Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File:                     1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier:          ovmtjSOyy0OSYs2clvRJ+5BZayjxSYryOYolcMAvbKQ=
Subject key identifier:   70:95:CC:8D:8F:A5:D7:DF:CC:C0:E8:35:B5:68:A9:E5:02:64:B9:23
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer:       /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial:       01987FE6758FC548DF061F9B9FBB77872817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 15:01:06 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:06 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:06 +0000
Files and hashes:         1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: PMmx8t7uo+uqyvZLwBWGzPQPTGCapvcO3k98DrfkKD8=)
                          2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
                          3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:75:8f:c5:48:df:06:1f:9b:9f:bb:77:87:28:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
        Validity
            Not Before: Aug  6 15:01:06 2025 GMT
            Not After : Aug  7 15:01:06 2025 GMT
        Subject: CN=7095cc8d8fa5d7dfccc0e835b568a9e50264b923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:f0:f6:9c:67:0c:09:d8:c4:77:7f:ce:f4:
                    51:be:0b:7d:1a:70:de:ce:f0:8c:7a:0c:b3:4a:11:
                    9d:56:23:2d:dd:a5:b9:c6:08:a2:f9:86:b4:ef:f4:
                    10:83:2d:46:ed:bb:af:53:b9:b7:13:fb:f3:97:34:
                    86:98:72:8c:89:4d:83:e0:71:09:43:83:84:2d:c7:
                    e8:b0:a2:a7:fa:a0:b8:06:f6:90:f6:63:9a:49:4f:
                    e1:1b:3f:71:c6:07:b8:ac:35:f5:b1:db:d9:c0:6d:
                    be:0a:f8:7f:fb:6f:ae:a0:4c:ba:4b:ac:ae:36:a1:
                    33:ee:0f:64:06:77:62:5d:0f:51:43:26:88:ba:13:
                    68:b4:c3:18:fe:5a:e0:48:fc:e4:71:2e:5d:bd:ee:
                    04:ef:ce:8d:f7:5a:08:88:47:ce:d8:ff:73:5b:18:
                    97:a7:0f:73:15:01:55:85:7b:44:e4:7c:38:35:70:
                    db:2c:74:8d:b6:de:99:c7:74:28:af:f2:1a:ac:8b:
                    fc:e2:5a:6e:1e:32:d7:ab:c6:12:96:f1:5c:ff:b8:
                    0e:d2:64:f2:c8:0e:0d:3e:b1:d1:ff:73:64:78:87:
                    da:da:92:82:e3:fb:95:90:40:c2:ee:16:7d:f2:81:
                    fe:93:d3:c2:ee:03:06:ab:15:72:c6:ab:58:70:4a:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:95:CC:8D:8F:A5:D7:DF:CC:C0:E8:35:B5:68:A9:E5:02:64:B9:23
            X509v3 Authority Key Identifier:
                keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:c6:d6:a7:5d:b5:b4:16:53:ca:62:bf:89:6d:85:89:f2:
         88:a5:22:a1:33:33:17:e6:db:d8:87:ab:ab:bd:91:30:9c:a8:
         29:f1:0f:c5:76:fb:f6:01:e4:72:4c:64:44:26:70:06:bd:de:
         c0:df:b2:75:71:54:a8:48:61:88:03:15:48:b9:34:61:5b:8c:
         b0:7a:99:71:1b:7b:e5:c8:45:e1:07:30:34:79:e6:f0:6f:05:
         4f:79:63:cf:42:e1:88:3f:da:64:3f:b6:d4:f5:4b:a9:5b:30:
         90:94:f0:80:19:a8:ae:4d:9a:95:68:71:a7:98:57:e9:7f:03:
         e1:59:9f:80:87:af:f9:2f:d6:c4:0b:5c:69:f9:9c:bb:e4:b4:
         13:c5:95:19:1a:18:18:b2:d9:12:8c:46:91:b1:c8:82:19:1c:
         fc:f6:ec:47:e4:36:87:2b:58:28:b3:fe:44:7c:11:66:df:86:
         9e:2c:44:f1:98:81:33:36:7c:8b:56:2f:b6:5b:8f:61:8e:74:
         3c:03:84:65:c2:01:98:bd:71:14:40:e6:18:46:1f:0c:8b:d6:
         ab:18:1b:87:68:0a:76:38:49:5c:c0:17:e5:9d:8a:4f:5a:92:
         ad:06:0b:dc:f6:82:1b:f5:c8:36:ab:99:f9:48:a0:96:8f:c1:
         04:79:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:34 2025 by rpki-client