Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File:                     Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier:          ELm1MawEa8rus/ga8Xqq5rmwnBp3PFldyDOYHzYfH+E=
Subject key identifier:   03:A7:AA:88:5E:3A:3E:C8:E4:D7:A8:AD:D9:BD:3D:58:56:87:27:5F
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer:       /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial:       019891B598C4423D571DE677512713C3D453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number:          161F
Signing time:             Sun 10 Aug 2025 02:00:53 +0000
Manifest this update:     Sun 10 Aug 2025 02:00:53 +0000
Manifest next update:     Mon 11 Aug 2025 02:00:53 +0000
Files and hashes:         1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
                          2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: RQ1uPVTD6CqhX65d/+RiPfJR3M+QMLWYn/8gzuovIt8=)
                          3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
                          4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:98:c4:42:3d:57:1d:e6:77:51:27:13:c3:d4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
        Validity
            Not Before: Aug 10 02:00:53 2025 GMT
            Not After : Aug 11 02:00:53 2025 GMT
        Subject: CN=03a7aa885e3a3ec8e4d7a8add9bd3d585687275f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:22:a5:f6:05:f1:d2:d6:d6:7d:42:6c:71:
                    bf:09:c1:86:7f:18:7f:5a:8b:72:1c:72:3c:56:59:
                    d7:7e:b2:cc:83:b1:a9:0d:5d:2b:f4:10:8c:9c:73:
                    4c:9b:bc:6c:67:e8:41:c7:6c:f2:bf:a4:a9:ac:24:
                    8e:70:e5:30:40:3f:4f:51:b3:51:67:be:cc:f9:83:
                    28:1b:5b:65:1d:00:d4:0d:ed:5b:69:db:5a:e8:77:
                    12:f6:09:15:93:b7:30:2c:d2:03:4e:60:54:46:c4:
                    58:76:c7:ec:f0:62:33:97:24:86:5e:29:4d:21:89:
                    1d:1b:14:e9:4a:70:43:88:ea:42:52:7c:f7:de:02:
                    83:0e:43:6b:98:fc:ec:66:0d:4c:1a:78:4f:7b:8b:
                    1a:10:f7:76:4a:85:73:0a:cc:39:0c:22:53:5a:05:
                    60:c3:e3:c2:e0:a0:f5:ef:99:d1:bf:fc:f3:27:74:
                    20:e6:0a:40:ee:da:89:dd:ed:18:a3:08:7c:d1:68:
                    fc:a5:84:f1:04:f2:02:cf:95:58:31:9d:fd:b1:52:
                    52:b4:7e:0f:ee:fa:5e:79:36:7a:7b:64:22:d1:cb:
                    c7:08:99:56:2c:48:57:a4:22:c8:a4:e6:f7:39:49:
                    35:3a:51:6b:fe:29:c6:ea:b0:ba:81:7f:e7:b0:12:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:AA:88:5E:3A:3E:C8:E4:D7:A8:AD:D9:BD:3D:58:56:87:27:5F
            X509v3 Authority Key Identifier:
                keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:05:3e:a5:b5:55:bf:9d:8d:65:ab:3c:ec:b0:92:40:0c:ae:
         bf:ad:64:da:0e:61:77:13:79:be:1d:ca:b3:c0:48:9c:a8:1e:
         4e:99:3b:6c:9f:c8:b5:fb:06:38:d3:59:f4:0d:70:f4:9f:e1:
         e6:42:aa:c7:40:7f:c2:eb:a8:c9:2d:c5:5f:95:93:34:01:71:
         68:f7:ef:3d:bc:5d:4e:bb:1d:97:32:c0:fa:5a:97:01:a3:4f:
         78:cd:60:04:a2:4d:90:93:f9:26:a0:be:ec:8c:48:98:13:92:
         1f:aa:76:85:93:d2:bc:f7:e4:a0:0f:6e:b4:f4:9e:03:1a:ae:
         d8:f3:e7:66:a1:08:29:d8:5b:2d:1b:15:8e:3c:1d:f0:e0:d6:
         4f:51:51:6c:2c:f9:33:d0:84:c4:2b:2a:5a:b3:d7:09:ba:dc:
         b5:22:ab:a4:ff:cb:c3:b6:4a:77:45:74:fb:28:79:a1:26:e6:
         b7:7c:c1:bf:e0:a1:f7:70:63:3b:66:f5:5b:f8:54:ad:c4:d3:
         10:e6:c0:bb:6e:55:a8:5f:5d:16:b9:d7:80:21:40:ff:7b:44:
         7b:dc:ae:e0:b8:51:7e:f4:cd:66:a6:62:7a:31:e4:d7:5f:92:
         f6:99:44:69:e3:2f:3c:d8:7c:c9:3b:48:af:12:75:ec:84:73:
         38:fe:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:28 2025 by rpki-client