Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          eMIK2i1mA9/CjdEz2wUUoqkR1YhV7BoHNVp4bZusctU=
Subject key identifier:   69:26:42:16:27:60:1F:A1:61:C4:FB:61:C7:EE:D3:F6:E3:17:35:84
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019879AF41AA7049F5BA55D8A21984CF3177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 10:03:05 +0000
Manifest this update:     Tue 05 Aug 2025 10:03:05 +0000
Manifest next update:     Wed 06 Aug 2025 10:03:05 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: P8ew90B6719lH0LelPAO5ISA+TsqHc40InwsRp8enPg=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:af:41:aa:70:49:f5:ba:55:d8:a2:19:84:cf:31:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Aug  5 10:03:05 2025 GMT
            Not After : Aug  6 10:03:05 2025 GMT
        Subject: CN=6926421627601fa161c4fb61c7eed3f6e3173584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:1c:33:2e:d9:84:f0:2c:68:44:77:09:9e:
                    0b:d3:71:8e:fb:2e:de:f4:5a:f3:e4:9f:ab:37:fe:
                    34:3f:3c:58:8b:a7:f0:c6:70:9c:ae:62:d6:d9:12:
                    4a:bc:d1:c4:ca:16:2a:09:4e:f2:b7:86:51:72:c7:
                    18:de:c0:8c:12:c9:e7:68:13:b4:71:1b:13:3f:38:
                    e4:83:ef:7a:1b:f5:a2:bc:79:d1:a9:bb:59:7a:94:
                    9a:7a:85:fb:b6:da:ba:55:08:5f:36:ee:67:f7:ef:
                    18:28:92:6d:c0:a0:4a:f9:f9:71:d6:52:ad:54:4a:
                    73:27:19:85:50:17:fd:f6:6d:32:39:c7:66:c1:4e:
                    27:35:0a:7b:c8:8f:35:0d:a1:7a:45:73:cc:8c:7b:
                    e6:a5:2b:ea:77:d3:e1:96:70:f7:49:a5:33:9c:1f:
                    d2:01:34:f1:dd:ed:9d:b7:76:70:b6:97:db:6b:09:
                    24:71:97:97:8c:5d:dd:d8:17:14:50:c5:2a:59:fc:
                    fa:71:09:91:ae:e0:f6:91:4b:ed:85:c3:37:45:5f:
                    ed:17:09:bd:fa:50:58:c8:ef:bc:54:6b:01:c9:b9:
                    62:db:89:f1:4b:c6:67:8f:d5:9d:a7:4e:7d:0f:1f:
                    87:2a:ab:42:c0:69:2c:09:08:a7:06:dd:d7:da:64:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:42:16:27:60:1F:A1:61:C4:FB:61:C7:EE:D3:F6:E3:17:35:84
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:fe:50:7a:0c:5d:b0:9a:8a:7f:dd:c2:47:21:75:26:8b:
         fd:ed:af:0a:bc:46:fb:61:4b:55:b9:ca:40:03:2d:f6:2d:e2:
         4c:f4:ce:7b:72:bf:3f:35:3b:27:c6:ba:6b:94:c2:77:de:a7:
         83:bc:d7:56:b4:ac:7f:6e:b4:d6:d9:59:42:71:05:08:33:ba:
         40:15:59:78:8c:24:43:b9:01:62:88:6d:f3:e8:be:ac:a4:67:
         41:ad:c9:39:03:bd:a3:7e:81:bf:5a:3a:2a:3d:82:09:11:3b:
         45:07:12:d0:f3:d6:63:7b:2e:b9:e7:d5:fd:01:14:95:5e:40:
         b7:1c:91:7a:92:ee:6d:3b:ab:b7:4a:57:8e:a8:97:f8:93:ec:
         d3:d3:cb:fa:b1:7c:2d:75:42:00:6d:db:68:aa:55:fd:37:fe:
         b0:90:f8:a0:43:90:18:91:82:7f:58:0e:18:81:b5:fd:62:25:
         da:cb:2d:af:55:63:ef:4b:66:48:3b:1d:c4:d7:6f:25:b5:06:
         53:1f:58:d4:c1:68:5b:1d:d2:99:c3:f6:15:68:ad:4e:3c:63:
         ad:2b:7d:38:89:03:37:e3:da:e7:1b:fa:ec:85:ad:e8:e6:b9:
         74:1e:ab:da:98:6e:44:12:cd:7a:05:88:fd:09:eb:a1:76:2d:
         86:56:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:51 2025 by rpki-client