Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File:                     fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier:          te9ijtmyK8h/FAbuQlxeHOfkIyLauJ4jg2YUWL1b3es=
Subject key identifier:   36:B7:CD:FB:5B:68:C4:12:96:3B:57:80:7B:65:8E:F6:6B:CD:29:A0
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer:       /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial:       01987FE6583A038B3865136885D82EA54459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 15:00:58 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:58 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:58 +0000
Files and hashes:         1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: R22opSmrtE+aZ3f+UUfk7bic5SOGWAtkwc9oqjdQic0=)
                          2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:58:3a:03:8b:38:65:13:68:85:d8:2e:a5:44:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
        Validity
            Not Before: Aug  6 15:00:58 2025 GMT
            Not After : Aug  7 15:00:58 2025 GMT
        Subject: CN=36b7cdfb5b68c412963b57807b658ef66bcd29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:ec:43:d4:57:83:df:1f:ae:b2:71:40:57:
                    a2:e8:bf:db:b2:7b:56:90:65:1e:65:29:34:94:ec:
                    73:5c:ce:73:6b:d6:c7:aa:17:e9:e0:41:7c:2b:ea:
                    5a:b5:5d:5e:de:8e:2b:e9:1e:0b:5f:79:76:d3:e8:
                    0e:32:bd:1e:0f:ef:e4:be:78:26:ac:ff:f2:53:fa:
                    ac:b2:0d:df:b9:63:ca:33:0b:aa:d0:01:a6:f3:01:
                    05:fa:6e:1d:90:f9:2d:b2:e9:d2:c7:a1:a4:fe:77:
                    33:73:65:ad:2c:16:6c:6b:98:60:42:79:b9:ff:2f:
                    db:1c:5b:34:68:3d:d5:0a:d8:b3:a7:e1:af:bb:11:
                    52:25:bd:3f:d2:e4:cf:2d:a9:21:b5:6e:cf:6a:c0:
                    9e:ab:b2:b1:be:12:9b:21:a5:b7:b3:8f:3b:e6:52:
                    ca:49:be:16:30:5a:61:77:72:14:9b:09:98:e4:ba:
                    33:8d:cf:5d:ed:4f:5b:82:6f:f1:2d:9e:8b:08:1b:
                    5d:c3:9b:1b:29:fe:9e:27:ad:32:1c:ed:f7:eb:a8:
                    49:f3:e4:95:f1:b2:bd:95:35:7d:87:dd:18:f1:5e:
                    7e:72:a8:b7:10:37:d0:fc:e6:7b:e0:4f:bd:81:aa:
                    93:6e:d0:39:4f:07:37:6a:7d:58:1f:8a:cd:d1:0b:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:CD:FB:5B:68:C4:12:96:3B:57:80:7B:65:8E:F6:6B:CD:29:A0
            X509v3 Authority Key Identifier:
                keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:49:e1:65:a6:c2:0b:60:57:cc:54:15:aa:0a:b4:48:41:7e:
         51:91:56:29:b8:4a:4f:aa:51:0d:03:6b:bc:6b:0b:16:2d:4e:
         01:bf:6b:19:db:b4:6b:51:69:b7:f8:ec:01:26:0c:b0:d2:27:
         44:0f:9f:a3:c1:c5:ce:95:70:f6:24:19:07:89:d1:7a:b6:ee:
         40:0d:05:c9:10:09:d3:51:12:a4:f9:55:af:4b:36:6d:cc:60:
         6c:ff:95:71:ab:7d:3a:24:19:52:c1:37:72:8d:40:0e:4b:55:
         a4:2e:1f:0b:2a:54:a0:b7:94:0a:f1:97:1e:3f:01:9c:e1:86:
         33:69:e3:ec:85:ec:f5:55:43:30:c4:44:ab:f1:36:a2:f3:69:
         a2:51:05:41:41:45:47:88:18:d3:65:c7:4b:a2:e0:c6:fa:2e:
         0f:d1:a4:bd:9c:d4:43:6a:58:ca:0d:c8:4b:54:3c:21:37:0e:
         c0:b7:dd:6c:c6:60:13:a3:98:f5:0e:75:c5:66:56:d7:e5:45:
         3e:77:e4:e0:06:fa:03:19:35:0b:dd:71:e5:da:3a:b8:ac:7b:
         4d:a8:01:ac:5c:7e:1f:d1:91:3f:2c:6b:a6:b6:19:3d:ea:a2:
         41:bd:7e:3b:79:4e:70:67:19:45:9b:e4:e3:59:14:6c:99:ab:
         2f:36:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:49 2025 by rpki-client