Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          rDif16ZyTyiv9meMnjlEaiwjXg7P5MhceJj3TMagW+c=
Subject key identifier:   56:61:C3:CE:10:25:6F:80:3E:76:E3:34:9A:09:80:D1:2B:9C:5C:39
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       01987B2DB81DAD85959B88576950F76661C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 17:00:50 +0000
Manifest this update:     Tue 05 Aug 2025 17:00:50 +0000
Manifest next update:     Wed 06 Aug 2025 17:00:50 +0000
Files and hashes:         1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: 3tdYVOOE27tpvDBBTI0VizrWvUnwVhBo7LRPMr3r0tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2d:b8:1d:ad:85:95:9b:88:57:69:50:f7:66:61:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Aug  5 17:00:50 2025 GMT
            Not After : Aug  6 17:00:50 2025 GMT
        Subject: CN=5661c3ce10256f803e76e3349a0980d12b9c5c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:21:29:06:14:d1:a4:12:e9:22:8a:79:22:d8:
                    1e:88:90:b4:53:ef:1c:e1:e6:53:08:7b:ee:e4:0e:
                    05:e9:4c:45:ab:02:42:92:6f:d1:d4:f8:7d:a8:07:
                    66:17:4c:44:7d:54:c9:9e:c2:d4:22:1a:86:05:90:
                    05:9a:07:c1:d0:73:bf:b4:ec:51:66:e6:b8:56:24:
                    0a:f2:e6:76:22:8e:ef:71:cf:13:e5:37:fc:7c:87:
                    05:51:0f:8c:1b:35:f0:fc:65:92:31:b5:9f:33:02:
                    62:ae:b8:1c:80:df:0a:1c:84:40:07:e5:2a:05:09:
                    8e:35:c4:5b:8a:99:52:12:52:5c:17:d1:c0:9e:25:
                    db:b1:0b:63:24:27:e2:df:1e:ce:e0:6e:ee:12:a6:
                    fc:1f:e8:b3:7b:5b:4c:74:4c:ad:ba:bd:98:75:56:
                    d8:f3:12:83:79:17:01:b1:8b:db:17:35:30:9f:cf:
                    03:19:d4:c8:b3:41:f5:37:f5:f8:7f:3e:21:69:75:
                    ba:7a:e9:2e:11:50:9f:e5:04:32:54:74:d8:c4:8c:
                    30:2e:9f:17:34:f2:e2:96:71:33:c7:7d:3b:db:4d:
                    5f:e1:db:29:33:42:08:f6:95:f3:c4:31:fb:92:0b:
                    31:6c:34:24:8d:83:25:97:fd:fb:78:6f:a4:7f:70:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:C3:CE:10:25:6F:80:3E:76:E3:34:9A:09:80:D1:2B:9C:5C:39
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:c7:6e:a2:9f:82:8f:1b:ec:25:12:93:47:b8:7f:00:8f:
         e9:f4:ee:fe:dc:9d:08:43:b1:e8:54:c7:df:d0:d7:55:05:77:
         33:b2:9a:95:23:77:c0:df:d5:0e:30:13:dc:dc:43:2c:78:d5:
         f5:78:e0:3b:bb:04:30:d9:01:13:e7:01:ba:d4:3f:2f:23:0e:
         41:ca:01:b4:28:32:83:1d:4f:a6:c3:4f:48:9c:35:6e:8a:82:
         b7:53:de:52:9f:f1:02:39:dc:0e:c6:75:90:52:7a:67:8f:98:
         57:e3:c4:3e:58:e1:ae:c9:9a:8e:20:9a:e5:81:53:8b:ec:ff:
         70:4d:16:35:e0:0f:9e:4d:8e:03:23:0d:3d:d0:3b:0c:85:38:
         51:99:e8:ba:19:ef:ed:2f:dd:01:56:69:44:15:e7:2d:e8:c3:
         40:1a:66:cf:dd:82:b3:c2:35:50:9b:49:c7:89:3b:59:6f:e9:
         00:eb:53:8d:43:49:2b:89:25:0b:ad:e6:5f:e7:6e:4c:bc:58:
         24:4d:ce:76:5e:20:ba:07:d4:a5:e3:57:61:b8:c5:75:8f:72:
         60:07:90:d4:6d:e6:51:6c:14:75:9e:61:8a:a4:8d:6f:a3:1b:
         01:28:7c:53:a3:11:fc:b9:b0:5f:15:f3:26:8f:1e:8c:99:c2:
         65:5b:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:51 2025 by rpki-client