Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File:                     0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier:          8cbES7ob4rXj50ZYq5QUqWe3gCD+VQyz9v+m/DJKxOI=
Subject key identifier:   E5:07:16:90:02:BB:2A:D6:CB:D3:D3:88:88:DA:88:1C:27:2D:1F:20
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer:       /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial:       01987A88AD4AEE03F38E218960907DD03058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 14:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:34 +0000
Files and hashes:         1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: yCwPmDpeYKpUYAoU5z8metpZsZ8f0ZGQjkhzFxynvoA=)
                          2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:ad:4a:ee:03:f3:8e:21:89:60:90:7d:d0:30:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
        Validity
            Not Before: Aug  5 14:00:34 2025 GMT
            Not After : Aug  6 14:00:34 2025 GMT
        Subject: CN=e507169002bb2ad6cbd3d38888da881c272d1f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:65:9a:b4:a3:ff:f6:2f:c8:bb:51:9d:ef:
                    2d:63:6d:f0:d1:88:89:43:dd:e8:1b:8a:24:94:ad:
                    c7:54:9c:14:ed:02:11:59:2f:25:1c:6f:f5:5d:37:
                    29:40:0d:af:b7:c1:a0:1a:16:81:c3:d5:9d:4c:b9:
                    e2:c5:b8:9b:62:5c:97:14:60:4b:ee:21:3b:be:69:
                    2c:58:53:fe:7b:4d:72:c9:90:49:ad:ee:3f:6c:f6:
                    38:2f:fc:18:f0:d3:3a:d6:3b:c6:aa:43:cd:34:21:
                    eb:8c:ae:3a:d3:99:38:db:6d:38:0b:c1:bc:10:a7:
                    af:f4:a3:d7:28:15:fb:92:ce:f0:74:42:7d:af:3e:
                    63:26:8f:a7:1b:eb:73:11:3e:ab:22:a0:44:69:e5:
                    dc:f7:c9:02:1c:4c:e1:48:ff:83:29:fa:ed:25:e0:
                    69:f7:9f:2f:78:77:c1:88:a2:96:f5:5d:5b:31:ae:
                    42:79:98:60:ac:ae:35:51:d1:c1:8d:9d:72:ad:46:
                    00:e1:10:f5:69:14:bc:be:34:5c:46:bc:e3:b5:e0:
                    ec:65:24:d6:3e:1a:79:4a:ce:e9:87:ac:0d:18:94:
                    3d:58:68:a0:e8:04:a0:34:10:c3:f2:7f:61:4b:6c:
                    40:3a:76:7b:c7:70:6c:46:a2:21:a5:0b:e7:07:4b:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:07:16:90:02:BB:2A:D6:CB:D3:D3:88:88:DA:88:1C:27:2D:1F:20
            X509v3 Authority Key Identifier:
                keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:ce:6e:f6:44:5d:6a:ad:e7:e6:a6:5a:ac:ea:06:36:52:
         e4:e7:57:0c:87:92:b7:13:eb:3a:5d:9e:91:c3:6d:5b:1d:e5:
         65:e5:14:6e:46:6d:b9:0b:06:1c:9b:ec:0c:86:b2:37:35:c8:
         03:3d:db:36:2e:51:e7:01:6e:aa:94:90:52:ac:01:3e:46:ff:
         ba:36:56:44:4d:83:38:54:17:b9:c7:5a:17:ed:3d:51:b8:9f:
         21:17:30:39:87:7c:11:0e:02:09:bd:da:76:40:b5:85:32:c6:
         16:49:71:b0:ba:e6:f7:e6:ac:e3:4c:22:68:69:53:a2:b5:9c:
         f4:f7:36:b3:b1:d7:50:31:50:cf:18:7d:05:61:30:8c:d2:c9:
         01:33:70:dc:85:f4:de:97:4c:be:6e:a8:77:6e:0a:40:ff:e6:
         b6:33:db:46:04:06:0d:98:7c:10:61:2d:de:90:10:f5:19:f6:
         6b:1d:e2:e0:67:d2:f9:84:02:25:95:b3:b7:a6:d1:c2:2c:76:
         2a:eb:de:f9:74:35:d6:8e:fb:87:e7:53:d2:9b:06:4f:75:1a:
         21:94:7e:1b:39:b2:68:b0:f6:5b:b4:a7:aa:5a:19:87:cb:17:
         4b:a9:f7:36:de:3e:ce:cc:0d:d5:15:67:ff:f3:eb:c2:b8:05:
         4f:b5:6f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iK1K7gPzjiGJYJB90DBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0MGVmMzQwNjY0NzE1YzhjMmNmYTUwZTNkNjFiYTI4
NmUwMzcwHhcNMjUwODA1MTQwMDM0WhcNMjUwODA2MTQwMDM0WjAzMTEwLwYDVQQD
EyhlNTA3MTY5MDAyYmIyYWQ2Y2JkM2QzODg4OGRhODgxYzI3MmQxZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EZlmrSj//YvyLtRne8tY23w0YiJ
Q93oG4oklK3HVJwU7QIRWS8lHG/1XTcpQA2vt8GgGhaBw9WdTLnixbibYlyXFGBL
7iE7vmksWFP+e01yyZBJre4/bPY4L/wY8NM61jvGqkPNNCHrjK4605k42204C8G8
EKev9KPXKBX7ks7wdEJ9rz5jJo+nG+tzET6rIqBEaeXc98kCHEzhSP+DKfrtJeBp
958veHfBiKKW9V1bMa5CeZhgrK41UdHBjZ1yrUYA4RD1aRS8vjRcRrzjteDsZSTW
Php5Ss7ph6wNGJQ9WGig6ASgNBDD8n9hS2xAOnZ7x3BsRqIhpQvnB0sVyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUHFpACuyrWy9PTiIjaiBwnLR8gMB8GA1UdIwQY
MBaAFNC9QO80BmRxXIws+lDj1huihuA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEt
MmNkMDliNTc3MDY2LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEtMmNkMDliNTc3MDY2
LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa23ObvZE
XWqt5+amWqzqBjZS5OdXDIeStxPrOl2ekcNtWx3lZeUUbkZtuQsGHJvsDIayNzXI
Az3bNi5R5wFuqpSQUqwBPkb/ujZWRE2DOFQXucdaF+09UbifIRcwOYd8EQ4CCb3a
dkC1hTLGFklxsLrm9+as40wiaGlTorWc9Pc2s7HXUDFQzxh9BWEwjNLJATNw3IX0
3pdMvm6od24KQP/mtjPbRgQGDZh8EGEt3pAQ9Rn2ax3i4GfS+YQCJZWzt6bRwix2
Kuve+XQ11o77h+dT0psGT3UaIZR+GzmyaLD2W7SnqloZh8sXS6n3Nt4+zswN1RVn
//PrwrgFT7Vveg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:02 2025 by rpki-client