Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File:                     9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier:          Ge4Rg4D5c1bz0Imj3dBRl4WhdZNsg1fx4qcWPzSmV6g=
Subject key identifier:   59:C7:60:93:56:89:6F:B9:2F:53:D1:3E:C4:49:DC:72:93:32:4C:97
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer:       /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial:       019879AEF90821921EF546B68D61DC290DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 10:02:46 +0000
Manifest this update:     Tue 05 Aug 2025 10:02:46 +0000
Manifest next update:     Wed 06 Aug 2025 10:02:46 +0000
Files and hashes:         1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: mYnnI+OkZWBWQvkbioYeizEBX4GxhPlFokH8QjVe6lE=)
                          2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=)
                          3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=)
                          4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:f9:08:21:92:1e:f5:46:b6:8d:61:dc:29:0d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
        Validity
            Not Before: Aug  5 10:02:46 2025 GMT
            Not After : Aug  6 10:02:46 2025 GMT
        Subject: CN=59c7609356896fb92f53d13ec449dc7293324c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:62:0a:64:17:84:ea:19:2e:7f:89:6c:7e:
                    dc:3c:54:f9:5a:da:27:f8:2a:e7:91:7d:9a:a4:70:
                    a8:90:6f:19:c4:47:5c:1a:09:fd:b5:72:62:47:17:
                    70:17:bc:40:63:fc:8d:66:b9:4e:f0:4a:33:f6:1a:
                    4b:47:ba:ab:f2:ee:72:3a:00:86:c4:7d:37:de:d6:
                    fb:62:e7:08:74:d6:4a:26:a5:81:26:d6:5b:63:39:
                    9e:1a:e8:ee:ae:a5:00:85:56:08:01:90:ea:f6:2e:
                    89:56:72:87:07:1d:70:d3:45:c1:a2:05:e8:4f:b9:
                    88:5f:ce:d0:d8:54:a4:7f:70:c0:dc:53:dd:73:8b:
                    e1:1f:c8:64:90:e4:dd:43:6b:b6:1c:f8:a0:34:88:
                    55:bb:93:70:9a:c8:c4:a6:92:24:d3:48:f6:a8:f6:
                    ba:47:b1:c6:c7:84:3d:da:f8:f5:4a:26:44:2f:96:
                    79:37:59:0c:23:e3:df:4e:e2:ab:94:de:d8:fa:d9:
                    9c:ed:4d:b5:0a:91:c8:27:d8:d3:cc:3c:b0:fd:90:
                    0f:ea:b7:93:b5:58:72:95:50:b5:4a:91:e0:ec:11:
                    cc:32:92:1c:ba:ba:2b:98:d8:81:7c:22:9e:61:5c:
                    a5:01:0c:bc:ba:ab:8f:95:f0:29:d6:8d:e1:71:a6:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:60:93:56:89:6F:B9:2F:53:D1:3E:C4:49:DC:72:93:32:4C:97
            X509v3 Authority Key Identifier:
                keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c6:d0:12:1b:44:bb:2c:24:3e:10:35:c2:2c:d3:4d:63:72:
         04:a4:84:55:c6:08:c9:b9:24:98:6f:06:ec:f3:29:be:5e:23:
         12:c4:5b:da:73:70:42:aa:dd:84:86:75:a5:3e:8a:47:4f:85:
         16:70:f6:e5:30:d0:a4:58:2c:ff:5c:05:43:62:62:2b:d2:ae:
         d9:94:c5:04:b8:1a:bb:9c:9e:e4:0b:f7:e1:70:18:51:52:35:
         d9:cf:cd:39:2a:83:76:5c:05:01:51:e1:96:13:2d:ff:e5:d3:
         74:ea:fb:ae:45:34:d4:37:d0:ff:59:58:2e:4e:4d:b5:2a:07:
         f8:25:8e:8f:ef:67:ff:76:cf:ea:d6:cb:72:64:b9:ef:2e:6c:
         f0:9e:ed:5a:8d:9d:4d:50:26:d0:7a:49:92:f4:b0:84:37:d1:
         02:a1:b2:0d:18:e2:52:79:e2:5e:ec:63:34:62:8f:cb:e1:62:
         5f:04:8b:c5:32:79:4b:66:6e:9f:ee:69:f0:8d:0e:3e:ec:5c:
         e8:5f:d7:05:1e:dd:29:a6:97:b5:a9:c7:6b:07:87:12:7a:fa:
         26:d6:74:d7:29:f6:e3:eb:92:bd:11:94:fd:1b:36:b0:be:f5:
         86:ae:1a:5a:fb:a4:4d:99:73:fa:fe:26:70:8b:2d:8f:7d:e8:
         74:79:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:35 2025 by rpki-client