Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File:                     _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier:          uVbm18a7XQAq3G+zcLD36AAEzE59xEKAE7t+75L6E4Q=
Subject key identifier:   EF:AB:D1:D8:8E:A5:D9:EF:4B:BD:6A:96:33:15:71:6B:52:EF:38:17
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer:       /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial:       019880F9718A31BE260FAF9A567A7E78BF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 20:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:27 +0000
Files and hashes:         1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
                          2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: BJtWFsyyXWphz9mMEhK5M6CyI++2pVnRKofVPAUiBNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:71:8a:31:be:26:0f:af:9a:56:7a:7e:78:bf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
        Validity
            Not Before: Aug  6 20:01:27 2025 GMT
            Not After : Aug  7 20:01:27 2025 GMT
        Subject: CN=efabd1d88ea5d9ef4bbd6a963315716b52ef3817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:8a:17:03:b3:b2:0b:18:47:3d:6f:79:60:
                    f5:39:2f:6a:a8:f8:f8:5a:ef:c2:0b:e3:52:dc:f0:
                    6a:a4:2e:be:98:38:f3:ab:eb:07:e1:d8:45:e0:8d:
                    9d:51:2e:85:77:1b:c0:aa:0c:2b:bb:a1:dc:a6:31:
                    19:32:e4:65:93:ea:2f:be:80:04:4c:06:ea:81:5e:
                    5f:6e:79:87:9f:aa:0f:17:e2:63:79:7f:63:86:3a:
                    96:9b:da:9e:ba:37:49:9a:11:52:2b:3b:ca:13:bf:
                    61:d2:8e:bb:7f:68:57:72:e9:a0:56:30:c9:3a:9b:
                    ab:10:18:2b:57:00:30:b4:98:f9:f1:1f:0b:95:dd:
                    92:a6:44:df:65:b8:dc:6a:c2:ac:6a:9e:3d:88:0b:
                    cf:81:5c:af:1f:14:6c:9e:09:ae:f5:4e:4a:d3:27:
                    13:7e:60:34:cb:4c:40:68:73:95:ed:dd:c4:44:39:
                    9d:77:c0:58:cf:7d:d3:b3:54:23:86:6c:1b:d4:c0:
                    b2:49:33:6a:42:95:50:7c:9f:40:35:99:2b:9b:43:
                    39:ea:77:5a:f1:4e:65:0f:9a:2f:d4:f2:03:85:9f:
                    af:25:eb:08:38:13:37:16:15:2f:10:20:81:b8:b8:
                    d8:74:3f:7b:9b:d3:b7:ff:b8:5e:4c:29:e4:77:74:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:D1:D8:8E:A5:D9:EF:4B:BD:6A:96:33:15:71:6B:52:EF:38:17
            X509v3 Authority Key Identifier:
                keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:87:77:fb:90:49:41:ad:be:fd:b2:c9:d3:97:04:cd:cc:95:
         79:83:b5:3b:98:bc:c4:15:f6:b4:37:e7:ea:79:f4:43:b2:77:
         1a:39:9b:9b:1e:67:a6:50:ad:5a:c8:c0:5a:8c:49:40:c9:8b:
         ba:87:bf:40:4e:17:0f:9f:19:c0:ac:7a:19:12:d1:d6:ef:9b:
         e9:d7:63:ff:a0:7f:d5:66:aa:48:d2:5c:b2:f4:31:54:c4:db:
         d6:bc:d9:e5:19:f3:72:51:3c:39:af:1a:ed:d7:f0:ea:f7:32:
         cd:4d:1b:b2:a0:87:89:69:fe:fb:f8:e4:d4:31:e1:f9:2e:44:
         d1:7a:91:e4:13:06:73:da:2d:53:ba:f9:db:86:cc:3a:70:7f:
         5d:69:42:67:79:db:a8:8d:33:2c:6c:90:9c:0d:92:be:10:f1:
         70:a6:7d:2a:ba:f8:fb:a6:b4:98:dc:66:89:b2:d5:5c:5d:7a:
         14:1a:1c:ae:ff:df:35:e6:ef:e4:07:f7:7f:c8:39:36:bd:29:
         d7:fe:c3:80:07:9e:e9:a6:f9:e0:63:f6:92:ae:0a:34:3c:c1:
         0a:25:3d:cc:00:58:9c:07:13:87:11:93:1d:da:e8:04:3d:0a:
         61:12:49:c5:a5:9d:ca:a2:58:dc:67:81:91:36:8c:95:77:d1:
         6f:f2:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:45 2025 by rpki-client