Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File:                     ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier:          XzaiwTh1g5frDk4pUhDPSUY3OEHS64glJnCIc3hLKKU=
Subject key identifier:   9C:C1:EF:A1:C7:D7:67:B7:B9:4A:D1:CF:96:E1:0B:FB:64:06:A5:64
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer:       /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial:       01987C40419A6530222664F3932ECE97A694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 22:00:42 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:42 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:42 +0000
Files and hashes:         1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
                          2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: ZrzMA/LY+QdfFh0J0nRp3uru2K6aVtQ96BCT31k/1LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:41:9a:65:30:22:26:64:f3:93:2e:ce:97:a6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
        Validity
            Not Before: Aug  5 22:00:42 2025 GMT
            Not After : Aug  6 22:00:42 2025 GMT
        Subject: CN=9cc1efa1c7d767b7b94ad1cf96e10bfb6406a564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:d1:6c:cd:67:26:72:2e:be:be:05:be:cb:
                    cb:24:36:96:23:bc:df:e1:b5:76:cd:bd:93:47:c1:
                    ce:dc:a0:2d:98:94:6c:91:4d:ea:28:76:0a:1b:6a:
                    97:4a:54:9e:4a:92:0f:92:63:96:47:5d:d0:6b:a6:
                    d3:02:52:b4:eb:a7:31:c7:82:4a:ae:c6:39:9a:41:
                    4e:c2:ed:1e:d2:bb:d9:b8:91:f8:19:0d:98:02:96:
                    c7:a3:61:e5:20:15:4d:e6:0f:f0:eb:d7:0d:d6:c2:
                    b3:83:46:c3:cf:fa:77:48:53:0b:52:77:3f:6a:05:
                    d9:ad:22:1b:12:5e:b0:e0:6f:8f:2c:ec:f4:25:ff:
                    39:f0:bd:f4:bb:d6:57:1e:18:82:2e:5b:71:99:c8:
                    c4:70:31:74:64:c4:60:58:5a:fe:78:39:93:b4:9a:
                    d8:9c:40:fc:82:d7:50:57:ab:b7:96:f7:a0:d8:98:
                    16:3a:0d:25:7a:e8:bc:7a:90:b9:94:b2:0a:88:e2:
                    1c:48:89:85:84:57:1a:71:12:b0:eb:a9:e9:49:04:
                    11:97:92:b6:88:ea:6d:a4:f6:7c:84:5e:b1:62:90:
                    ce:e4:d1:d9:fc:d9:cc:2d:f1:74:0e:b3:6c:fe:02:
                    73:35:cf:d5:cd:d7:e3:23:e5:e9:99:41:39:54:9a:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:EF:A1:C7:D7:67:B7:B9:4A:D1:CF:96:E1:0B:FB:64:06:A5:64
            X509v3 Authority Key Identifier:
                keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:32:00:da:eb:18:f8:02:3a:4c:7c:11:a9:91:96:fd:99:74:
         d8:54:34:52:fa:71:67:61:e0:70:89:b1:40:44:a8:89:9a:a8:
         7e:73:03:46:cd:8f:ea:4a:65:e5:de:83:9f:66:c5:15:5d:a6:
         ab:87:7a:0e:b3:4d:93:c0:d6:23:59:85:7f:bd:78:f9:42:59:
         80:51:cb:a9:96:5a:47:55:96:f8:70:9a:08:1f:16:e3:ba:e3:
         10:14:6a:51:61:7b:0c:93:1e:66:6b:be:b8:56:1e:d2:7a:c6:
         ac:f1:b9:36:93:54:83:4a:d6:28:d0:f2:4f:cc:8f:ec:22:d0:
         0a:63:0b:4b:2e:02:ff:fc:81:09:92:0e:4b:3a:44:d6:57:f7:
         4e:0c:a1:e6:29:5a:7d:18:48:c9:15:ce:f6:d5:8d:13:89:56:
         93:fd:b6:22:7e:bf:1e:51:f9:c7:e4:13:b8:ed:bb:62:11:71:
         e5:2b:4b:63:3d:79:cc:e4:a5:59:5d:17:6b:ad:bf:4c:49:ac:
         fe:19:64:76:ab:cd:74:fd:5d:00:9a:34:fa:5e:de:89:0d:1c:
         73:1a:a1:c8:8b:26:94:92:57:d8:af:41:0c:c2:d9:2c:84:a8:
         8a:10:83:76:19:dd:3e:ed:f9:e6:4a:87:7d:e8:4e:f5:70:9a:
         ff:41:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:28 2025 by rpki-client