Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File:                     dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier:          P9JRetSo3REBqnKI/5S6cxqSsvNUsTC7j3mD+J4TzN0=
Subject key identifier:   8C:F5:57:81:AF:56:95:32:43:EF:B5:FF:AB:F8:AA:79:9F:3B:69:33
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer:       /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial:       019881D4927BF9206F19EC39B500C9A8E9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 00:00:48 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:48 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:48 +0000
Files and hashes:         1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
                          2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: q74fskyWfLoQ8NG0DuPXWs4IveKC69bnj7BOuNuNwv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:92:7b:f9:20:6f:19:ec:39:b5:00:c9:a8:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
        Validity
            Not Before: Aug  7 00:00:48 2025 GMT
            Not After : Aug  8 00:00:48 2025 GMT
        Subject: CN=8cf55781af56953243efb5ffabf8aa799f3b6933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:62:e6:86:21:0c:41:a0:7b:c1:fa:e5:ff:
                    0d:91:e6:b8:3d:45:7a:61:f6:ce:13:ce:35:c8:90:
                    2d:f9:82:b2:3b:0f:7a:f8:eb:df:a7:cf:8a:52:92:
                    cf:e1:6b:44:7e:a9:c1:b4:e3:30:4d:85:0c:ce:13:
                    04:6c:30:96:4b:67:e5:57:95:53:c1:8a:05:b3:2e:
                    1e:a7:1e:f7:50:4f:f4:0c:da:d9:f0:65:d1:15:c3:
                    99:b8:1d:0c:a5:f8:ec:94:61:30:3a:ce:15:ec:ca:
                    17:6b:86:1f:43:df:1b:d3:9c:0d:aa:29:54:9a:ed:
                    e7:b3:0e:44:d8:4b:e6:a7:91:16:d8:c9:b6:8d:20:
                    de:1c:81:63:cd:3d:d4:13:91:92:09:d2:a7:01:56:
                    52:32:87:4c:1f:da:69:71:63:68:9f:33:77:e5:e2:
                    5f:73:00:fd:da:11:a1:4f:e0:21:ba:75:28:b9:24:
                    41:bf:b5:9b:a7:b8:bf:e1:13:52:72:8d:60:8c:18:
                    6e:d7:2b:8f:56:7e:b3:dd:c4:1f:75:8e:b0:d1:95:
                    5f:05:8c:30:3f:7b:a0:25:6b:2b:5a:6e:0e:da:57:
                    07:0f:42:2f:42:87:b5:83:5a:81:a8:a1:a0:b5:f2:
                    40:a9:76:db:75:25:fd:bc:c3:21:f3:9e:b4:05:2f:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F5:57:81:AF:56:95:32:43:EF:B5:FF:AB:F8:AA:79:9F:3B:69:33
            X509v3 Authority Key Identifier:
                keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:40:d7:a2:b5:c8:45:67:a9:d1:a7:93:3a:e1:8b:9a:38:
         bc:aa:f4:97:ad:d3:b1:28:f8:a7:b1:75:7d:cd:46:8d:1f:99:
         7d:e6:36:1f:8a:0c:0e:34:22:e3:81:f1:6c:fe:f7:fe:61:e7:
         5f:4b:34:28:a4:9b:d4:c3:53:35:12:d6:9d:3e:49:e5:96:28:
         85:60:47:5e:54:6b:dd:f5:d4:47:02:9e:4d:cb:f8:d6:78:0d:
         56:18:36:06:06:b7:78:5b:c5:73:12:94:a1:cc:bb:8c:2d:51:
         37:b4:19:8b:3a:9d:33:5b:ab:16:51:a5:93:41:e6:b8:41:a2:
         6d:9f:19:24:45:ed:31:c0:25:26:c7:ed:ad:9f:3d:b0:e2:62:
         0c:77:48:88:35:dd:5f:e5:f2:c1:cb:61:c8:b8:99:bf:bc:da:
         bc:b6:66:8b:2b:4c:4f:1b:e8:8e:52:39:ac:d2:17:ba:e9:7e:
         7b:c5:a4:03:56:73:bb:1e:64:e8:74:7a:60:ab:e5:31:15:08:
         77:79:3d:2f:0a:5e:68:7b:33:15:e6:bd:b6:a2:49:79:97:ad:
         9c:29:35:e1:49:6f:87:78:b5:8b:0f:b3:26:34:b2:a8:06:42:
         2f:0f:50:c6:08:5c:e4:49:f9:db:57:e5:2f:c9:fc:dd:b0:50:
         62:a5:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:43 2025 by rpki-client