Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          mjbRm2P+lQTbvxfJVShSRTvh8YlJMkU8B0+xRtx38nQ=
Subject key identifier:   61:08:52:A9:84:C5:3B:76:EB:E7:3A:F3:EE:A6:D7:15:C9:21:68:B0
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       01987CAE3021A9E9BFAEFFC13ACAF69890B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 00:00:46 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:46 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:46 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: hsSsUEgbcsR1Edz1QygJ3bHNHqiUV29EDX6mSpfMXWg=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:30:21:a9:e9:bf:ae:ff:c1:3a:ca:f6:98:90:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Aug  6 00:00:46 2025 GMT
            Not After : Aug  7 00:00:46 2025 GMT
        Subject: CN=610852a984c53b76ebe73af3eea6d715c92168b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:a2:3b:77:71:6e:2f:26:02:9e:cb:4c:72:
                    af:b7:4a:fd:aa:4c:3e:c8:3a:1f:b1:11:76:88:72:
                    ce:09:ac:35:60:fc:da:53:53:6f:88:11:69:2d:06:
                    7b:71:61:ce:a0:9c:3b:f3:e6:71:2d:b7:ba:19:0b:
                    2a:44:9f:70:8f:2a:7b:53:fa:8f:b3:85:01:43:9f:
                    45:f9:b2:65:6f:a4:f6:a3:85:e1:79:bc:a4:fe:b2:
                    6c:2e:0c:fa:2a:84:a7:e7:2c:80:d2:f4:de:db:84:
                    85:44:60:26:76:8d:2f:c1:42:7b:77:a6:68:85:f4:
                    e9:c4:8d:06:e3:b5:1d:2e:85:30:7e:d3:37:10:af:
                    90:8c:f8:e0:3e:d8:1b:97:ce:5b:d5:14:89:57:fc:
                    ea:6e:3c:b2:79:08:32:3d:28:76:d9:e3:96:8a:d0:
                    c0:ae:a6:df:c7:f8:43:81:c9:11:f9:53:d8:48:ec:
                    5c:76:e2:30:2f:a1:9e:45:7c:46:82:80:56:13:ac:
                    2b:72:39:25:28:41:39:c4:fe:ae:fd:41:e3:aa:7a:
                    59:80:ba:59:49:66:58:a8:81:31:55:11:25:09:83:
                    bc:a5:44:d5:32:4e:3d:68:04:bf:0d:a4:4f:43:cf:
                    ac:20:01:ad:64:36:80:23:ce:1a:27:c6:e6:00:54:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:08:52:A9:84:C5:3B:76:EB:E7:3A:F3:EE:A6:D7:15:C9:21:68:B0
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:7d:a1:3b:83:c5:e5:5a:70:bf:dd:29:2a:33:fd:aa:eb:
         01:ab:f0:d5:a4:eb:dd:c1:c2:c8:94:35:98:4e:cd:4d:3a:8d:
         f6:9d:27:35:31:be:30:1b:58:50:60:c1:68:43:c0:18:ee:c6:
         ce:cd:9e:a2:c0:d9:5d:5f:67:67:bb:26:36:94:af:55:cf:4b:
         c9:09:00:cd:d8:33:d2:5d:da:7e:c0:4f:9d:d1:40:18:5c:e1:
         6c:6e:b9:4d:23:cf:80:2f:7b:57:63:25:49:b3:64:6f:78:88:
         64:fe:96:f4:89:23:00:69:16:44:0f:f2:30:91:a5:4d:c6:4f:
         45:92:67:23:24:99:33:f0:87:1a:40:86:1a:4e:9e:44:60:3d:
         68:08:8f:03:62:ad:d5:ef:5f:be:2a:8c:53:db:2e:0e:5b:27:
         80:75:68:de:c7:3f:e1:6f:38:af:a9:21:6b:59:57:2f:20:92:
         9b:99:29:bd:80:02:82:2d:cf:8b:59:2f:2a:b9:32:9f:41:6e:
         9b:2b:02:6b:46:ff:fe:f3:0c:fb:68:ea:e8:8f:e0:15:e9:2f:
         c3:01:97:aa:ad:51:a4:36:6e:de:56:9a:c9:93:80:9d:f3:cb:
         e7:13:53:df:69:29:86:6c:dc:fb:35:9e:59:34:c4:84:8e:a0:
         51:80:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:36 2025 by rpki-client