Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File:                     8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier:          Ub+Z22zqz+QyRA/suQHWX3JH/gbiQ3fW3CqUDqrc3SI=
Subject key identifier:   9B:A1:7E:74:08:29:AE:B6:E6:E1:6E:78:13:33:E0:8D:6F:63:3F:F4
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer:       /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial:       019873E32C989C7F834E6CF544DFF0DD60C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 07:02:04 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:04 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:04 +0000
Files and hashes:         1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: FkrOQ/AevnljDvuJTtHocapuIAmFe3+NevlizjlgGxw=)
                          2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:2c:98:9c:7f:83:4e:6c:f5:44:df:f0:dd:60:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
        Validity
            Not Before: Aug  4 07:02:04 2025 GMT
            Not After : Aug  5 07:02:04 2025 GMT
        Subject: CN=9ba17e740829aeb6e6e16e781333e08d6f633ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:b2:8d:47:07:1a:05:be:2d:4e:97:ee:b4:
                    2d:9d:30:09:66:80:c2:53:cf:70:22:04:0a:41:e6:
                    6d:be:b5:5e:73:50:df:40:e3:76:24:b7:e2:78:11:
                    08:6a:51:6f:00:80:01:0b:82:76:29:bd:c1:bc:8e:
                    12:e1:18:f0:b7:c8:7a:91:8d:ba:3f:a4:63:3d:df:
                    83:ff:68:96:ba:2a:53:c9:9a:7f:f1:e3:46:dd:8d:
                    5d:ff:b6:a2:13:fb:45:10:07:39:c4:a2:21:2a:b6:
                    ad:99:07:a6:ae:ef:4e:f5:ae:2c:aa:a4:a1:36:c4:
                    4e:9d:14:a9:54:02:a0:b0:13:b4:5a:f0:64:5b:56:
                    3d:e8:f4:cd:37:a3:60:8d:3d:15:f2:5d:3a:6f:26:
                    7a:25:c9:7d:62:8c:9d:17:80:fc:ac:e2:c6:c4:d2:
                    69:7b:a4:e1:fd:a8:86:1e:d4:3a:80:06:80:d9:ec:
                    2a:d8:ec:6e:45:c2:9f:65:88:dd:98:4f:66:b7:d8:
                    47:eb:65:5c:16:a0:8a:14:f9:2a:1c:03:db:0f:27:
                    54:41:ab:4c:35:f2:da:b0:f1:71:2d:46:95:90:38:
                    30:97:20:32:5f:73:0d:0d:54:83:8d:c2:d0:fe:cf:
                    c1:64:42:ca:de:fd:05:bf:75:f6:dc:d1:e2:b3:fa:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A1:7E:74:08:29:AE:B6:E6:E1:6E:78:13:33:E0:8D:6F:63:3F:F4
            X509v3 Authority Key Identifier:
                keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:36:12:4d:16:de:0e:c6:ce:18:ee:21:3f:cb:1f:b4:6c:f1:
         43:49:13:ab:50:21:c4:f8:69:ed:7a:20:a3:cf:50:05:8e:c8:
         61:e9:12:35:59:8e:0e:d8:8d:72:ce:1c:18:05:ea:9e:6e:b8:
         1e:81:31:41:78:c1:20:a3:ea:f0:5a:bc:f1:b0:cd:9e:40:80:
         90:ee:bc:e5:6a:a6:29:2c:7a:09:e1:48:72:ee:ca:aa:84:ad:
         e3:41:7a:08:10:d1:de:f3:98:5c:bd:2f:4f:0c:94:9d:23:80:
         c1:6f:65:83:35:6e:e5:bd:33:10:fb:f8:5c:5a:f1:96:e3:33:
         2c:99:5e:8e:0b:e2:99:4a:30:7a:6b:43:29:ca:20:c2:c5:46:
         2e:d5:f6:0a:e1:83:26:13:fb:41:ab:3a:9f:89:43:9c:26:fe:
         4c:75:64:7d:81:e5:2c:5d:d3:3f:1d:09:8d:93:30:80:c5:27:
         c0:5c:9d:70:09:85:84:82:41:31:74:6c:5b:aa:ad:7d:71:4d:
         f0:44:55:b5:d8:dd:11:d3:45:4e:9e:52:26:40:86:ea:c5:f7:
         27:46:9b:a5:94:bf:e7:d2:4a:f8:da:24:11:48:d0:81:7f:0d:
         df:b0:ba:01:6d:a0:7d:67:d6:75:cd:9d:b3:4f:ee:1a:c1:2f:
         f2:43:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:03 2025 by rpki-client