Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          9Q6UZXS4gYwhPqsk+YGPq+dP+d+LvtPL1J/FjY6GBMw=
Subject key identifier:   C5:77:C5:CE:C1:9F:FE:56:E5:04:6C:52:47:C4:FB:9D:5C:19:30:9D
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       01987AF6ACE04C92CFC18898D8D56B4A7058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 16:00:42 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:42 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:42 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: a95ctwWpQ0w8a4l2ExnZqi3qmMdSFQ8kGxrfFJgIdSg=)
                          2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:ac:e0:4c:92:cf:c1:88:98:d8:d5:6b:4a:70:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Aug  5 16:00:42 2025 GMT
            Not After : Aug  6 16:00:42 2025 GMT
        Subject: CN=c577c5cec19ffe56e5046c5247c4fb9d5c19309d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:d9:8b:6d:cd:c7:d3:7b:7b:f7:8c:b3:95:
                    eb:e5:d6:c4:b7:a6:19:f4:13:16:f1:fb:82:7f:fe:
                    6b:36:93:33:42:19:6d:0d:f6:d7:d6:c4:28:39:5e:
                    38:22:86:24:4c:d8:90:3f:a7:d1:31:32:9e:80:bf:
                    24:1e:96:54:f0:c0:c1:bb:ed:f7:ae:15:b2:8b:86:
                    6c:56:e6:08:51:dd:9b:f0:7f:fe:7e:61:70:07:e1:
                    62:80:09:b0:4a:81:10:2e:3d:a2:93:b3:2c:f3:d2:
                    1a:e9:3c:a8:45:01:03:b4:db:c2:e5:24:8f:48:01:
                    68:b7:cc:b1:2c:ea:e9:85:14:ce:21:0f:d9:0f:f1:
                    54:7f:df:63:37:b2:22:5c:5f:f5:0e:b1:3e:04:d4:
                    05:b2:60:47:46:2c:d9:98:4c:16:2b:a9:dc:6b:5f:
                    c6:8b:4f:0a:9a:d1:54:14:91:f5:2a:ed:9d:4c:99:
                    9d:6c:68:18:f6:27:a9:1c:8c:94:44:74:78:bd:64:
                    36:72:d2:29:14:2a:33:a0:d5:c6:74:50:37:bb:a8:
                    1f:40:ff:8e:4c:82:c2:2c:5c:81:12:57:de:01:97:
                    f8:79:d6:b2:d0:67:bd:29:e9:59:80:f8:f2:1f:08:
                    10:c5:3c:f0:ca:cc:b0:86:c0:93:3c:e3:1d:97:2c:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:C5:CE:C1:9F:FE:56:E5:04:6C:52:47:C4:FB:9D:5C:19:30:9D
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:19:f0:e6:48:f5:33:5e:9d:df:00:c7:df:d8:3d:1d:56:89:
         a0:d1:96:2b:fe:39:a9:3c:32:c6:b7:36:5c:34:f0:58:7a:e4:
         1f:3d:9e:d4:e2:7e:4e:34:d8:42:1c:a5:a3:28:82:7e:1a:9c:
         fa:4b:40:49:4e:b3:c4:25:9e:da:77:3f:95:3f:f1:b5:3e:73:
         11:cc:d9:5e:3f:78:52:64:6b:75:0e:88:e7:c0:bf:dc:cc:ad:
         18:e3:8a:a5:20:8d:01:5b:83:47:9f:24:89:5d:e3:d5:fa:86:
         67:5d:2f:2c:cd:43:2a:d1:56:50:fc:0a:df:fb:b9:04:f9:50:
         50:bc:51:ea:1b:88:62:30:69:b1:7b:b2:de:b6:5a:db:82:fc:
         79:a1:ab:6b:dc:42:55:4c:d0:d9:79:53:a5:96:84:0e:8a:d2:
         a9:5d:17:0f:8a:ae:4f:50:4b:a6:0a:1f:6e:56:c2:5d:ab:d0:
         f6:0d:e0:fb:81:ec:8e:a6:51:09:7b:5b:c0:a8:42:93:3c:c0:
         8c:6f:6e:2f:76:f4:d1:b9:f0:40:3c:13:44:f9:2a:6a:54:cf:
         05:1a:1a:f3:0c:99:2e:c9:5f:ae:85:97:3a:86:8e:73:45:97:
         e2:f3:9d:fa:84:23:a7:1b:13:93:b4:08:de:91:38:d7:eb:67:
         6d:c3:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:08 2025 by rpki-client