Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          ED3C5bYoiPj19HEil48NK3jt+3w8NMKBqpyPmA01fmI=
Subject key identifier:   6A:97:92:93:E2:50:6B:FA:DF:AE:C9:5A:17:7E:6B:89:1F:4D:9E:BB
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019A4E86C855439A4C7326404141A4C0658A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          161C
Signing time:             Tue 04 Nov 2025 11:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:47 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: TwMljgIj5hIM3dUD9rPSz5wK1sY2oHR2kYhczNS9NSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:c8:55:43:9a:4c:73:26:40:41:41:a4:c0:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Nov  4 11:00:47 2025 GMT
            Not After : Nov  5 11:00:47 2025 GMT
        Subject: CN=6a979293e2506bfadfaec95a177e6b891f4d9ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:05:79:42:88:09:07:54:37:db:c3:48:14:
                    b7:a2:24:45:3b:9f:71:b8:3e:1b:fc:ff:ef:7d:3d:
                    f9:1c:7e:02:95:86:01:00:34:83:07:30:f2:1b:f7:
                    a6:cf:a3:b8:6e:b4:0f:4f:85:ee:5d:0b:ee:4a:4c:
                    13:a6:34:68:d4:8a:52:7f:65:a4:dd:98:5d:c6:24:
                    ba:8c:aa:76:6d:40:95:14:82:d9:7e:fa:dd:58:e6:
                    b9:52:47:49:a4:ea:39:bf:2a:4f:f8:48:69:8f:15:
                    9f:b0:4e:f0:5e:1a:80:a9:1e:dc:79:45:b9:59:ff:
                    33:d0:ec:33:35:42:05:f7:fe:a3:3f:8f:e9:cb:9c:
                    c0:c4:47:a1:b3:e3:93:30:0c:25:f7:cb:12:ef:e8:
                    cb:be:89:7c:94:3e:c2:8e:67:cf:6f:e2:3c:c7:cb:
                    b8:01:e6:50:24:c5:3c:ed:a1:a3:9a:8f:66:97:56:
                    65:33:53:d1:1c:6b:25:41:46:24:5b:8d:e7:22:1e:
                    2b:10:9c:7c:47:13:1c:00:48:0a:96:90:34:5a:75:
                    84:74:85:ac:4b:ae:10:3a:ad:48:aa:b3:0f:d5:f8:
                    4c:65:65:f7:4f:2e:52:8e:6e:5a:51:ac:31:f2:4c:
                    79:dc:8c:bd:94:14:d2:c7:71:fb:4b:3a:ac:f9:a1:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:92:93:E2:50:6B:FA:DF:AE:C9:5A:17:7E:6B:89:1F:4D:9E:BB
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:52:a3:97:e9:eb:10:4c:78:96:44:c2:1c:55:b2:27:36:ea:
         d2:97:c2:a8:d7:35:89:ea:c0:43:ed:a9:f3:11:4f:72:09:80:
         69:c4:67:50:35:21:fa:a2:57:21:96:99:c5:aa:8d:be:f4:c1:
         fc:a9:58:04:2f:74:9b:69:1c:af:e5:2b:61:d4:96:57:6c:c8:
         87:59:96:b8:98:96:7e:df:41:f0:65:4e:25:01:92:a9:fa:09:
         1f:2f:52:f7:cd:55:04:e2:8c:eb:a6:fa:50:c5:90:c7:2d:95:
         f4:68:d7:d5:bf:94:74:b3:10:e6:af:85:4a:f5:0b:ed:56:bf:
         5d:fa:6f:f1:f8:75:c7:82:87:7b:5c:ce:a5:05:6a:5f:d9:06:
         f3:18:f5:04:25:09:6f:17:77:7c:23:d9:4c:f4:8f:29:1e:7a:
         08:a8:c5:ef:ac:80:fd:f1:f4:ec:4b:f8:62:a9:1e:88:2a:53:
         a7:cc:ff:08:7c:4e:b7:f8:0d:57:ae:74:72:33:91:ba:f2:91:
         78:ed:53:53:3b:08:c6:b1:71:c0:92:17:37:d0:79:48:dc:87:
         0a:70:3b:5a:6f:3a:81:11:0d:27:04:ba:90:ce:c6:a2:ee:d0:
         69:2d:a0:68:fa:99:8e:cc:e4:23:b9:af:64:a2:be:bb:18:8f:
         64:23:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:36 2025 by rpki-client