Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          cbUSOxPoKVe7BbOd54IHXjRiHkEP/171myBfXtgUJSI=
Subject key identifier:   AC:54:53:8B:66:BE:55:35:0A:9B:13:80:09:E0:66:B2:5F:FF:7F:2D
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       019875D10A47FDE62776B415E8453A296188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          161E
Signing time:             Mon 04 Aug 2025 16:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:30 +0000
Files and hashes:         1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: 1HbCcl3xXZvADgsDbGAKcdU8M+vbvAvch4S3nBY2fps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:0a:47:fd:e6:27:76:b4:15:e8:45:3a:29:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Aug  4 16:01:30 2025 GMT
            Not After : Aug  5 16:01:30 2025 GMT
        Subject: CN=ac54538b66be55350a9b138009e066b25fff7f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:db:45:b7:58:c1:14:15:cc:c0:f5:a8:7c:
                    65:eb:0c:73:68:d5:82:1d:0d:18:d8:8b:ce:06:3e:
                    0d:c9:0b:d0:d3:26:6d:e4:fd:aa:94:77:83:01:30:
                    fd:cb:2b:7e:54:7e:ca:34:c4:69:75:87:a1:d9:71:
                    02:48:bb:bd:67:b0:02:e0:08:5f:d9:d0:43:68:64:
                    92:22:bf:48:83:04:16:7c:a1:30:75:8e:da:63:ff:
                    6f:0e:d9:c0:39:61:2d:bb:25:08:aa:f2:2b:73:a2:
                    7a:3e:af:fe:2d:e7:c6:71:2a:fb:74:20:9a:df:4a:
                    ee:47:9b:c8:80:25:ce:79:ed:fc:23:0d:a1:be:ca:
                    1c:a6:e1:ee:52:a3:5e:7f:1d:fe:c7:ca:d2:eb:b8:
                    fb:d7:92:2e:98:61:4d:2e:dc:85:c6:1a:8a:87:c1:
                    65:92:7b:4e:e6:b6:61:c3:04:b6:19:9d:52:2c:76:
                    2a:f3:c0:5a:c4:88:e9:df:39:0c:ec:8f:b0:a6:f3:
                    f4:5f:97:3e:99:4f:23:76:2c:bf:ff:fd:af:71:1c:
                    87:1e:e5:56:27:3e:e4:ae:d3:83:f7:6a:a2:cc:00:
                    2a:fb:84:26:cc:cd:5f:d3:f8:c9:73:55:72:4d:d4:
                    7f:da:43:4c:08:19:0e:ea:52:70:9a:99:50:e1:87:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:53:8B:66:BE:55:35:0A:9B:13:80:09:E0:66:B2:5F:FF:7F:2D
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:ee:10:bf:18:27:98:fe:1e:0a:03:58:3c:29:3f:0b:56:
         19:14:de:16:b7:62:00:88:2c:d9:14:02:5d:d1:40:3a:63:e0:
         c8:dc:26:16:4b:19:15:36:c5:f2:25:8b:b5:44:3f:cb:d2:49:
         a9:a4:a3:74:f2:ea:6a:44:cd:42:95:91:bc:5a:1d:9a:8b:4c:
         6a:fc:fc:fc:87:e4:03:9b:61:2f:8e:0a:79:87:13:f8:50:e0:
         51:74:53:70:05:57:39:cd:c8:d4:9b:84:29:59:98:20:a5:ff:
         d0:26:62:31:20:96:bf:48:ac:c8:ad:28:02:49:16:73:2c:25:
         7c:81:15:8d:ca:9c:15:72:af:fe:73:3b:63:0e:6d:02:0c:ae:
         a0:dd:ba:d8:e4:65:a8:6c:b5:32:48:b5:30:3b:72:5b:40:e5:
         54:7c:f3:82:6f:ef:62:81:75:54:51:e9:36:bc:9a:f5:19:4c:
         43:44:37:eb:be:6e:b6:96:a6:d1:84:68:d6:7e:c4:32:0e:83:
         d8:9f:ba:df:14:b7:e8:0e:5a:56:1f:fb:58:85:62:05:55:0c:
         4b:4d:b3:f5:b9:86:fa:33:fc:56:2c:b7:17:5e:dc:2e:fa:bc:
         85:9f:a4:e5:19:b2:7c:61:2a:00:45:2c:72:fb:69:a7:a8:b8:
         41:9b:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:50 2025 by rpki-client