Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          rxYpJlMutJlFZ766ZBj+tg9rwl8vB1Cy7vd/CciMMt0=
Subject key identifier:   8D:E7:EA:0D:57:57:ED:D7:47:2A:AE:C9:89:D4:16:14:DC:C1:F4:9A
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       019879085E4D78596E1398418D82D4D14E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 07:00:48 +0000
Manifest this update:     Tue 05 Aug 2025 07:00:48 +0000
Manifest next update:     Wed 06 Aug 2025 07:00:48 +0000
Files and hashes:         1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=)
                          2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: 5kbRrMtqKKTugYdEJYxBgGEyVeNq5gRSFvNxGtAigZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:5e:4d:78:59:6e:13:98:41:8d:82:d4:d1:4e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: Aug  5 07:00:48 2025 GMT
            Not After : Aug  6 07:00:48 2025 GMT
        Subject: CN=8de7ea0d5757edd7472aaec989d41614dcc1f49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:23:7a:ef:55:9f:8d:35:86:00:30:04:5c:
                    98:16:31:31:15:9f:a2:73:2a:01:2c:76:30:4c:f6:
                    f2:d9:5b:3e:0f:d4:ec:f4:a0:4b:3f:6b:85:45:71:
                    2e:88:38:d7:0f:fe:72:d9:c3:09:63:5f:55:6f:0a:
                    ef:81:70:6d:39:2c:4c:77:14:12:04:a4:46:ec:a6:
                    48:a0:c4:38:f6:80:76:1e:9b:17:a5:a8:fc:25:d4:
                    98:b2:0e:11:5b:7d:45:73:39:90:3e:42:34:91:66:
                    f1:84:f0:4e:45:01:44:69:06:79:be:b5:77:d5:db:
                    ed:83:0b:d3:45:10:21:6e:7b:ed:56:1d:9d:fd:77:
                    93:fe:a9:91:12:fa:af:00:ee:de:62:69:9b:fa:d3:
                    c6:43:cc:2c:d9:54:39:be:f8:9a:b9:f6:0b:45:9b:
                    bb:09:ad:37:87:0a:53:b5:9b:e6:ec:59:99:e6:74:
                    65:4f:71:a5:92:70:8d:4a:17:9e:49:33:d8:aa:6f:
                    e2:a1:9a:bf:e7:08:6e:5c:f7:3f:eb:b8:0c:da:e5:
                    b6:1a:fc:a6:eb:48:e3:9f:49:93:db:53:73:e9:80:
                    4a:02:61:ba:8b:c5:90:a8:1e:e8:6f:31:d6:fa:e3:
                    f0:d2:7e:67:00:39:18:5a:7d:ec:bf:30:db:1c:b3:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E7:EA:0D:57:57:ED:D7:47:2A:AE:C9:89:D4:16:14:DC:C1:F4:9A
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:4c:a7:7a:42:9c:00:ec:de:a2:50:db:31:79:27:9b:6c:
         4d:f7:df:5e:49:8c:62:64:9d:a2:d6:50:f9:dd:9f:5b:7c:ea:
         1b:30:59:9a:d3:e0:86:36:2d:90:90:cd:4e:79:49:27:14:99:
         80:76:9f:9e:a4:22:8c:61:20:d4:39:f6:a8:88:ac:e6:f3:8a:
         45:33:47:6f:b9:1a:84:0d:41:0f:a6:6d:32:96:21:e7:97:59:
         51:d4:ba:08:7c:05:45:43:45:a2:ba:ad:4d:6f:9c:15:ce:d4:
         25:48:e2:f2:3f:8d:95:92:e5:1d:63:34:a8:15:47:0a:03:29:
         ae:86:c0:b1:25:bd:08:ff:e6:03:45:7c:2e:40:51:bc:e2:68:
         9d:4b:2f:98:e9:da:73:c5:fe:1f:ff:50:b3:3e:28:da:4a:7f:
         93:f7:a4:df:67:12:ae:63:23:f0:f0:cf:f3:f1:03:e2:d7:e9:
         db:1e:e0:b7:ca:c9:31:62:c9:03:6e:c8:2c:e5:73:c2:3e:f8:
         38:58:5c:41:2d:5c:18:b3:94:53:86:d6:98:b2:eb:0f:89:81:
         26:7a:1c:da:a0:21:c7:5e:8b:7e:d1:a5:82:6f:20:17:62:e7:
         98:66:d9:cc:56:42:ec:16:5f:59:c7:e7:6b:7e:b4:38:8f:b1:
         05:05:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:23 2025 by rpki-client