Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File:                     doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier:          OoyU/00NW8X9Lt0pbt+Zm/0UeleAltuSyl0DvSF47/I=
Subject key identifier:   3E:36:92:26:0D:D5:19:20:6E:C6:13:E3:ED:33:34:2D:F7:46:24:95
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer:       /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial:       01987D1CA65F21CC820A86765CB576F03594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 02:01:26 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:26 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:26 +0000
Files and hashes:         1: VGNUuwe-hqqAy7oOkHM2nEayK1o.roa (hash: PbhbER0ewQHcNx+5Jye/cmyEemdCt4HhzE4je62M8OM=)
                          2: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: C37AYG9aBHL4kj56I87B/GiShusm5h8mOIMspSFbaDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:a6:5f:21:cc:82:0a:86:76:5c:b5:76:f0:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
        Validity
            Not Before: Aug  6 02:01:26 2025 GMT
            Not After : Aug  7 02:01:26 2025 GMT
        Subject: CN=3e3692260dd519206ec613e3ed33342df7462495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:94:d9:35:70:52:98:6b:9a:61:cd:9e:d8:
                    07:b3:e2:5a:27:c7:e8:1c:43:0f:3e:2c:67:f7:b2:
                    ea:aa:b1:35:6c:ed:28:46:24:ef:2a:d1:0d:b0:32:
                    20:55:03:eb:7a:9d:6e:23:a6:6e:57:93:32:6d:16:
                    4e:37:3a:70:7d:54:34:0d:35:12:0b:42:fe:9a:8d:
                    de:a4:2b:b1:06:c5:2e:c4:5b:c7:24:07:94:7d:a9:
                    d3:d1:92:d8:02:d7:3a:4b:01:fc:23:42:b4:e1:70:
                    a3:be:37:73:98:29:e8:5e:ae:27:b6:d3:53:c9:9c:
                    75:32:1a:9b:1e:e9:9f:64:b1:a1:12:28:53:b4:e4:
                    d8:da:ac:61:4f:96:cf:7b:e6:2e:0c:f3:99:0e:8f:
                    f8:c3:b9:ec:10:cd:37:74:09:34:b1:14:f9:b5:1c:
                    2a:22:51:cc:f7:6a:f4:e3:8a:0a:1b:38:03:15:df:
                    b3:c6:39:fb:ca:e3:2b:95:0d:02:8c:0a:b3:f3:97:
                    8a:6b:e6:46:cf:7a:d0:a0:be:fd:77:c0:f4:40:f8:
                    52:93:46:f8:da:8a:1b:21:83:5e:b8:7e:ac:38:c9:
                    bd:77:80:c5:df:53:c1:2f:17:ed:8b:1d:78:93:b1:
                    8e:51:5c:b4:00:f4:81:45:73:03:37:e7:ad:a4:3b:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:36:92:26:0D:D5:19:20:6E:C6:13:E3:ED:33:34:2D:F7:46:24:95
            X509v3 Authority Key Identifier:
                keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:98:26:41:1d:2d:c6:62:5a:ce:cb:b5:c3:07:4e:da:b2:
         f7:6b:b4:fd:48:e2:62:f2:78:1b:4f:6a:92:99:77:47:f7:18:
         83:fe:36:61:c3:f8:37:0d:c8:6e:32:cd:34:f5:8e:f3:6a:d0:
         56:1b:ee:56:db:40:f4:98:7b:5a:33:a1:1b:0e:dc:84:66:86:
         f6:39:f0:99:f7:83:c4:85:0e:c6:a4:e0:1b:7d:03:bf:b6:b6:
         64:c3:12:7c:21:47:66:f1:6d:75:80:6f:43:e0:73:c3:b9:90:
         be:4e:f5:b0:12:b0:4a:7a:f0:06:b6:4a:3f:cf:79:26:54:55:
         5d:ac:33:d5:53:f5:09:01:ae:7c:28:6a:35:aa:d4:9e:de:e9:
         cb:b6:00:d3:f3:3a:1e:1c:0c:ef:c6:72:f4:9f:11:ff:e9:d8:
         91:6d:62:91:93:40:ba:25:07:2c:30:47:cc:cd:56:1d:b0:a3:
         c9:61:08:40:c1:39:cd:82:66:38:b9:d5:45:f7:91:fa:29:6e:
         ed:7d:bd:79:f2:53:ce:30:44:98:e0:7d:af:6d:c3:bc:9d:47:
         c8:2f:79:e4:7b:39:1f:63:89:66:29:45:32:e2:c9:fd:5d:3e:
         09:0e:fc:74:1b:c2:b4:4e:15:ac:46:56:93:42:88:18:cb:90:
         10:50:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:18 2025 by rpki-client