Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          zhJ951e/heBobWDH+lgNAnbG4aYhi+LNxCZO2wXoEio=
Subject key identifier:   6F:C0:B2:32:4A:B5:C9:75:CE:A2:C4:3A:DB:63:BA:C5:58:59:CD:88
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       01988168C3302CCA9490A959D571971D8E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 22:03:03 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:03 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:03 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: CEXGrWB8K3jcd6bYRNwNFHBJtdQTNvYa2t0UW97VTMY=)
                          2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:c3:30:2c:ca:94:90:a9:59:d5:71:97:1d:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Aug  6 22:03:03 2025 GMT
            Not After : Aug  7 22:03:03 2025 GMT
        Subject: CN=6fc0b2324ab5c975cea2c43adb63bac55859cd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:a7:c6:de:e3:73:8f:ca:c4:5a:c6:5e:6c:
                    8e:71:30:54:50:13:8f:5c:71:cf:f3:71:a6:66:03:
                    a7:9c:fc:43:14:23:86:80:07:cf:80:77:8e:34:40:
                    c3:d2:87:1e:76:aa:2f:7a:0c:af:d3:07:cb:94:63:
                    fe:cd:28:5c:da:81:8c:95:76:12:40:7b:33:94:ee:
                    e1:e4:5d:70:cb:41:9d:ac:4d:b3:20:f6:43:d1:2d:
                    d9:0b:5d:85:f1:44:5b:17:45:44:1e:03:12:95:9b:
                    dd:7f:9f:d8:af:67:55:dd:6d:01:cc:41:20:d6:97:
                    c8:66:0e:1b:9e:9a:08:be:99:10:a2:c7:d4:52:16:
                    b3:61:de:b2:78:68:a2:0f:55:6d:ea:d0:0c:8d:e1:
                    08:90:23:2b:6d:6c:14:48:00:22:f6:89:8f:b3:3e:
                    c0:df:b1:3c:39:0c:47:4e:4a:4b:7d:69:e1:10:b9:
                    dc:1a:e5:71:a1:a2:49:1f:03:0f:14:ea:63:bd:d4:
                    15:e8:65:20:54:10:52:bc:f9:0c:c1:49:41:de:8a:
                    0a:b3:42:37:db:b1:9d:78:21:29:3e:41:99:73:42:
                    b2:bc:07:3c:19:cb:86:a4:8a:56:a3:4e:7d:7f:37:
                    bc:72:cc:83:ac:2b:cd:8d:e5:dc:5f:41:79:57:b8:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C0:B2:32:4A:B5:C9:75:CE:A2:C4:3A:DB:63:BA:C5:58:59:CD:88
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:97:cd:f0:49:4e:00:79:32:71:45:0b:de:a2:40:14:98:
         df:f5:f0:f3:3a:54:26:6a:4d:e3:9f:b3:94:e9:08:14:cf:7f:
         89:74:87:ae:67:17:87:ff:16:8c:38:b3:e3:31:0a:89:ce:41:
         88:ec:68:bd:9a:37:ac:bf:e6:05:4a:2d:b4:c6:5d:fb:d8:7a:
         d6:26:66:f6:4a:94:8e:01:63:10:5b:cc:f2:46:63:7e:a0:5c:
         18:02:32:bf:76:db:ea:ed:42:9d:40:28:60:19:1c:70:f0:2d:
         af:32:d3:ba:2b:72:36:50:ea:0f:9f:f0:20:43:83:44:24:4b:
         b1:97:b9:ee:68:cf:19:37:18:c2:56:b7:3d:63:64:e7:44:47:
         ec:fc:ff:3f:91:78:44:3e:7b:85:15:da:cb:94:1d:27:ed:72:
         7e:74:e7:d6:25:18:ef:e7:f0:85:26:87:f1:21:3d:17:b5:d9:
         9f:b5:06:dd:42:69:36:46:7c:1b:1d:fc:85:77:76:6e:ed:af:
         7d:b4:be:76:d6:ba:db:59:43:16:86:8d:44:7e:61:ec:cf:7b:
         f2:1f:d9:d4:91:84:9a:93:d7:12:69:5f:3a:37:47:89:9c:1a:
         1d:ee:b8:9f:0d:2a:f1:01:33:a3:7f:e1:e3:3a:4a:1d:c2:bb:
         2e:c9:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:58 2025 by rpki-client