Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          6QDypr4Kt1OwM36hkiebXs4FyHAJn0uu7GX58MWD9Lc=
Subject key identifier:   8B:66:9C:FD:E1:9C:25:88:EE:F8:17:19:23:3D:A3:4B:EB:AD:83:D6
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       01987E665E3ABE19C6DAE8CFA2E424300583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 08:01:34 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:34 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:34 +0000
Files and hashes:         1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: 29v3urlGlK6ZplQI0mcH7Qk9bqDd08uyXswmxO+isEA=)
                          2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:5e:3a:be:19:c6:da:e8:cf:a2:e4:24:30:05:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: Aug  6 08:01:34 2025 GMT
            Not After : Aug  7 08:01:34 2025 GMT
        Subject: CN=8b669cfde19c2588eef81719233da34bebad83d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:43:62:d7:f8:69:66:1c:f9:b9:90:d2:b8:
                    f8:57:a3:ec:6e:01:ea:b9:45:24:1b:d8:c3:97:87:
                    81:1e:e0:fb:d3:75:bc:c5:f3:42:53:69:3c:25:75:
                    48:54:bb:59:ba:a9:93:27:08:34:d3:62:12:51:22:
                    44:e6:a9:19:09:46:dc:99:fd:7c:3c:10:a2:e8:a7:
                    09:cd:a7:5a:76:66:fd:28:57:ae:8e:5c:e0:55:f7:
                    eb:72:a0:a7:0d:63:81:37:df:04:47:5f:10:91:ff:
                    32:98:45:c5:ef:66:70:b5:92:b1:44:14:34:db:5d:
                    0a:5c:a7:e4:cf:49:3f:87:11:20:76:d0:07:ff:e7:
                    33:54:d7:af:5f:a2:9f:1d:44:39:08:b5:e0:87:db:
                    2b:69:0d:c4:69:56:9f:d4:2d:88:77:64:d0:1a:04:
                    3c:d7:94:12:9b:52:b1:4b:2c:79:88:1d:53:57:3b:
                    2c:eb:4f:29:61:61:a5:2d:5a:95:7b:21:50:e0:79:
                    5d:d3:b8:33:b4:bf:a7:ed:a5:85:f2:95:f7:2c:d6:
                    2b:c5:44:6d:87:08:bc:60:24:1f:76:c0:fc:e8:76:
                    44:0c:b5:e9:c4:be:68:26:05:d5:b1:4e:d4:9d:31:
                    92:3c:7a:c6:c3:aa:61:ee:60:5d:3b:5e:20:85:bd:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:66:9C:FD:E1:9C:25:88:EE:F8:17:19:23:3D:A3:4B:EB:AD:83:D6
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:d0:58:46:61:0b:b0:2d:b8:48:8a:b3:ab:76:74:c4:4f:
         97:94:cb:a5:1e:f2:fc:cf:ce:05:48:5e:8a:5d:3c:32:7e:f9:
         a6:2a:ea:ed:89:9a:05:f5:ce:50:15:ff:9d:1c:27:e1:f0:b4:
         1c:c8:89:e6:d6:d7:c8:e1:5a:f1:46:5f:18:75:ec:69:24:10:
         41:34:c2:da:93:b0:8c:3c:18:1b:47:59:dc:c6:9e:a1:16:f7:
         ed:7f:54:25:2c:1c:c5:22:cd:e6:d7:92:b0:52:ed:73:e8:8c:
         c1:26:b0:53:ae:94:2d:01:32:dd:8c:f5:86:86:76:ce:15:43:
         d5:0c:ae:fc:fd:9d:2e:f2:25:f9:fd:aa:e0:d4:5e:9e:7a:51:
         16:61:47:a1:3a:b0:45:fb:4f:df:39:37:7a:e9:0e:26:3e:3d:
         a8:08:2c:63:e1:80:bb:23:01:4f:92:1e:4c:25:37:51:ea:d6:
         39:e8:17:99:ac:a9:d3:d9:aa:11:0f:fd:41:98:78:4a:b2:7e:
         72:25:20:fe:47:54:56:c8:eb:f5:d7:55:1b:e1:87:a9:39:0b:
         79:ee:94:a7:6c:3d:5c:79:bb:e7:e3:b2:a7:50:04:fb:f6:d2:
         81:dc:e3:f0:e7:84:71:f4:2a:86:36:dc:48:ca:4a:65:68:7b:
         f1:41:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:08 2025 by rpki-client