Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          fjk2FEK5WR8MeGkM5fWcSVffAoFhyIE0Me9h2VgM9/g=
Subject key identifier:   CE:75:35:DB:C7:93:4E:D2:25:22:C6:84:C3:90:F9:92:0E:DA:63:90
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       019880F8ED7424D56CC84C51C2C6E4334C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 20:00:53 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:53 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:53 +0000
Files and hashes:         1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: 43ptnejQ1basM4nSOmQ6U0VrGWvgrAruVHO1UrjdOqU=)
                          3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:ed:74:24:d5:6c:c8:4c:51:c2:c6:e4:33:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Aug  6 20:00:53 2025 GMT
            Not After : Aug  7 20:00:53 2025 GMT
        Subject: CN=ce7535dbc7934ed22522c684c390f9920eda6390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:1c:af:be:1b:67:d4:8e:cd:b4:9a:83:4b:
                    fd:df:4d:89:76:38:ab:45:79:a5:de:55:cd:74:5f:
                    c3:84:83:32:c8:41:76:7d:60:0e:e0:a5:3c:76:0f:
                    09:34:7b:b8:97:4b:68:8f:e7:14:9f:95:c0:ab:3d:
                    d4:99:bf:05:63:21:69:1e:d1:84:5b:ce:6e:f2:0d:
                    7c:2b:f6:34:c4:77:c8:26:25:e7:25:8d:80:c4:94:
                    e4:8a:90:ae:97:b5:c1:6d:71:ee:b0:93:6c:be:50:
                    71:6f:7b:76:f2:54:f6:f9:b1:69:1d:ea:b7:3f:1e:
                    ea:9f:e7:04:b7:c7:7d:da:40:f9:bf:52:2b:97:a6:
                    26:ee:b9:cb:2d:cc:7d:7c:7e:5d:27:62:65:51:bc:
                    36:5f:cf:64:f3:60:7f:e0:cf:62:b5:a5:38:70:d2:
                    6f:c9:13:a6:a5:bf:bb:96:2a:92:1b:28:5c:1e:1b:
                    d3:04:bf:c0:e4:98:49:da:9a:1e:0a:b9:84:7c:db:
                    36:01:a5:01:dc:80:98:6e:78:06:49:a8:da:f3:a5:
                    61:3c:92:a2:25:71:d1:4f:fe:c1:59:70:0d:0e:f6:
                    0b:b6:64:b6:0f:c3:c4:0a:b5:83:cc:cb:4e:09:bb:
                    7f:31:cd:fd:cf:ae:85:0a:27:56:d3:30:e2:65:51:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:75:35:DB:C7:93:4E:D2:25:22:C6:84:C3:90:F9:92:0E:DA:63:90
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:08:66:df:4b:c8:b4:eb:e5:48:c0:18:be:d3:99:0b:c4:
         3d:94:6a:77:7a:70:c4:21:fc:0e:55:06:48:d0:8b:81:18:b7:
         3d:6c:ce:e3:bd:86:1c:f9:c7:19:f8:b2:75:4f:cb:14:1a:7b:
         fe:bf:4c:9e:9c:02:be:ce:96:7a:79:4b:62:26:77:35:06:dc:
         71:c0:ff:95:44:e2:bd:9c:2b:85:e0:36:f7:0c:1b:cf:97:9b:
         bb:e8:68:be:00:36:fd:15:a3:a6:04:5a:21:d7:94:91:3f:34:
         20:a5:b5:ca:0f:3a:68:48:79:65:fa:b1:bd:f4:dc:19:5d:2d:
         97:7a:e5:7b:1d:49:0b:f9:59:fa:dd:d7:19:82:1b:02:da:7e:
         46:e1:14:7d:24:b7:58:c0:61:af:40:2a:ef:cb:33:5c:9b:c6:
         30:b4:53:76:c0:08:b4:f8:9e:68:3d:8c:fb:25:65:52:cc:37:
         42:fc:3a:cd:85:a5:c7:71:6b:f7:5d:ba:16:9b:3c:db:e9:b4:
         57:6f:c5:a6:dc:67:dd:c8:51:a3:39:ba:c6:fb:b8:2b:03:ed:
         16:3c:1a:33:2f:e5:b6:51:ce:e5:df:ae:34:21:f9:17:fd:63:
         26:c6:d4:c6:5d:a1:f7:90:09:05:00:44:af:4e:86:c0:78:77:
         b4:33:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:30 2025 by rpki-client