Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          9ADT19RLBDQkWnncYPGmiGvJZtQQE78GFizeTA5PA5g=
Subject key identifier:   A6:09:B4:DC:93:35:6C:96:C8:F7:19:40:97:81:5F:E1:6B:81:9E:14
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       019873E39FB884FBD41CA68A26448360D8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 07:02:34 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:34 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:34 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: ui7jRlPGZ9KAT/H4ZD/nl0VTovMlOPe+B1qzDRNpL58=)
                          2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
                          3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
                          4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
                          5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:9f:b8:84:fb:d4:1c:a6:8a:26:44:83:60:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Aug  4 07:02:34 2025 GMT
            Not After : Aug  5 07:02:34 2025 GMT
        Subject: CN=a609b4dc93356c96c8f7194097815fe16b819e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:b4:75:df:5e:0d:7c:ef:1b:91:c8:8e:a1:
                    5b:5e:37:52:86:19:50:65:e7:47:7a:3b:c1:fc:7d:
                    35:a4:af:5b:d5:1b:6d:b7:89:38:6d:a1:71:d6:7b:
                    2f:4f:aa:1d:cc:6d:ac:0e:a2:ee:c4:97:05:cb:7f:
                    75:42:dc:a6:90:cd:47:dc:5c:9e:63:37:10:16:d0:
                    9e:5f:f8:dd:01:54:2b:d6:2d:eb:16:b0:d7:85:37:
                    fc:36:91:76:e1:ac:fc:31:91:cd:6c:f2:19:dc:4e:
                    d7:77:83:60:fa:81:c7:2b:fe:88:c2:c5:87:c6:82:
                    95:e6:ea:3a:4b:9f:c5:33:08:0c:fb:ad:5d:02:9e:
                    42:1d:51:10:35:e4:79:fc:ad:e3:5e:23:af:9a:e6:
                    1a:95:76:74:33:73:d3:63:e4:5b:76:bc:ca:a4:e7:
                    09:af:90:2d:18:75:fe:63:dc:2c:7d:33:3e:c7:f3:
                    fa:a7:c8:eb:0f:60:93:c6:35:b4:09:56:a6:14:8a:
                    10:71:41:88:56:1b:37:21:ad:88:17:6f:1f:d8:ca:
                    70:a7:cf:28:7c:c7:cf:ca:6d:2e:6e:6b:ed:78:0a:
                    36:90:91:ac:aa:12:76:32:b6:37:eb:4c:20:35:8a:
                    0c:f6:db:36:68:67:21:5d:19:da:29:e5:1b:c9:02:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:09:B4:DC:93:35:6C:96:C8:F7:19:40:97:81:5F:E1:6B:81:9E:14
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:18:7e:43:b3:13:6e:35:f7:d8:f2:93:a0:a2:f8:5f:d2:84:
         5f:0b:2e:ab:1f:bb:ca:48:c2:7d:5c:91:c6:a9:bd:3a:17:25:
         7c:fc:a2:d4:c3:99:d1:10:2d:d0:9c:88:a1:6d:5e:11:c8:44:
         63:ea:67:fb:e0:30:bf:48:5c:7d:83:06:21:a4:b0:0a:6f:2d:
         87:d8:33:3e:6f:fc:07:67:49:19:c9:7d:ba:52:f4:e0:52:67:
         16:f9:75:20:ae:da:b5:9c:2a:d4:a5:36:64:eb:1d:d1:58:ef:
         c7:ff:c3:36:06:8c:30:dc:05:db:b9:13:22:db:17:eb:78:5c:
         bc:de:28:9d:95:c2:b2:33:12:a2:a6:05:ff:27:30:34:40:e6:
         09:99:db:ba:58:b4:14:98:48:68:ed:1b:0b:29:12:d4:75:4a:
         47:e7:d4:d1:cf:a2:23:05:11:7a:c6:13:46:ce:3e:97:1c:57:
         39:a0:e5:23:03:50:64:36:e2:bc:a4:f0:f1:44:78:62:db:99:
         b7:ac:50:6c:50:34:2c:fe:69:01:8d:c4:35:56:6c:d5:08:b2:
         87:3f:14:4d:59:5f:08:40:2f:4b:83:c4:fa:63:64:34:e5:a1:
         c7:02:3b:28:3f:74:61:e6:6c:16:3c:c1:93:71:82:c6:e1:71:
         1d:f0:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:19 2025 by rpki-client