Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File:                     cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier:          kLpKWiN2cxwiQq7inv6eiZV1lolwjmqdxt0a51SbIIo=
Subject key identifier:   F2:F4:7E:C6:63:2A:98:78:87:A7:92:C5:DF:BB:58:A1:AC:B5:E3:86
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer:       /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial:       01987CAE74688B368A0F778D1BCEE46CE087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 00:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:04 +0000
Files and hashes:         1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
                          2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: sQYZFYsAdhTTTrkTsjNqRwHhkN94OHPkXhVk2XXp4Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:74:68:8b:36:8a:0f:77:8d:1b:ce:e4:6c:e0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
        Validity
            Not Before: Aug  6 00:01:04 2025 GMT
            Not After : Aug  7 00:01:04 2025 GMT
        Subject: CN=f2f47ec6632a987887a792c5dfbb58a1acb5e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:da:e3:3d:10:cb:b5:0c:ed:3d:db:df:aa:
                    c8:90:1c:ef:1a:fc:75:85:32:67:c0:00:f1:bb:00:
                    d3:06:21:c7:2c:e0:44:25:48:e9:67:44:83:39:a5:
                    cf:0d:7c:32:31:e6:32:00:ee:a9:a0:76:6a:b4:61:
                    9d:64:94:fd:cf:1e:04:51:ce:a2:a6:89:e0:21:bc:
                    24:28:4c:97:45:18:19:5c:24:95:43:83:5f:49:3c:
                    c7:ec:b5:3a:62:a3:87:70:42:c6:78:20:dc:ba:d7:
                    08:94:e7:73:8f:ae:9d:47:85:cf:4c:1f:53:dd:d5:
                    e8:33:2f:5e:e8:f0:b9:05:a1:1c:93:5d:3e:58:16:
                    0f:7e:1c:ea:08:cc:0b:4a:76:bd:50:e9:5c:35:25:
                    be:ca:8c:c9:b9:f2:ed:c9:dd:3e:9e:58:32:85:01:
                    7b:40:4b:0a:65:e0:c7:a8:13:1e:2a:16:e6:dc:db:
                    a4:41:08:70:7e:6d:6a:e7:b4:4e:18:ab:88:d6:8d:
                    6a:90:6f:2f:fe:0e:17:ae:17:70:a9:32:57:7c:a6:
                    b4:f9:30:fe:1f:6d:86:32:7e:e4:b5:b6:c7:0e:c2:
                    c0:85:29:38:a5:51:06:dc:20:cd:3a:ad:b7:36:58:
                    56:90:32:2e:4f:4e:8d:44:08:1a:f0:92:ed:e9:8d:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F4:7E:C6:63:2A:98:78:87:A7:92:C5:DF:BB:58:A1:AC:B5:E3:86
            X509v3 Authority Key Identifier:
                keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:31:62:bf:ea:2b:11:2c:38:8d:19:7a:94:8e:da:c7:a2:
         f4:26:1c:00:c6:7c:72:1b:0c:ae:82:37:07:a0:d4:6a:ae:c1:
         bd:e8:03:d9:44:1b:b7:77:4d:65:79:91:94:1d:6f:dc:66:80:
         b7:9f:97:0c:d3:b8:ff:fe:dc:33:13:66:0e:5a:65:42:6d:6e:
         ed:ae:e2:27:be:9b:c0:d6:6f:92:b0:eb:3f:f8:1c:41:7a:c8:
         55:ff:5d:55:c2:16:11:3b:0c:39:13:f3:34:7e:7c:ff:05:82:
         1b:ff:3a:3b:58:69:57:6b:86:2f:8a:9a:57:d4:83:90:73:63:
         d2:06:da:ad:89:79:a9:3a:72:8f:ad:a2:1c:66:02:e0:c9:d6:
         51:6f:e6:25:15:f0:7e:aa:75:96:d1:6d:43:2d:06:fe:52:01:
         51:4a:05:78:fc:53:9e:bb:12:73:ab:83:76:bd:a6:bc:5a:65:
         70:6a:2c:a3:52:e5:9f:af:cc:8b:a6:dd:5b:d7:34:1f:46:50:
         cd:5e:54:02:06:c4:56:16:91:e8:65:94:b2:c4:10:12:27:a2:
         97:94:be:e3:82:d6:1b:d5:df:19:c5:8b:d8:82:8e:d0:1f:cb:
         16:a2:16:a7:42:a9:83:7d:a4:3d:94:25:af:c3:84:84:05:cf:
         2b:0e:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:04 2025 by rpki-client