Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File:                     diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier:          3I+gUTsgCoUO7GBRdtqY3rSUmDZokwGXM010eQrORbM=
Subject key identifier:   E8:AC:EF:A1:AA:1F:61:6D:3C:DD:97:3F:05:C4:A9:C6:77:24:1D:DB
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer:       /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial:       01987E658C6FD5C0AD3C8B51EC756FAE1088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 08:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:40 +0000
Files and hashes:         1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: 3ed+tJBpsNNWJqJcixMykmbmw455+OhJ0XzyldMiNJU=)
                          2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:8c:6f:d5:c0:ad:3c:8b:51:ec:75:6f:ae:10:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
        Validity
            Not Before: Aug  6 08:00:40 2025 GMT
            Not After : Aug  7 08:00:40 2025 GMT
        Subject: CN=e8acefa1aa1f616d3cdd973f05c4a9c677241ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:65:f3:3b:25:87:87:12:a3:f5:30:bc:75:
                    4e:be:8c:98:c6:c1:3b:28:b4:3b:69:6a:a7:93:0b:
                    69:27:56:e3:6a:63:5e:a0:e6:7f:ec:c5:41:43:28:
                    d1:39:70:4a:70:4d:58:f3:35:da:3e:65:27:89:04:
                    62:5a:27:18:f0:29:8b:44:8c:4d:65:e8:43:0f:db:
                    3b:d7:3e:5e:f6:30:97:9a:51:54:63:cc:a9:96:8d:
                    7f:39:dd:b3:29:95:3d:59:fe:71:20:41:de:24:28:
                    64:ef:c1:14:84:33:b8:0d:82:2a:61:ff:e1:5d:f9:
                    fd:1f:91:20:bd:bc:20:09:bc:e2:6d:a8:c9:95:5c:
                    73:61:4a:d1:23:d3:0d:84:12:a4:b0:36:ca:97:c0:
                    3f:1e:3b:95:49:03:0a:57:5d:11:c7:ee:cb:83:ef:
                    be:4b:db:86:0e:0c:53:a7:0f:ea:12:14:c3:f0:5a:
                    2a:20:3e:4a:45:60:ff:e4:b5:88:99:6e:08:57:5c:
                    00:5d:a8:b9:8f:ef:a2:b4:d7:4a:0a:9f:dc:2e:6d:
                    e7:bb:6a:b3:d9:5e:86:1c:bd:26:a5:2f:ce:6d:63:
                    2f:f2:cb:c8:46:eb:8e:6e:b5:b4:c0:ed:97:f1:b8:
                    17:10:f7:93:89:6e:6d:15:07:21:bf:85:e5:89:2e:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:EF:A1:AA:1F:61:6D:3C:DD:97:3F:05:C4:A9:C6:77:24:1D:DB
            X509v3 Authority Key Identifier:
                keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:de:a6:49:ee:e6:cf:ee:e4:52:80:75:52:cb:c4:b5:02:4b:
         86:c8:8a:76:cb:62:e5:77:17:dc:5c:90:ef:12:02:54:75:b5:
         7f:e0:5a:0a:ed:3f:d4:51:e2:39:35:c6:49:d7:ec:bd:c5:77:
         26:45:92:ba:14:dc:7c:ce:0b:5c:69:a2:46:39:f6:77:15:72:
         67:93:fe:6f:69:19:d0:63:7f:76:82:7d:a0:22:7a:c1:ca:98:
         7c:30:19:4e:5d:99:30:08:b7:3d:40:eb:b9:4c:2c:8e:53:5a:
         ba:fd:04:29:54:15:96:dd:f8:f2:5e:94:80:c6:eb:72:99:18:
         8d:94:1c:84:4d:d8:ac:fe:19:81:0e:42:3f:bf:28:dd:6c:02:
         91:c9:f0:c5:6d:e0:fe:70:06:2a:e4:bd:b1:ea:b6:c6:af:d6:
         22:00:31:26:14:cd:66:82:98:6a:2c:36:09:8c:2a:d1:97:e6:
         b8:36:22:76:46:b4:db:bf:01:b0:54:e3:70:25:ed:2f:60:37:
         d3:cd:fb:02:45:e8:fa:67:86:bd:c4:50:11:f0:95:4a:46:27:
         30:ea:70:fb:c7:70:78:7a:b9:da:7e:64:f4:a9:59:4a:d7:19:
         b3:b6:16:40:e3:68:8f:02:a8:72:c9:ac:da:c2:13:b9:80:ca:
         69:3c:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:09 2025 by rpki-client