Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File:                     IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier:          sSp8pktOLoOUZWvo5E25l//+yr4HBU6InxjoXk9Wf7s=
Subject key identifier:   E5:7F:FB:38:72:91:DC:0D:C7:83:54:D9:EB:4B:8C:56:89:90:DC:C2
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer:       /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial:       01989F030B343D3EC62A31A1F5FBB4559E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number:          162F
Signing time:             Tue 12 Aug 2025 16:00:33 +0000
Manifest this update:     Tue 12 Aug 2025 16:00:33 +0000
Manifest next update:     Wed 13 Aug 2025 16:00:33 +0000
Files and hashes:         1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: arbtkxg/oKlpWlLrO4s9JrFJqpH126x3sf0eYK7AwbU=)
                          2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:03:0b:34:3d:3e:c6:2a:31:a1:f5:fb:b4:55:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
        Validity
            Not Before: Aug 12 16:00:33 2025 GMT
            Not After : Aug 13 16:00:33 2025 GMT
        Subject: CN=e57ffb387291dc0dc78354d9eb4b8c568990dcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:c9:e2:7c:55:0e:e2:37:f5:d2:0a:92:79:
                    5b:a8:1a:a7:d1:d8:d0:f8:00:ba:60:71:ea:59:b9:
                    cf:4b:28:98:23:8b:48:48:93:93:ee:2b:59:d1:66:
                    75:d1:d1:4a:ac:78:e6:99:b1:69:15:44:98:59:74:
                    36:95:fa:3c:3b:0b:ae:f5:bc:55:f8:cc:43:ea:d8:
                    36:24:de:57:43:df:2e:36:80:8d:33:7b:84:43:e5:
                    b6:31:3e:53:67:ed:b7:69:b9:e7:26:11:44:79:0f:
                    70:5f:90:46:4b:fe:29:83:30:fb:3b:64:b4:4c:2a:
                    3c:fd:7e:f5:7a:ea:95:5a:25:c2:51:57:6b:20:24:
                    91:16:9e:87:e4:f7:e4:88:0f:77:3a:67:3c:5e:3f:
                    cb:36:75:a2:76:de:63:1a:06:22:10:13:86:7b:f9:
                    22:15:f1:a2:c1:7b:60:de:d8:77:14:d3:ac:41:c8:
                    64:bd:f1:9b:67:4a:3a:a7:a7:66:c4:88:7a:06:86:
                    fd:34:62:2c:f8:44:6f:15:24:5e:98:d7:5a:0c:2b:
                    6e:db:ab:7f:0f:5f:3f:c7:f2:7c:9b:0e:65:dc:de:
                    0e:9c:e9:5b:a3:a8:09:f2:23:99:ba:0c:a6:7d:8d:
                    06:8f:14:91:65:a3:8c:61:2c:b5:9d:1d:a4:25:7e:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:FB:38:72:91:DC:0D:C7:83:54:D9:EB:4B:8C:56:89:90:DC:C2
            X509v3 Authority Key Identifier:
                keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:a3:e3:ad:de:66:68:e3:0e:15:d7:b5:40:1b:68:b5:a4:
         67:9b:15:09:8c:ab:61:0c:40:ea:a7:40:68:f9:7d:55:5a:8d:
         44:59:8a:f8:6e:3a:78:66:36:9e:67:19:35:97:ef:e1:ac:83:
         96:eb:88:66:e1:58:c5:73:3d:13:b4:cc:06:98:42:0d:62:c9:
         51:62:46:da:9b:76:f8:c2:36:3f:af:bb:d0:6b:cd:9a:3b:87:
         54:11:29:35:54:a8:66:69:f9:a4:28:76:c8:d6:92:93:af:a8:
         72:5e:b5:17:f1:95:e3:16:1f:4d:95:09:90:79:ce:91:d4:8e:
         ab:d1:55:2b:fb:2b:60:64:ce:f6:a5:1d:06:d1:85:21:ae:ea:
         24:5e:1d:54:f2:a6:7d:75:59:58:4e:04:fb:59:6c:01:ff:a4:
         e4:95:46:a9:37:ac:e8:5f:10:60:34:2d:ac:a9:b5:99:76:7d:
         0e:2d:ff:71:a7:65:86:1a:16:06:a4:e7:94:a0:18:22:19:a0:
         be:39:71:45:5b:6b:14:2f:1c:30:81:d2:c8:f1:15:da:db:96:
         9c:1d:e8:25:8b:67:8c:d6:fe:42:03:2e:84:8c:ea:4a:ae:9f:
         92:4e:1c:e8:db:a3:b1:0f:da:ff:ef:57:09:ad:ba:b4:98:65:
         ba:6b:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:21 2025 by rpki-client