Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File:                     b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier:          JhQpLsRom2J9GXmALc8ve5jMwfr8KTVgmfrI/PWkRzs=
Subject key identifier:   D5:E9:47:7D:7D:61:A1:97:85:78:A3:EF:7B:3C:21:70:33:86:90:B1
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer:       /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial:       01987FE7285635B42280AE2FE4350442D414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 15:01:52 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:52 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:52 +0000
Files and hashes:         1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: Wpyj/5PkKAMhbFKVTNGVze9sfD/Ko6c7FNV1sUfgqP4=)
                          2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
                          3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e7:28:56:35:b4:22:80:ae:2f:e4:35:04:42:d4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
        Validity
            Not Before: Aug  6 15:01:52 2025 GMT
            Not After : Aug  7 15:01:52 2025 GMT
        Subject: CN=d5e9477d7d61a1978578a3ef7b3c2170338690b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:84:9e:7c:25:f1:fa:6b:fe:a9:34:ab:90:e3:
                    2b:72:99:c1:17:00:ee:82:f3:52:1f:7e:7e:bd:c7:
                    7d:f2:d4:e3:27:03:c9:c7:3b:61:8e:ac:f1:6e:5c:
                    bc:cb:85:7d:b4:95:a3:0f:15:d5:db:20:15:d7:e8:
                    6a:30:14:6c:da:8a:1d:ce:29:92:75:2e:f4:25:01:
                    c2:f4:41:58:1b:f1:ef:80:05:3d:51:c1:d2:7c:85:
                    49:b5:2c:e1:79:1a:5e:0b:2c:33:54:99:1e:01:7c:
                    c7:1e:06:05:fb:39:ba:d2:28:bb:a6:ad:cf:1d:40:
                    91:60:26:2f:2e:92:aa:b7:5f:74:49:c9:49:cd:bd:
                    f8:75:6b:4b:35:09:af:d5:97:9a:51:31:e6:c1:33:
                    22:56:3c:b5:24:b3:98:30:02:e3:33:68:f4:0e:51:
                    a9:67:d7:9a:9e:a0:e9:5d:1c:99:51:e6:d2:ef:53:
                    54:3d:86:90:79:56:05:38:4e:7f:61:1f:4f:ea:a4:
                    10:ca:81:0d:d1:9c:60:02:dc:da:51:c3:ab:5f:7e:
                    0c:86:ca:31:1c:79:1d:ba:0a:43:41:c4:22:93:93:
                    89:72:af:4d:2d:06:0e:e2:2e:ad:ac:5e:51:04:41:
                    25:ee:13:7f:a3:9d:e1:f2:93:93:02:09:b2:c9:36:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:47:7D:7D:61:A1:97:85:78:A3:EF:7B:3C:21:70:33:86:90:B1
            X509v3 Authority Key Identifier:
                keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2c:7e:91:47:a7:97:c8:47:02:2b:f1:89:1c:04:6b:a7:81:
         e4:0e:f5:7c:fc:6f:e7:a7:2e:d3:36:1f:ba:3e:fd:b2:51:6b:
         6f:97:27:e6:8d:6a:d9:ab:e8:c8:e2:03:32:76:49:cb:8f:16:
         31:51:2d:21:01:ec:cf:14:e5:65:3b:4d:7f:57:67:0a:da:70:
         f6:a8:75:0b:c4:e4:93:5b:8a:a1:14:2a:d6:9b:de:d5:08:8b:
         84:cd:1b:a3:02:ac:99:e0:f9:80:bd:96:60:9b:50:fa:f4:f3:
         f4:84:e3:9c:cb:a1:6e:f1:d9:63:e6:b6:3b:5b:8c:41:ee:65:
         6e:fa:51:4f:23:30:7c:0e:05:14:ef:f7:ca:53:36:51:97:aa:
         8f:64:54:75:71:7f:88:50:4a:1a:6b:f0:4a:94:f3:a8:48:21:
         a0:38:77:13:2d:bb:06:d6:cb:6c:20:8b:7c:ee:92:ad:85:b6:
         50:f8:9f:7f:2a:fa:cc:79:dc:35:b6:31:4e:08:fb:73:66:43:
         98:21:61:cb:f5:9e:ca:ee:73:ec:5b:ba:03:fb:75:13:0e:45:
         55:4e:b8:2e:c0:3c:ed:12:3e:14:35:04:d5:5d:39:42:e9:71:
         a0:dc:09:48:c8:c8:0a:bf:e7:62:31:5f:f5:71:d9:68:1a:fb:
         52:dd:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:21 2025 by rpki-client