Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File:                     1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier:          3FQ3b2KxjXSMZZtOU64RuCpVgPIq9Uwu4+RCo0bj6vg=
Subject key identifier:   63:05:6E:54:4D:F1:27:1D:81:96:9D:3E:BE:85:9B:91:15:45:13:2B
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       019880C2419EFE9A01DC80D7FE99C54C162B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 19:01:11 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:11 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:11 +0000
Files and hashes:         1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: x7gN7LuJsgdhhhr8IbiPOUOvPaqJHExYazBhZwm1WyE=)
                          2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:41:9e:fe:9a:01:dc:80:d7:fe:99:c5:4c:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: Aug  6 19:01:11 2025 GMT
            Not After : Aug  7 19:01:11 2025 GMT
        Subject: CN=63056e544df1271d81969d3ebe859b911545132b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:86:e8:12:0a:51:26:e4:fd:f4:91:b2:00:
                    0a:52:ac:b2:6a:5c:64:10:b0:4d:22:f7:71:59:3b:
                    6c:a9:a0:88:15:f4:ee:36:05:0b:dc:82:eb:13:f5:
                    ee:db:d4:65:f6:c5:02:aa:34:d5:31:06:1f:1f:a0:
                    9a:24:a7:10:3a:8e:9a:d0:f9:66:42:c6:c9:0a:60:
                    e9:25:9b:a3:2b:de:fd:2f:7b:bb:1e:85:97:ac:87:
                    f8:c8:80:d3:9d:95:98:b5:9f:03:b2:99:37:e1:51:
                    15:7f:68:42:8a:05:91:3a:22:a2:20:ff:b6:50:8b:
                    e6:9a:7e:14:59:46:7f:73:0b:3b:f7:dd:77:0a:6f:
                    b3:3d:a5:5b:b4:7b:b7:d7:fa:40:41:17:35:e6:f2:
                    87:53:90:f0:31:bc:b7:a8:3f:f7:bf:db:91:54:50:
                    24:73:74:07:a9:b5:8c:4f:13:a0:62:b0:f6:0a:8c:
                    e5:e7:e8:8d:04:58:fc:48:e6:4e:04:a4:0a:fc:42:
                    11:55:a7:6b:d7:d4:16:ca:b2:38:a1:ee:58:8f:4e:
                    ec:4a:92:91:1e:d9:fe:1d:82:d3:e1:5e:f8:b8:2f:
                    da:b1:eb:19:cf:e2:99:cd:9e:0d:d0:91:a5:49:87:
                    3f:8d:fb:4b:f2:39:77:ff:74:1e:e7:1e:91:d3:e7:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:6E:54:4D:F1:27:1D:81:96:9D:3E:BE:85:9B:91:15:45:13:2B
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:a5:56:69:06:56:c9:17:be:08:f2:a8:4a:db:e4:7d:57:bb:
         37:84:fa:74:99:d0:9b:4f:94:6d:55:41:25:0d:50:f9:53:af:
         31:a9:07:e0:87:c1:41:a8:18:db:73:b4:d6:e2:d4:2d:db:9d:
         f6:3f:44:b2:51:df:ec:76:54:40:7e:43:3d:c2:a0:f5:2e:9f:
         a7:9d:c7:10:36:25:d0:4d:7a:b6:81:91:ed:3d:37:93:76:74:
         70:7d:6e:49:ff:ba:2c:db:6f:fa:56:2d:d0:da:f7:ea:c9:2d:
         5e:9f:f8:1e:d1:d3:27:da:67:83:b6:a1:ce:1f:bf:03:5e:0c:
         b1:c0:5e:de:fc:7c:a4:1d:ae:31:f2:20:ee:a8:2f:01:e8:07:
         0e:35:3f:b8:9a:c8:29:f2:5d:3c:ca:8d:8e:93:c2:ce:09:d1:
         5b:85:b3:b8:a6:c7:7a:2e:6e:d5:fd:41:e1:17:4a:c0:c8:d1:
         ef:60:35:a2:66:4e:e2:8e:7a:4e:fe:86:07:52:ef:0e:99:10:
         8c:a9:e5:72:19:9d:2e:61:d5:d1:ed:39:ba:62:46:18:b6:69:
         61:cf:3e:15:9a:a8:4a:e4:d2:f4:94:79:40:41:23:93:03:34:
         ec:f0:b2:64:e4:71:7a:75:7d:57:cd:c4:36:d2:dc:a6:ed:04:
         10:78:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:25 2025 by rpki-client