Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File:                     ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier:          isbxqernPpRW4ERQMF72j3AttpYWlAW8/134x1ommOM=
Subject key identifier:   66:B6:D6:B0:2D:E8:16:12:C8:86:A4:45:EB:35:9A:2C:66:5A:B0:9D
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer:       /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial:       01987B2E0CDE138E2BF7C9B495F4EE7EFD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 17:01:12 +0000
Manifest this update:     Tue 05 Aug 2025 17:01:12 +0000
Manifest next update:     Wed 06 Aug 2025 17:01:12 +0000
Files and hashes:         1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
                          2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: 5fMfGqsd1JROBDm8L7MysgrjgAIx/+xDHDegPMKRduQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2e:0c:de:13:8e:2b:f7:c9:b4:95:f4:ee:7e:fd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
        Validity
            Not Before: Aug  5 17:01:12 2025 GMT
            Not After : Aug  6 17:01:12 2025 GMT
        Subject: CN=66b6d6b02de81612c886a445eb359a2c665ab09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:97:fb:35:2c:d2:f8:39:01:17:8f:b4:13:
                    c1:c8:09:ff:35:81:b5:67:b2:0f:1d:09:5a:04:c4:
                    8b:7a:f8:b9:2e:2e:1f:0e:6f:7c:29:97:63:7d:78:
                    45:01:c1:ab:c0:70:06:98:6c:a3:62:dd:b5:cd:6d:
                    eb:9c:5f:43:0b:c9:0c:ca:6f:a5:61:6d:ea:64:18:
                    e7:71:d5:a3:a6:2e:92:7b:25:68:ce:07:c9:f7:31:
                    97:e9:dc:32:aa:f4:96:f9:a2:35:66:33:cd:37:a0:
                    ca:85:be:20:e0:ed:d6:96:9a:bd:e1:23:e4:3f:16:
                    6c:b6:6e:3a:58:38:81:07:15:d5:a9:a0:9d:04:81:
                    e6:83:87:c4:d7:fd:d9:33:41:68:3a:a3:eb:f9:ef:
                    76:21:1e:c7:4d:0f:2c:2c:a9:e9:2c:6e:77:64:71:
                    5b:c5:b2:de:94:b6:7e:04:ae:4a:07:31:76:e5:06:
                    ab:37:0d:52:e2:82:1c:43:17:2a:fe:80:75:8d:38:
                    4c:05:20:6c:20:0e:90:54:7b:cf:3b:bd:ed:b5:8a:
                    cb:dd:a5:a6:fa:ac:6e:f9:0c:86:9f:ae:f3:a5:26:
                    e0:1d:5f:e2:7d:7c:19:a1:25:e4:75:aa:e0:c6:b5:
                    1e:8e:4a:90:02:29:37:32:70:5a:09:53:d9:72:eb:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:D6:B0:2D:E8:16:12:C8:86:A4:45:EB:35:9A:2C:66:5A:B0:9D
            X509v3 Authority Key Identifier:
                keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:4e:49:df:b8:e2:46:f2:53:15:06:21:3d:7e:80:5d:af:
         07:77:d3:db:64:35:c7:00:39:53:79:cf:a0:b0:27:2d:8e:bb:
         a9:9c:82:8d:34:ab:63:8b:6a:50:a4:74:21:4d:33:6b:38:a4:
         33:cf:8c:22:87:2c:0f:45:8b:43:2b:f8:79:ae:17:2f:8b:3a:
         03:bb:ec:f5:93:91:69:f5:da:ce:16:da:23:5c:18:b9:96:6f:
         33:89:2f:61:f6:d5:65:eb:e1:f3:10:56:54:93:82:b1:bd:dd:
         31:9c:5b:e5:92:ad:0a:7a:04:20:54:2a:76:99:fc:21:7d:b9:
         20:18:ea:49:35:33:77:e3:03:23:8d:f7:6d:ca:22:6a:6e:a7:
         06:b6:e6:64:80:87:39:2e:5b:ca:a5:02:3b:7c:7b:6f:f7:5a:
         93:26:3f:a5:1d:54:2b:6e:02:76:3a:4f:9b:7d:22:18:e1:09:
         82:b7:47:f0:c6:a8:ba:88:2a:02:37:37:05:c3:e7:90:83:94:
         cc:f0:03:25:b3:fd:55:d9:4e:05:2f:63:6d:98:d7:ad:00:18:
         04:11:50:68:43:7f:37:1d:b6:c0:48:fe:0d:af:8a:cf:72:35:
         c6:dc:c2:1b:19:1c:a7:e4:f5:22:d9:ad:dc:71:29:ab:2f:6b:
         0a:55:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:46 2025 by rpki-client