Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File:                     AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier:          5oPFRwVwRrSNKrFVZ4s+WKy0yrXuQcB0CsZi+cRXjvQ=
Subject key identifier:   D3:7D:1C:BB:7A:D4:95:1E:3A:2E:F0:E3:69:57:8A:1B:10:A0:7B:5B
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer:       /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial:       01987B9D52C38FDD6AB4787A76BE838B4457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 19:02:44 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:44 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:44 +0000
Files and hashes:         1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
                          2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: o4DkmZrq1+3+rzxMLrcm6Ep2wWPh7o0HlSaO5WmJxxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:52:c3:8f:dd:6a:b4:78:7a:76:be:83:8b:44:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
        Validity
            Not Before: Aug  5 19:02:44 2025 GMT
            Not After : Aug  6 19:02:44 2025 GMT
        Subject: CN=d37d1cbb7ad4951e3a2ef0e369578a1b10a07b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:a3:55:92:0c:2a:1a:41:86:37:16:07:2a:
                    cf:1e:be:1d:08:c6:65:fd:f0:1f:aa:a9:e2:39:af:
                    fa:34:85:1d:31:ac:bf:40:7b:cb:b7:f6:91:f6:30:
                    e4:3e:a0:05:0f:ee:16:49:20:28:59:76:41:52:96:
                    20:fd:97:f7:64:fe:68:7d:b5:a4:d5:bf:83:9a:d4:
                    f5:58:db:26:0f:b1:61:b6:ae:68:9f:07:81:a5:28:
                    52:ab:9e:be:db:17:4d:b7:d2:c9:b5:21:a5:8f:5a:
                    9f:70:a5:50:fb:a2:39:34:15:f3:70:2e:61:6c:17:
                    00:49:46:c4:06:34:a7:3f:c6:07:d0:1c:3c:27:03:
                    e5:d5:f1:0c:e8:e7:3a:ab:ce:17:3a:bf:cb:bc:5f:
                    6e:bc:f6:e5:7f:a9:4e:10:d4:4b:a9:d9:2a:95:e0:
                    fc:a5:4d:1c:b4:ae:10:af:74:25:10:6d:cb:f1:3a:
                    bc:4d:37:00:6e:2e:62:c9:b9:45:8b:21:b1:e7:60:
                    de:29:b2:00:02:fb:d4:d8:5b:fa:86:6f:58:07:77:
                    2e:25:2c:0d:1e:34:a2:60:f3:53:6d:5f:e4:34:a7:
                    51:a8:c1:a7:0f:f5:d9:9a:db:a4:13:92:1e:89:4d:
                    bb:27:19:3c:46:a2:f9:e5:de:ff:ce:14:a9:4c:d2:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7D:1C:BB:7A:D4:95:1E:3A:2E:F0:E3:69:57:8A:1B:10:A0:7B:5B
            X509v3 Authority Key Identifier:
                keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:47:fa:cc:03:24:5a:37:c7:3d:14:bc:4a:1a:93:e3:41:b7:
         db:47:ba:f6:3c:f8:34:5a:9b:f8:f3:6c:e6:9b:c9:04:81:b3:
         fb:8b:1b:99:9f:80:8a:84:83:29:42:4e:05:c1:e1:2a:af:43:
         63:9e:a9:49:8f:fa:5a:ef:2d:93:a5:d0:eb:dd:39:ef:e0:33:
         89:21:3c:c4:f1:07:91:ed:35:45:56:f3:08:13:cf:b2:6f:58:
         35:a0:a3:d7:d3:17:8d:98:94:dc:4c:e7:ba:7a:a9:1c:9f:e9:
         33:51:8d:05:b0:b7:34:dc:7c:ca:b4:1e:14:90:18:b5:37:a4:
         bf:7c:8d:3d:e6:c4:e1:b3:43:ec:73:14:68:a0:e6:4d:89:e2:
         42:18:64:f5:86:d6:94:d0:9d:cc:9f:c5:41:f5:1a:b3:dd:e8:
         b8:b3:6c:af:35:99:75:70:0e:80:37:12:b7:9d:9b:98:ae:4e:
         34:f0:ff:5b:b2:9c:17:69:67:e7:31:5f:cc:2c:c3:70:46:90:
         4b:38:3e:50:d4:d6:9d:82:23:90:8c:a6:d0:cb:9b:a1:54:e6:
         f0:e3:db:95:cf:6c:3b:14:84:87:6a:95:4d:94:10:69:0e:0a:
         6a:7a:5a:79:51:c6:3f:9c:72:4d:7f:a5:ba:a1:91:b8:aa:96:
         c4:5a:32:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:11 2025 by rpki-client