Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File:                     gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier:          9G5ZZwIiz8pG/RBTgtcHSfxf1FWGCUcsyt7Wyf8rv4Q=
Subject key identifier:   4B:B5:60:C2:2A:88:2C:9F:96:C9:15:68:7C:B1:7E:0C:4F:17:57:40
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer:       /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial:       019882B07DD336F89D77C1754EB3C385E07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 04:01:01 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:01 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:01 +0000
Files and hashes:         1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
                          2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: mUB4nKUn2H4yGkAwb5lZpN5HoMxxda4UBc37IbALfk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:7d:d3:36:f8:9d:77:c1:75:4e:b3:c3:85:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
        Validity
            Not Before: Aug  7 04:01:01 2025 GMT
            Not After : Aug  8 04:01:01 2025 GMT
        Subject: CN=4bb560c22a882c9f96c915687cb17e0c4f175740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:7b:3c:24:4e:cc:9c:61:56:1b:ac:aa:f7:
                    0a:7d:ec:78:90:b4:09:bc:04:4d:75:38:16:f5:28:
                    ac:d2:01:f7:f8:85:d9:0e:7f:7a:05:b7:7d:4e:a4:
                    1d:74:39:10:ce:dc:aa:09:0e:1e:42:4d:ee:94:04:
                    2d:7e:28:07:b5:55:87:fb:11:17:18:11:b2:51:90:
                    f7:aa:90:95:1e:7a:6f:5e:5a:15:ad:bd:5e:8e:f5:
                    63:c4:40:84:72:61:79:08:a4:68:7e:03:bb:fb:7d:
                    7a:d9:85:78:9b:46:59:46:87:2e:92:af:cb:61:c5:
                    2c:e8:4e:98:4d:a6:4f:de:82:84:62:08:b8:c9:02:
                    bf:bb:30:46:ba:26:6d:87:84:c9:c6:65:d4:6b:f2:
                    5d:2b:67:aa:6b:c5:bf:4a:e3:74:c1:54:2f:c3:4b:
                    fd:8b:5b:7b:db:e0:4b:7d:cd:1d:73:f9:c7:27:0e:
                    64:ce:c6:fc:60:3e:9f:62:08:ae:91:6d:cd:74:6f:
                    b0:9a:56:6a:15:92:ad:0c:35:65:4f:d1:c7:f3:3b:
                    87:2e:a7:7a:a5:07:a1:0c:c1:c1:3a:94:03:c5:01:
                    69:9e:36:fc:bb:58:20:de:0f:80:da:a1:d2:ae:9a:
                    75:ab:54:a6:82:2e:84:4b:07:51:45:ba:7c:10:1c:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:60:C2:2A:88:2C:9F:96:C9:15:68:7C:B1:7E:0C:4F:17:57:40
            X509v3 Authority Key Identifier:
                keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:39:5f:95:df:a6:b9:ef:69:38:3b:2a:5e:d6:d6:32:cd:
         83:73:cc:df:4e:9b:ce:eb:e1:94:13:ee:d9:df:6b:ba:f9:06:
         7f:0c:a2:26:79:b3:03:dc:39:b9:cc:b2:51:2c:24:83:8d:85:
         8a:40:d4:42:41:91:e4:09:af:ab:83:95:e2:eb:b1:9d:a2:ea:
         fe:05:72:36:c4:92:d8:c3:17:c0:b3:1f:aa:c7:a7:59:44:1f:
         57:8c:eb:3f:b8:35:54:67:0a:26:a7:8b:82:0a:d2:16:69:64:
         6b:c6:6a:61:b0:07:9b:75:8a:3c:4e:f0:70:1b:99:f9:ee:33:
         52:a9:fe:72:e9:6d:98:45:7e:11:fc:16:c3:e6:5d:7a:bc:6f:
         06:d4:f0:a9:c9:bd:e8:d4:ba:ab:66:40:de:72:81:fe:12:00:
         a7:03:fa:66:49:61:0e:8f:f9:1c:ae:50:c0:5e:27:d1:df:ef:
         98:c4:4f:53:b9:2b:3a:68:09:07:16:74:97:2c:54:cb:7b:5d:
         72:24:39:2b:4c:58:e1:23:07:03:32:b5:f4:7d:91:f1:b9:09:
         0c:8d:cf:a9:48:e3:b5:5b:09:14:3f:41:08:92:e4:42:67:cc:
         92:f4:03:e6:c5:90:3e:09:e9:40:03:d7:c2:f0:4e:14:d6:fd:
         c9:03:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:28 2025 by rpki-client