Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File:                     cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier:          xc6fxybqGLUvmpIdnDXIUy1JzNjaLj4gT84UUJ7SOiY=
Subject key identifier:   D9:7F:82:D1:09:11:8E:86:09:52:0D:94:8B:FC:9F:37:00:C2:27:78
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer:       /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial:       01987CAE544E792EE91730EDF2C098719A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 00:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:56 +0000
Files and hashes:         1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: qXQAB8ODDaL79l97UwNiTBNtMNwujwbjZN2J3nkm6DE=)
                          2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:54:4e:79:2e:e9:17:30:ed:f2:c0:98:71:9a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
        Validity
            Not Before: Aug  6 00:00:56 2025 GMT
            Not After : Aug  7 00:00:56 2025 GMT
        Subject: CN=d97f82d109118e8609520d948bfc9f3700c22778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:7f:7c:70:03:f1:c4:73:2a:6a:44:ad:f0:
                    93:57:29:aa:97:f2:4e:bb:bb:01:28:c9:2e:30:62:
                    de:da:a1:7d:0b:e5:f4:82:3a:ec:b1:08:0c:a2:79:
                    3a:c8:03:5f:89:71:11:47:9f:eb:79:05:d7:91:36:
                    ac:16:6a:54:13:e9:bf:2a:f3:65:62:88:04:b3:07:
                    cb:9c:0e:ba:b7:8e:d6:f2:d1:dc:d5:8d:ba:5b:ec:
                    eb:cb:2c:4a:b1:c2:04:0b:18:aa:4e:f3:8b:7f:17:
                    9a:79:72:00:b3:ad:f2:f9:4e:31:f3:7c:d0:e6:3b:
                    88:f6:3d:84:95:01:65:12:6c:0b:e1:f8:0e:11:a4:
                    57:1f:d3:85:a4:fb:27:06:96:0f:9c:27:ea:60:7d:
                    c8:b9:c0:6a:5e:78:c2:13:2f:d9:ea:12:2f:57:8e:
                    de:72:16:fa:01:3b:d3:83:ac:1b:e7:f3:5a:d6:31:
                    57:f5:b0:93:50:94:93:df:f5:4f:e1:b8:2e:37:fb:
                    63:cc:f9:c7:73:67:a7:47:5e:2e:ae:7f:01:1e:ac:
                    02:e8:d3:8b:28:dc:13:fa:38:41:82:7a:45:ea:dc:
                    a3:30:61:be:c2:2f:78:d5:67:d2:7d:b0:d6:ec:fc:
                    44:d1:df:c1:f7:af:c5:ec:5f:cf:cb:f4:4d:47:6c:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7F:82:D1:09:11:8E:86:09:52:0D:94:8B:FC:9F:37:00:C2:27:78
            X509v3 Authority Key Identifier:
                keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:56:8e:2d:0c:3e:ac:7b:bd:60:6f:95:77:76:77:61:38:8c:
         98:73:70:1a:65:72:d2:67:98:c5:a8:4d:57:cb:b9:63:11:9f:
         38:de:7c:a4:cd:83:cb:05:49:54:f3:7a:e2:cc:a5:e3:04:6a:
         7c:4a:8e:b3:64:9d:a8:6a:79:ff:d9:ea:5d:3a:f3:6d:fb:69:
         eb:75:a6:dd:24:2a:88:a7:22:1a:4f:9a:d6:32:d8:2e:4c:39:
         09:3b:bb:c3:02:59:56:c5:c3:81:9f:24:56:84:41:d5:3a:59:
         27:a9:99:a5:fc:9f:74:c9:f9:c2:bc:a7:ad:db:94:82:d6:a0:
         56:bd:75:cd:ab:f7:22:7e:1c:ec:da:62:17:38:b1:a0:cf:8f:
         cd:fe:89:1f:60:38:36:50:ac:a7:37:3c:55:9e:a4:ab:01:8a:
         6b:14:46:b2:58:1e:b8:33:50:34:a4:8e:6c:07:34:ff:5a:e6:
         b6:f7:1e:41:b6:1b:88:69:84:98:2b:e0:54:9b:2e:ed:c6:21:
         6d:b4:c5:83:78:e4:45:36:3e:ef:d5:01:c8:e0:78:d1:25:e1:
         56:a7:b9:24:2d:88:78:50:e1:a4:bd:6f:f2:54:0f:ce:b8:00:
         ac:e2:00:7e:cd:f6:9e:04:f2:af:c3:c1:8b:b8:1c:50:fa:1b:
         0b:00:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:06 2025 by rpki-client