Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File:                     PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier:          3QBCamZdhdibWKo6bKqW036ex5L2MFeUPAO5sJbrAzc=
Subject key identifier:   66:D8:D4:16:9A:96:81:99:36:7F:AA:CD:FA:F4:B8:12:94:9A:EF:EE
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer:       /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial:       01987BD2D7C318D85A0DF8AE05098F09C4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number:          161E
Signing time:             Tue 05 Aug 2025 20:01:11 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:11 +0000
Manifest next update:     Wed 06 Aug 2025 20:01:11 +0000
Files and hashes:         1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: TOYjXjwUjFgz/rqoUIDLb6BwankADT6kxZewFQ4wVPo=)
                          2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:d7:c3:18:d8:5a:0d:f8:ae:05:09:8f:09:c4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
        Validity
            Not Before: Aug  5 20:01:11 2025 GMT
            Not After : Aug  6 20:01:11 2025 GMT
        Subject: CN=66d8d4169a968199367faacdfaf4b812949aefee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:3a:f7:51:df:87:63:ac:d5:38:cc:c2:21:
                    cf:e5:23:a8:03:43:74:e3:a9:38:c2:f3:f8:75:97:
                    ac:3a:2f:15:56:f2:32:d7:43:61:8c:d3:32:32:b3:
                    24:c9:17:05:2a:fe:be:c2:65:78:b7:19:41:6b:b0:
                    ef:7f:43:26:e3:ee:f3:46:03:d7:51:aa:5c:1e:78:
                    c5:50:f7:42:91:df:c2:38:26:77:2a:27:50:78:af:
                    1b:fa:30:c4:e2:07:b1:59:f1:aa:1c:2f:16:c2:64:
                    70:ae:bd:ea:6c:5b:ab:fe:04:b4:88:57:42:c5:11:
                    0f:c0:11:ec:b8:11:9f:c4:62:3a:17:b4:5f:ac:3f:
                    02:e2:88:c3:1f:d1:d4:d1:b5:3a:f9:e5:6d:72:19:
                    77:db:07:7e:8f:8a:7e:76:2c:86:a9:59:ac:0d:92:
                    48:49:96:fe:76:ca:bb:bc:ac:82:b0:a6:88:08:a6:
                    ce:58:66:e0:a8:23:82:3c:fa:46:08:e5:87:5b:f5:
                    ff:1b:f7:c2:b2:17:5c:6f:24:bc:ef:45:a2:21:2b:
                    b0:18:85:27:66:95:c0:5e:9a:72:fd:e3:ed:4b:56:
                    a1:18:3f:1e:cf:22:70:8f:08:7d:eb:51:d8:80:ac:
                    73:b2:d8:8b:45:ba:04:c2:49:1e:0b:9b:b1:09:a5:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:D4:16:9A:96:81:99:36:7F:AA:CD:FA:F4:B8:12:94:9A:EF:EE
            X509v3 Authority Key Identifier:
                keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d9:38:81:9d:b6:26:f9:43:b0:d3:57:c2:82:20:e4:13:69:
         90:70:cc:66:08:11:16:94:4d:0e:77:eb:13:8d:bc:d0:8e:c5:
         80:34:7f:6f:19:b8:39:98:47:df:17:56:0d:2d:11:5b:31:0d:
         e1:dc:92:38:15:c6:25:ce:6b:c5:12:c7:7a:e1:a3:35:b3:86:
         0a:8c:98:17:b9:13:29:fe:c1:ec:e4:f4:8e:28:28:8a:df:80:
         f5:b4:5a:d1:25:b9:c5:cb:03:01:82:33:ab:71:78:f4:0b:e8:
         a6:f3:82:43:23:45:cb:70:52:4c:b8:76:5f:c1:92:bf:0d:99:
         f2:41:56:37:76:c9:4e:79:d2:9a:79:0b:44:01:80:03:ba:a1:
         8f:37:36:ef:38:ad:54:fb:0f:b4:8b:17:25:de:03:42:9b:5d:
         c4:d0:a8:bb:69:dd:0f:b9:17:5c:f5:ec:9c:b1:4e:18:34:cb:
         5f:05:28:11:3e:a2:0c:13:ee:85:7e:3b:19:c9:c7:2c:53:74:
         5d:aa:58:26:c3:c8:01:9c:63:55:8c:08:d1:8a:b4:9c:7f:73:
         3d:d4:5b:6c:1f:8b:10:a0:c1:a9:14:46:23:3b:70:36:ac:43:
         1c:bb:d5:98:ab:ba:3e:50:9c:4d:09:26:2f:ef:2d:75:d6:96:
         64:13:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:21 2025 by rpki-client