Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File:                     7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier:          oKcfgLqWY1DXbQ0ONF0xJQ1uCuNpycVVR0PzNIWOqVU=
Subject key identifier:   A3:AE:7C:A4:65:4A:F6:70:23:61:00:E5:A0:43:CE:18:25:A8:77:60
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer:       /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial:       01987C0A488A9A85C0CA8B021ED025499958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 21:01:45 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:45 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:45 +0000
Files and hashes:         1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: Ru/WfjZPEUVjmdHB9zPrca8xkSEnzCEbUSGQYwCOM3A=)
                          2: 9MDvmaTaPs6Me-n4uVcmqKT8FSg.roa (hash: /pTREuez+n3EK0dILbgfWJ7sRgL4yIoJam7Lpsx5YvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:48:8a:9a:85:c0:ca:8b:02:1e:d0:25:49:99:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
        Validity
            Not Before: Aug  5 21:01:45 2025 GMT
            Not After : Aug  6 21:01:45 2025 GMT
        Subject: CN=a3ae7ca4654af670236100e5a043ce1825a87760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:74:22:9a:98:7e:d7:1c:c6:33:08:57:cb:
                    91:23:99:50:1e:4a:f3:c7:89:09:a9:89:19:01:92:
                    08:3c:69:1a:a4:14:32:24:62:02:ce:5d:46:c0:e4:
                    69:53:d9:aa:b1:b4:f0:77:d4:7c:e0:88:fa:a9:9b:
                    11:2d:67:47:50:dc:a2:b7:33:f9:12:ac:52:0a:39:
                    6f:c3:89:be:e9:f7:0d:7d:1e:bc:5f:18:cd:b5:f6:
                    07:ba:7c:4d:fc:16:89:93:f7:3f:5f:b1:95:12:83:
                    af:87:7a:ae:8a:01:2d:32:81:cf:a4:09:ce:48:b7:
                    9f:8c:04:0d:75:a9:08:61:44:f5:1e:13:83:04:60:
                    4c:a2:4b:55:90:c5:55:a8:3b:ba:e2:fa:18:25:55:
                    d4:dc:bc:c6:37:88:84:93:31:4c:fd:ee:8e:87:c4:
                    2f:37:00:31:fd:1b:b5:98:c4:50:72:eb:6d:9e:a2:
                    f5:6d:c8:a3:06:d7:6b:fd:c7:99:f4:e1:d8:89:d8:
                    39:4c:5b:8e:13:ec:eb:d7:a1:0c:e6:57:0f:1a:03:
                    09:b1:8b:f1:46:0e:6d:ee:a7:37:26:33:d2:3a:4d:
                    c8:d3:b5:85:31:e7:54:73:68:f0:e8:8f:de:db:02:
                    0a:50:77:90:44:bf:c3:35:b1:d5:05:e3:2e:43:76:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:7C:A4:65:4A:F6:70:23:61:00:E5:A0:43:CE:18:25:A8:77:60
            X509v3 Authority Key Identifier:
                keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:4d:d1:77:0e:cb:6d:06:ad:8c:a5:e6:e3:d7:cc:65:d3:
         09:45:64:8e:9f:9a:eb:34:8c:2d:11:a4:33:c6:e2:d7:b4:46:
         28:cc:cd:a1:e0:be:4c:f0:22:3e:5c:5c:81:40:55:b0:d0:d3:
         63:0d:d1:5d:75:a0:07:63:b9:ce:3b:98:05:bb:e9:33:d2:a0:
         1c:a6:86:a2:c9:33:d8:34:e4:f0:4d:ed:e2:3f:dd:ac:5c:6d:
         74:b9:26:b8:d7:53:c6:65:12:aa:4f:f3:2c:04:0b:8e:7b:5d:
         92:b7:ab:ea:ec:b1:40:20:73:08:32:47:d2:de:ab:64:e1:b1:
         b0:59:71:b1:3f:f3:99:6f:db:1b:cc:0f:3b:88:2e:d5:7c:67:
         fe:59:0b:dd:00:fe:cc:be:4b:d3:8b:bd:63:38:02:9f:ee:9f:
         d8:76:8d:a6:43:dc:d9:a2:5a:77:f8:fb:68:b7:e4:d8:f7:4a:
         6d:03:96:55:46:fe:db:e8:ae:32:f5:e0:08:f7:32:4c:ce:85:
         ec:2b:6a:db:a3:02:06:34:c7:c2:54:d4:d4:0f:ea:4d:0c:87:
         8d:c8:10:90:c9:0f:0c:8b:f4:7b:50:fb:9f:f9:c0:e9:d3:65:
         c9:fe:b1:2e:f6:d1:32:20:ce:10:ed:29:83:47:18:1d:90:a2:
         5f:cf:a1:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CkiKmoXAyosCHtAlSZlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWZkY2E2ZWFjZTRmMTI5MzIyM2IwMmVlYmMyNzgyNDM4
NjliN2IwHhcNMjUwODA1MjEwMTQ1WhcNMjUwODA2MjEwMTQ1WjAzMTEwLwYDVQQD
EyhhM2FlN2NhNDY1NGFmNjcwMjM2MTAwZTVhMDQzY2UxODI1YTg3NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/J0IpqYftccxjMIV8uRI5lQHkrz
x4kJqYkZAZIIPGkapBQyJGICzl1GwORpU9mqsbTwd9R84Ij6qZsRLWdHUNyitzP5
EqxSCjlvw4m+6fcNfR68XxjNtfYHunxN/BaJk/c/X7GVEoOvh3quigEtMoHPpAnO
SLefjAQNdakIYUT1HhODBGBMoktVkMVVqDu64voYJVXU3LzGN4iEkzFM/e6Oh8Qv
NwAx/Ru1mMRQcuttnqL1bcijBtdr/ceZ9OHYidg5TFuOE+zr16EM5lcPGgMJsYvx
Rg5t7qc3JjPSOk3I07WFMedUc2jw6I/e2wIKUHeQRL/DNbHVBeMuQ3ZlXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOufKRlSvZwI2EA5aBDzhglqHdgMB8GA1UdIwQY
MBaAFO2v3Kbqzk8SkyI7Au68J4JDhpt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt
NWYxZGMwYTBiZmNmLzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm
LzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNNN0XcO
y20GrYyl5uPXzGXTCUVkjp+a6zSMLRGkM8bi17RGKMzNoeC+TPAiPlxcgUBVsNDT
Yw3RXXWgB2O5zjuYBbvpM9KgHKaGoskz2DTk8E3t4j/drFxtdLkmuNdTxmUSqk/z
LAQLjntdkrer6uyxQCBzCDJH0t6rZOGxsFlxsT/zmW/bG8wPO4gu1Xxn/lkL3QD+
zL5L04u9YzgCn+6f2HaNpkPc2aJad/j7aLfk2PdKbQOWVUb+2+iuMvXgCPcyTM6F
7Ctq26MCBjTHwlTU1A/qTQyHjcgQkMkPDIv0e1D7n/nA6dNlyf6xLvbRMiDOEO0p
g0cYHZCiX8+h9Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:43 2025 by rpki-client