Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File:                     Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier:          dCmxTmc9mANP7f0kcgxVPOJo2WQ46MPSMLmJc/DSbP8=
Subject key identifier:   6D:4C:5A:49:C9:2B:CA:A1:20:05:37:B9:44:94:BF:B2:96:37:D0:E5
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer:       /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial:       01987CADF773827D3A835AC31DA4BB9EC0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 00:00:32 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:32 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:32 +0000
Files and hashes:         1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=)
                          2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: GYBlaejiW7Qk4ZRu1OgJg3DqzaocFi69A5mZ1jiNsYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ad:f7:73:82:7d:3a:83:5a:c3:1d:a4:bb:9e:c0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
        Validity
            Not Before: Aug  6 00:00:32 2025 GMT
            Not After : Aug  7 00:00:32 2025 GMT
        Subject: CN=6d4c5a49c92bcaa1200537b94494bfb29637d0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:22:83:88:1b:fd:90:8d:62:30:3c:2a:5d:
                    74:0f:fe:82:a8:b4:f4:fc:e1:7a:30:9e:16:7a:5a:
                    c8:98:9b:c9:ac:35:b1:dc:c9:a7:94:47:2a:89:f0:
                    06:76:66:3c:ac:11:2e:d4:82:bc:9f:fe:c2:a5:e2:
                    c2:91:2a:cf:7b:08:d8:b6:b5:a8:60:a3:37:0f:87:
                    7f:96:30:90:68:49:81:20:8e:45:05:f2:28:f4:95:
                    dc:b8:e1:0d:0d:e5:92:f9:60:12:ea:9a:82:e4:e5:
                    76:d9:26:f5:63:12:74:8f:3a:13:51:e8:bb:a2:7b:
                    18:82:55:2e:86:6e:e9:75:74:0d:65:5a:ed:44:9c:
                    82:2b:75:bb:2f:5b:9d:71:88:04:83:46:2e:a5:c0:
                    db:c8:3a:f6:4a:c2:ea:2a:15:fa:90:04:5c:7a:a2:
                    f0:fe:8b:d9:ec:50:c1:34:84:bf:fa:d1:86:9b:ec:
                    51:02:48:67:a2:8f:5d:c5:32:c3:c4:a1:bd:25:30:
                    34:5c:63:f7:ea:57:dd:71:94:1d:eb:ca:dc:e0:3f:
                    79:ed:64:0c:f9:8c:3b:86:cb:15:7c:90:4c:55:6f:
                    9d:2a:74:a3:81:7f:63:b0:41:7a:ea:81:c9:62:26:
                    d9:ec:9d:c6:a7:eb:01:4f:a2:49:10:a0:f9:a8:e0:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:5A:49:C9:2B:CA:A1:20:05:37:B9:44:94:BF:B2:96:37:D0:E5
            X509v3 Authority Key Identifier:
                keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:d5:e1:f0:ff:a5:bc:a4:5b:89:f8:0f:2a:f8:9d:92:c1:
         19:22:08:28:6a:2c:ac:a5:6e:48:60:f6:4d:6c:fc:5a:86:7f:
         19:5a:3e:fb:12:b8:03:7c:75:c4:be:6e:72:31:f7:ee:2c:4c:
         4c:ed:ae:97:fc:b4:55:4a:ab:84:59:db:09:97:80:f4:13:16:
         c9:de:78:4a:d2:c5:63:f5:56:a9:08:d6:91:2e:52:f6:51:bc:
         9a:8a:1e:58:50:86:32:00:3c:5c:2b:52:a9:28:7d:78:7a:46:
         28:d0:bc:aa:aa:d6:a6:f5:9b:b6:1c:f8:1d:b8:29:ed:02:71:
         1b:08:88:a5:6b:fa:40:d9:2d:90:9b:1b:45:73:19:52:3d:ad:
         0e:06:5f:ea:77:86:7d:35:71:ad:6f:2d:76:62:c6:7e:f1:19:
         43:2f:fc:c3:34:50:40:25:16:f9:3a:79:27:63:d9:d5:e2:8e:
         71:1c:10:fc:60:e9:d8:8c:53:34:2f:26:47:04:14:86:02:9c:
         93:d5:45:60:a3:61:2c:4a:80:07:b1:bd:d3:2d:1e:5b:78:74:
         1f:93:f3:2b:2e:76:6b:bc:ef:01:33:d4:54:da:78:5f:07:af:
         43:18:91:5a:33:f3:ef:df:cb:33:d8:8c:76:15:20:83:bc:22:
         40:06:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:04:19 2025 by rpki-client