Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File:                     ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier:          JpFInhfsUQs88bcHSjUNouHOn8c8ATIm0y79u2UkCss=
Subject key identifier:   DA:2A:6E:83:1F:32:C6:D9:13:DE:CD:C6:6D:DA:35:C4:F8:8B:2C:7D
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer:       /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial:       01987CAE9B3F81CC2BA6168690613A323DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 00:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:14 +0000
Files and hashes:         1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
                          2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: AiHFEVVrWqPNYInj4QrvzR5SGHeEIxoiI55SyuEi4tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:9b:3f:81:cc:2b:a6:16:86:90:61:3a:32:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
        Validity
            Not Before: Aug  6 00:01:14 2025 GMT
            Not After : Aug  7 00:01:14 2025 GMT
        Subject: CN=da2a6e831f32c6d913decdc66dda35c4f88b2c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:45:6b:56:63:1e:7a:e5:cb:a2:85:d1:e6:
                    6c:64:21:a5:94:65:e5:4d:4a:f4:00:54:6c:98:92:
                    5b:75:c4:b2:8c:07:fe:31:9b:d6:5b:cc:8d:b7:aa:
                    1f:33:a9:f4:29:47:98:0e:dd:34:b9:05:d7:3c:2b:
                    c1:d8:61:f9:03:41:a5:6b:15:35:35:94:bc:f5:89:
                    66:be:dd:dd:a4:f0:ba:f2:2e:62:cb:ee:ff:3f:ce:
                    f0:b7:13:47:b4:83:16:ff:08:ca:57:a5:bb:76:90:
                    eb:49:d4:34:71:01:27:05:b7:f6:ad:fd:1f:5f:fb:
                    d1:b5:58:a6:9c:23:a6:62:0a:53:69:de:5b:0f:52:
                    0f:26:0e:99:56:9f:b0:75:38:b1:10:f4:07:be:2d:
                    02:83:5a:a9:77:4e:d6:83:6e:88:8f:28:4c:e2:51:
                    da:53:3f:1d:de:5e:09:05:49:49:90:c1:41:32:73:
                    30:05:d0:b2:03:22:3b:0b:1d:65:19:35:57:d6:51:
                    70:c4:ab:db:3e:28:0d:cb:20:ac:a2:62:91:4c:dc:
                    97:37:f7:cd:ab:f9:7a:fc:0d:70:d6:62:05:2b:1f:
                    5c:cb:b5:5d:fe:6b:84:30:b9:5c:00:b3:6d:d6:3b:
                    ba:ab:5b:d2:c4:c0:1f:16:da:64:07:79:16:a8:42:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2A:6E:83:1F:32:C6:D9:13:DE:CD:C6:6D:DA:35:C4:F8:8B:2C:7D
            X509v3 Authority Key Identifier:
                keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:41:f0:44:68:21:49:93:17:78:e1:b7:ee:93:06:81:59:cf:
         a4:08:c5:6c:66:b0:7d:91:b3:86:9e:05:4e:97:f5:e2:36:9a:
         1c:74:5b:6d:5b:ea:c7:0f:f1:10:e8:d4:e3:ac:af:86:ac:a4:
         e2:d8:7a:37:21:82:4a:a5:3e:5f:04:ae:e2:2a:62:59:7b:02:
         9f:4f:a2:02:a1:fe:63:e5:84:d4:ef:44:81:b5:04:65:e8:5b:
         0a:50:95:1c:31:5d:9f:7b:8c:fa:05:82:b4:85:ad:bc:db:16:
         f0:20:30:17:5c:f8:5b:a3:6a:6c:fa:6e:90:62:d4:8a:c8:e9:
         3b:c0:ab:36:0d:96:37:b6:d1:93:aa:11:ff:1c:10:9c:cb:8c:
         91:e1:66:fe:38:33:a1:71:4b:fb:a7:34:51:0f:27:b1:b0:02:
         8b:91:3a:6d:9b:d0:6e:46:bb:52:e3:dc:57:74:30:87:12:00:
         ab:10:d8:3f:e7:16:d1:79:7e:3a:4f:13:d7:28:89:c9:8a:94:
         d1:b8:f7:5f:a1:1b:6f:a5:f6:28:22:50:ee:d2:7a:89:0c:2f:
         b5:eb:2e:df:b9:3d:23:96:aa:97:6e:90:d4:5d:92:4e:d2:9e:
         72:44:1b:8d:c5:02:2d:d2:c7:8d:98:7f:9e:99:b2:77:73:1e:
         f0:7f:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:01 2025 by rpki-client