Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File:                     c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier:          5FyZ2Nb90PwK5nHg7EW7uZGZCTxBxEDUmtYxnQkpaoo=
Subject key identifier:   B2:AE:5A:9E:86:88:D3:2C:CF:01:65:D8:ED:1C:19:69:66:F8:30:4D
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer:       /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial:       0198824324F6BDCC99F134C49E0EF75ACACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number:          161F
Signing time:             Thu 07 Aug 2025 02:01:35 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:35 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:35 +0000
Files and hashes:         1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
                          2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: X+ufan/paDlcdRaOhei+/ocI/f3YFRVYM/OrJppCHSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:43:24:f6:bd:cc:99:f1:34:c4:9e:0e:f7:5a:ca:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
        Validity
            Not Before: Aug  7 02:01:35 2025 GMT
            Not After : Aug  8 02:01:35 2025 GMT
        Subject: CN=b2ae5a9e8688d32ccf0165d8ed1c196966f8304d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:5b:de:99:23:64:11:27:12:22:49:da:c9:
                    e3:69:f4:a7:ed:12:c3:7b:a4:a2:4f:4b:13:65:55:
                    43:74:6d:32:93:e5:b6:16:e5:5d:18:0e:6f:79:31:
                    70:57:08:44:a7:1d:29:f0:0f:e1:8f:97:d3:b9:e2:
                    b1:b0:46:f6:59:88:12:75:64:ed:51:fc:e4:09:7e:
                    5b:a7:9c:1d:8c:d2:d1:d1:78:b0:09:ec:f2:e1:d4:
                    a2:49:65:4b:a1:ac:ad:21:52:a1:fb:15:78:47:37:
                    36:ed:18:cc:1c:78:fd:23:f5:ce:cb:12:43:b2:3e:
                    85:01:ef:14:6b:7a:52:f2:e2:17:ad:ad:b1:92:36:
                    34:7d:81:08:59:54:82:55:a2:29:58:65:24:a2:12:
                    3c:1a:b0:9e:d1:f7:4c:85:ba:d3:51:0d:4f:40:b8:
                    3b:f7:e1:44:65:5e:8e:cd:0c:f0:c3:a7:34:21:22:
                    b2:8b:99:2f:0d:36:fc:91:72:45:4f:87:91:37:a0:
                    25:2c:23:c6:bf:0f:2e:f1:3a:f3:37:b3:9a:75:ae:
                    01:57:58:81:2c:3b:0d:ed:2b:50:90:6c:1d:71:ba:
                    20:83:9f:e8:9a:ef:b1:4c:52:57:e2:64:99:1b:94:
                    a7:3b:ee:07:a2:d1:31:c6:e6:6f:2e:8f:fa:58:86:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AE:5A:9E:86:88:D3:2C:CF:01:65:D8:ED:1C:19:69:66:F8:30:4D
            X509v3 Authority Key Identifier:
                keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:b8:5a:d3:9a:d1:8d:93:db:51:14:45:6c:83:c7:a0:b3:
         f0:da:e6:8a:9e:15:dc:cb:27:6a:57:03:57:50:51:ce:b2:8d:
         59:c9:95:87:72:9e:cc:74:43:d7:4d:fb:8b:0b:38:55:58:a4:
         6d:26:d0:bc:07:12:d2:51:0c:35:58:a5:6f:27:fb:1e:cb:d3:
         34:35:3a:63:3e:87:ff:de:67:01:5c:28:e5:09:e6:29:da:7c:
         f8:c4:8a:15:7a:6e:27:4b:66:6a:8d:d4:61:6a:d1:66:67:48:
         50:46:c2:ef:62:ac:e1:17:36:31:df:7a:d2:cd:95:00:c8:38:
         e1:16:0f:38:e3:16:e0:ca:dc:31:4b:8c:2f:8d:bb:9c:5e:eb:
         0b:c6:f1:3d:05:04:60:c1:fc:e4:3e:e9:84:ab:54:eb:ff:20:
         15:32:e7:af:82:24:5d:44:c5:76:df:07:38:a3:a4:28:f3:57:
         84:14:aa:ae:65:c2:0f:b6:34:08:c0:68:54:9a:24:ac:e9:8d:
         88:df:85:9c:43:a2:aa:0e:6c:f6:ca:59:27:18:14:87:ae:ab:
         f0:80:be:7c:3a:4b:b5:ab:d8:26:78:db:7d:c2:ea:6d:aa:56:
         0f:a9:92:b5:50:a0:8a:4a:6d:bb:d5:16:49:3f:dd:2f:83:c9:
         4e:13:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:42 2025 by rpki-client