Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File:                     iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier:          1IiG4oWSWj+iN7RELXSMTFTN1OqaLBR8o4KHRRszbBM=
Subject key identifier:   2C:DC:5A:EF:D9:F9:74:96:91:66:1D:96:E7:97:96:CD:A1:EE:BE:32
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer:       /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial:       01987975FC7F7544A1ABDEFE3FE7BF8B8151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 09:00:32 +0000
Manifest this update:     Tue 05 Aug 2025 09:00:32 +0000
Manifest next update:     Wed 06 Aug 2025 09:00:32 +0000
Files and hashes:         1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
                          2: hdbWZzPv8mKL7ila4Mhuuk01Www.roa (hash: CfHG1SiNzylmV2mCUzoHK+y9CvaZseJUgqyvhhx1NeI=)
                          3: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: OnzZaLUSA/5HMGVxfRPgxOA+dI5RUItcfvQlJc73neo=)
                          4: rO9T6t_WHUnkGmIleBFSGRnlKnY.roa (hash: wcBWF7o7prWlR7s8a04nO9bFFc8bqPRJlh3HL2eDAqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:75:fc:7f:75:44:a1:ab:de:fe:3f:e7:bf:8b:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
        Validity
            Not Before: Aug  5 09:00:32 2025 GMT
            Not After : Aug  6 09:00:32 2025 GMT
        Subject: CN=2cdc5aefd9f9749691661d96e79796cda1eebe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:55:c9:86:5a:1c:5f:c6:26:1a:bf:19:29:
                    d2:10:08:79:ee:ef:8e:67:d7:8d:df:0b:fe:f1:7f:
                    66:8b:21:36:61:1e:fd:72:40:54:75:31:85:63:ee:
                    d8:69:0b:bb:ad:b8:aa:e9:8a:ba:6f:08:31:cc:2f:
                    0a:c6:ce:d5:d2:83:cb:6c:66:a6:b2:11:a2:45:b7:
                    ae:e9:20:dd:4a:ba:dd:6c:ca:cd:4f:df:8d:31:22:
                    b1:8c:68:fa:78:f8:9d:e9:b1:4a:93:5b:4f:f9:44:
                    91:4b:df:c9:5b:08:c3:c5:cb:2d:93:e8:78:8b:29:
                    6a:f2:12:c5:d7:1f:1d:77:91:86:e2:c2:d8:3b:7d:
                    c7:b0:ec:45:a8:ee:5a:be:3b:3d:c3:e5:ce:d3:3b:
                    71:51:d2:7d:51:89:b1:f3:c9:ec:e9:55:fe:c3:a2:
                    e3:f5:8d:9d:bf:7e:77:83:20:13:e7:9e:c6:79:41:
                    6e:19:c2:7f:35:3d:58:30:4e:30:85:4a:52:11:27:
                    a1:96:5d:94:fb:ad:33:0c:b7:ef:ac:a5:b3:ed:4a:
                    77:ba:11:b6:a9:a1:0f:09:bc:2d:82:c1:72:a0:d3:
                    9e:f2:d2:04:59:b3:f0:a7:4c:ca:75:1e:99:85:67:
                    0e:a9:97:61:01:f7:8e:88:5f:1e:13:44:6c:05:cb:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:5A:EF:D9:F9:74:96:91:66:1D:96:E7:97:96:CD:A1:EE:BE:32
            X509v3 Authority Key Identifier:
                keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:ea:41:c6:d4:bc:4b:58:d1:33:7a:46:ee:c1:1f:ed:28:
         b0:fb:d8:ce:ee:97:33:c7:ea:f1:0b:35:a5:ed:c3:36:d8:19:
         93:7e:ab:0f:9f:a3:b3:fc:a7:af:c6:8a:da:7b:2e:2d:2f:72:
         b6:eb:ac:5e:48:5a:29:32:14:a8:88:63:08:e0:85:22:c2:fc:
         03:8a:40:5b:ec:17:ca:e4:a7:c0:a0:65:e4:07:f7:73:e8:4a:
         51:68:b8:ec:60:56:e1:5b:3c:35:47:e0:86:fc:6a:39:ca:d9:
         6f:ae:3c:56:cc:18:44:51:1a:53:05:40:64:11:27:69:46:77:
         ac:93:09:ee:10:63:fa:64:49:a9:7b:61:89:cb:f0:12:6d:9d:
         eb:ed:14:08:ec:8a:3d:77:6a:81:d3:07:a2:b1:ac:8d:35:ee:
         dc:72:66:96:48:8e:8d:87:3a:84:26:38:3b:c3:03:d0:7a:08:
         09:56:cb:0b:bc:66:7a:b6:bd:4b:c4:0a:19:f7:38:a5:f8:51:
         07:52:2d:b4:c6:3a:42:64:ad:99:71:2d:ab:cc:3b:8a:c3:2f:
         90:c1:f2:bb:ec:ee:87:f5:8a:05:92:37:1e:2e:b3:e2:ae:95:
         f4:81:69:26:46:55:7d:ba:89:6f:14:8a:e6:21:73:57:67:a6:
         24:d0:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:26 2025 by rpki-client