:24:fd:5b:48:f2:40:72:e0:b9:39:0e:d9:ca:ff:
         30:f0:a3:e0:c2:87:7d:2b:e8:c4:b9:e6:cb:76:70:a8:5d:8d:
         62:a7:78:46:d5:5e:7e:a6:d1:ce:26:4b:23:e1:c7:c5:a2:66:
         e8:42:b0:d6:8e:71:75:26:f1:50:f7:51:2a:5b:4f:fc:a0:b9:
         1d:ff:9d:29:27:d4:36:28:e3:02:98:ea:59:b4:25:2b:32:7b:
         9a:e6:90:51:d9:0d:0b:8f:1f:6b:65:67:b1:fe:ff:44:b1:0c:
         78:c9:65:50:76:23:1e:0a:aa:73:4b:60:53:f8:55:c5:08:5c:
         a5:11:e6:48:80:b7:73:53:73:2f:5d:5a:e4:c9:63:56:f6:db:
         f7:a6:6a:16:8c:1e:7c:40:4a:2e:f7:84:18:12:c2:0c:de:bd:
         6a:44:6f:6d:2a:97:62:7b:2c:44:a3:7a:3c:5d:c4:42:46:02:
         52:a5:89:26:87:33:c0:dc:76:e1:e8:3e:6f:98:d4:38:7e:78:
         23:d3:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:49 2025 by rpki-client