Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File:                     JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier:          azwUI7HLfQwL/381BVJpDqvDMHZssX98uNMIwoOq0gc=
Subject key identifier:   30:E5:D2:28:C7:D8:31:6E:E3:50:8D:D8:50:6E:53:CF:2C:65:0A:6E
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer:       /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial:       0198790838E747C48EA53767913B4CB504BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 07:00:38 +0000
Manifest this update:     Tue 05 Aug 2025 07:00:38 +0000
Manifest next update:     Wed 06 Aug 2025 07:00:38 +0000
Files and hashes:         1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: R5ufVCIjnE0y+CqB3hwn3qCGK26J5sqJOlVrwWqPVrM=)
                          2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:38:e7:47:c4:8e:a5:37:67:91:3b:4c:b5:04:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
        Validity
            Not Before: Aug  5 07:00:38 2025 GMT
            Not After : Aug  6 07:00:38 2025 GMT
        Subject: CN=30e5d228c7d8316ee3508dd8506e53cf2c650a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:a7:e3:41:4b:a8:25:3d:5b:af:f8:a0:7d:
                    80:b0:15:bd:5e:5c:85:27:42:5b:57:25:ad:1f:39:
                    06:6d:ce:76:dd:86:d8:16:95:7e:42:51:64:77:0f:
                    c8:fa:33:f1:fc:5e:ea:cd:db:2a:ac:0a:34:af:e3:
                    ab:9c:04:c9:44:3f:be:1e:2c:26:f7:a1:9d:ef:57:
                    f0:c7:a8:25:fb:a9:45:ec:3e:be:7d:09:b7:70:e9:
                    4d:82:6d:06:2f:d2:8e:1a:20:a7:64:2a:cf:78:13:
                    5a:6d:ab:cf:0c:39:fb:ae:93:2d:7e:43:f4:4d:d5:
                    c3:c4:7b:a3:7d:2d:9c:a9:33:90:e4:c5:d3:5f:e0:
                    8d:3a:24:cb:cc:0a:fe:0b:8d:9c:ab:9d:dc:8e:8e:
                    7a:25:28:db:06:3d:b3:b4:e5:f5:47:b2:bd:70:64:
                    a8:42:10:ac:52:75:ec:88:d3:c1:69:a5:07:37:f0:
                    fd:2c:0b:4f:d5:8b:69:ab:23:4c:4d:82:81:05:04:
                    1d:eb:a8:d4:33:e1:5e:0f:75:9e:fe:c1:71:1f:88:
                    3d:c1:42:35:ad:52:9e:2d:5a:21:66:60:a7:99:e5:
                    b5:f5:bc:e0:be:59:5b:d4:fd:45:04:72:f4:08:8e:
                    13:8e:d4:8b:40:6c:02:a1:c8:c0:8f:82:60:bb:bb:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E5:D2:28:C7:D8:31:6E:E3:50:8D:D8:50:6E:53:CF:2C:65:0A:6E
            X509v3 Authority Key Identifier:
                keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:c8:76:97:62:e4:87:29:c8:bd:aa:15:9f:76:e6:95:e2:
         67:7d:68:ce:b8:2c:eb:6d:29:6a:1a:00:eb:65:92:19:76:d9:
         9d:5d:f4:74:fd:a5:8d:55:7d:3f:2b:e1:46:d8:14:57:6e:54:
         2d:f4:d8:c6:b3:3e:bd:4a:4b:d5:99:ee:7b:02:28:66:06:7e:
         71:eb:fd:3c:43:a1:3b:e3:9d:92:58:74:12:08:4e:82:e5:71:
         5c:76:88:5a:47:49:c5:ba:50:37:4d:04:09:e7:b7:52:d5:cc:
         37:0b:14:9f:28:31:18:7e:6b:34:e1:5e:4d:f9:59:c5:e3:8e:
         91:53:c8:d3:27:f1:8b:df:43:ce:81:82:b9:f4:d5:b6:9e:46:
         1a:14:2f:17:d7:e3:e3:a9:17:51:05:a3:02:6c:29:8a:ae:ac:
         52:b6:0a:6b:81:9d:16:62:39:82:3c:00:8a:5c:09:19:79:9f:
         ba:b5:10:b1:a5:67:56:78:82:2c:b4:ed:6d:19:42:86:92:8a:
         2b:91:6a:04:1d:74:2e:e8:29:6e:c5:49:1f:12:c9:0e:a8:57:
         a3:19:7a:ea:f1:71:61:20:ba:3e:19:3b:73:7c:d8:06:a8:69:
         a9:43:8c:85:d5:24:5f:14:48:06:cf:32:d0:13:45:ed:0b:72:
         db:aa:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:30 2025 by rpki-client