Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File:                     0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier:          A7DGepFHRz74Ocya2TQWkabz47HOsmkv2S4VW9/ab8g=
Subject key identifier:   4D:79:AA:33:A0:A9:84:74:34:BB:91:F5:28:4E:DD:64:49:DA:04:10
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer:       /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial:       01987D1C92002C12023782BF25390B61385E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 02:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:20 +0000
Files and hashes:         1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: m2yFVPjQfo67hWTkMB8hXSojtew0jbH415kH8UlXh+M=)
                          2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:92:00:2c:12:02:37:82:bf:25:39:0b:61:38:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
        Validity
            Not Before: Aug  6 02:01:20 2025 GMT
            Not After : Aug  7 02:01:20 2025 GMT
        Subject: CN=4d79aa33a0a9847434bb91f5284edd6449da0410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:ca:37:7a:b8:39:62:44:ea:34:a1:87:94:
                    44:36:77:c9:8d:41:83:99:36:57:42:4b:3f:68:26:
                    be:ba:12:86:84:11:73:db:06:4a:0d:88:6b:46:95:
                    76:9c:73:e5:5e:07:60:37:3a:4e:da:8d:e3:93:55:
                    a3:77:5a:8d:9e:86:36:82:87:a8:00:d8:6a:8c:87:
                    47:fb:0f:cd:8f:eb:bd:53:7f:b1:75:3d:f2:95:08:
                    c9:3e:fa:20:83:c8:00:e8:6c:1d:25:c8:e8:96:e6:
                    f8:c0:b0:68:d3:2d:79:1f:fe:89:4e:45:d7:54:b1:
                    bd:f3:af:9d:57:da:e0:49:51:fb:d9:9c:c1:2a:d6:
                    dd:88:82:0a:f5:59:af:3f:3d:09:35:b7:ee:a1:17:
                    b2:b4:12:84:4d:e2:6d:c0:5f:0c:0f:11:c0:21:c8:
                    42:ed:be:ef:70:23:00:3b:d8:31:6c:11:46:5c:d0:
                    23:28:a7:69:3e:66:a5:f9:b0:59:01:cb:6d:c5:87:
                    be:69:b9:38:df:98:36:ca:4b:63:97:1e:91:67:c8:
                    2b:91:9e:70:34:b5:15:37:67:60:f2:71:24:6c:34:
                    74:dd:8a:0f:18:ba:cf:a7:37:0d:94:79:1d:16:b4:
                    e6:08:41:ee:06:d8:c0:5d:ec:14:15:29:23:9e:d7:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:AA:33:A0:A9:84:74:34:BB:91:F5:28:4E:DD:64:49:DA:04:10
            X509v3 Authority Key Identifier:
                keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b9:ad:b2:0f:bf:18:e9:5f:1b:a4:a5:f4:9a:89:e9:82:bb:
         b7:23:48:7e:f7:9d:43:f4:6a:3d:cf:87:91:9c:7a:1d:ac:da:
         f2:6b:21:9c:8e:25:4d:f4:9e:11:d0:96:62:52:d1:28:f4:a1:
         0c:54:83:a9:bf:1c:1b:78:e6:f7:c8:68:b8:66:cd:48:a0:ec:
         c1:13:bf:b0:42:1c:90:c7:eb:16:b2:5f:84:e6:64:3f:50:99:
         f7:7e:46:e9:3e:93:27:2b:48:6a:73:8c:ab:32:c1:55:46:3d:
         ef:bb:5e:55:82:99:d9:3d:b9:d2:6f:2a:45:0b:58:f1:a2:d5:
         bf:07:b5:1f:cf:89:67:6a:5b:4e:31:b8:81:03:bd:3d:8b:b7:
         54:cc:19:6a:26:cb:a6:4c:3b:ec:4d:16:84:41:6d:08:ea:1d:
         c8:43:1e:6e:6f:34:18:74:fd:8f:b8:3c:33:fe:77:fb:32:61:
         5c:f9:24:7a:7c:03:19:ae:26:00:33:bb:5e:66:46:94:a8:3f:
         dd:76:ea:8b:65:9d:18:52:a8:df:01:be:ab:54:20:5d:e1:c6:
         35:19:e5:dd:b0:e6:42:8e:ee:4e:5f:47:b4:6a:0f:7d:89:b8:
         36:21:2f:42:a6:ae:fc:7a:5a:f6:a2:22:fe:c5:e0:0a:14:90:
         ac:12:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:30 2025 by rpki-client