Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File:                     7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier:          gQrNJ0mNZuwZBWnjMW0D+1QVTCUtZOIN7hLTowLHhFE=
Subject key identifier:   C4:C8:60:A3:14:D8:C1:D3:01:E3:AE:05:D6:55:F3:B5:3E:48:0B:70
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer:       /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial:       01987DC11D9008648FBCDFCCD6CAB1446775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 05:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:04 +0000
Files and hashes:         1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: mXyWZwZUXRgJhl9LyzzR+ZuiQPh1o6N7JVG4vgh8Too=)
                          2: F0v3ZdAWJMgM-NX7fWdPVPvmHtw.roa (hash: 5lz4KZFI8B9Thk9y5Q0cmh/EUM6SOuSnTkJHbk1d9g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:1d:90:08:64:8f:bc:df:cc:d6:ca:b1:44:67:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
        Validity
            Not Before: Aug  6 05:01:04 2025 GMT
            Not After : Aug  7 05:01:04 2025 GMT
        Subject: CN=c4c860a314d8c1d301e3ae05d655f3b53e480b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:5e:b4:f3:79:5e:f4:06:2c:25:38:50:bd:
                    88:6c:06:ed:c1:da:43:07:4e:81:7d:15:a2:11:8f:
                    4d:b6:71:bb:a4:9b:01:af:34:17:8c:2f:d3:ce:33:
                    f6:3a:a1:93:4a:2c:1b:63:68:68:20:fe:ba:27:fa:
                    7b:7b:60:0a:f1:d0:70:d4:ef:c5:e3:05:c4:14:20:
                    ce:c2:71:c0:ef:4d:22:0e:af:c8:48:62:4b:4d:a7:
                    8c:90:82:7e:50:d3:c0:6c:1e:38:25:33:75:36:4b:
                    93:2f:e6:3d:bd:e8:02:6f:eb:f4:b4:7b:1c:98:36:
                    e0:f2:c5:c2:bc:cc:2a:f5:a2:0a:7d:1d:66:5c:f9:
                    be:ad:c5:2b:e5:d7:6f:98:4d:fc:c8:63:8e:96:1d:
                    6b:ec:fc:e0:78:d5:fa:89:e1:c8:9f:84:02:a4:05:
                    9a:5e:50:29:7d:74:2a:20:f7:9e:52:08:9a:f7:70:
                    72:86:85:b6:38:30:0f:f5:4e:dd:98:81:ae:2d:59:
                    98:4f:be:33:78:74:9f:18:82:59:48:52:68:ec:89:
                    c8:1a:c7:2c:7c:d4:5d:6c:7e:7f:2d:32:e2:35:10:
                    54:0f:9e:9d:48:ca:d2:59:0a:63:53:24:bc:d4:bf:
                    9b:43:3c:93:22:99:a4:10:cf:35:4c:de:8e:ad:2f:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:60:A3:14:D8:C1:D3:01:E3:AE:05:D6:55:F3:B5:3E:48:0B:70
            X509v3 Authority Key Identifier:
                keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:27:ec:75:77:4b:b3:02:b6:c7:5a:6f:21:be:04:3d:1e:
         ed:78:66:7e:00:49:94:60:54:d3:5f:e7:d5:48:1f:82:b2:e7:
         91:ae:58:ca:41:6e:32:ad:ba:32:54:4b:df:a2:04:2a:d9:64:
         a0:70:fd:e6:b7:66:f7:19:98:cf:62:24:17:05:e1:c2:08:eb:
         cd:94:df:d4:94:e5:5e:00:47:f7:a8:16:3c:ab:d3:da:dc:68:
         b8:6c:6e:60:a7:08:64:6c:55:a2:6b:72:e8:23:27:98:da:af:
         c5:24:e0:83:70:5b:a2:1b:81:50:de:94:0e:01:22:30:9e:0c:
         be:cf:09:0c:72:e7:fb:1b:ca:97:c6:14:f2:c4:d6:cb:8c:20:
         f2:f6:26:c2:36:57:86:58:5e:2f:46:14:62:fa:b9:8f:33:99:
         ed:81:9a:53:6e:45:4e:74:c3:6b:6e:2d:88:32:72:c2:a3:f1:
         2d:5c:cb:74:a8:d8:69:ae:d8:73:ab:20:1c:3e:1c:d1:1c:0f:
         9d:e1:ba:5b:e3:d0:b4:35:56:e4:33:9e:65:96:7c:bd:43:12:
         4a:70:c5:7d:28:5b:f9:2c:31:dd:56:53:f3:45:16:12:39:f2:
         aa:88:2f:d8:cb:d9:46:d7:8b:aa:4b:0f:cc:6c:bc:cb:d3:2e:
         cf:fc:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:04 2025 by rpki-client