Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File:                     0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier:          Qk3a1+nGRVK5Y2gHcL7UYxa430UTDuY0wL5Lv17j6J4=
Subject key identifier:   5E:00:B6:4E:91:A5:E8:5E:0C:F1:B1:10:5C:41:02:25:92:8A:B7:E6
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer:       /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial:       01987DC0F6B52875B4FFEA60FEFA62B552B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 05:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:54 +0000
Files and hashes:         1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: EcaM3SHvwXTl1SqfQQylI21xKAfne1iFZmjlp/C5d8w=)
                          2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:f6:b5:28:75:b4:ff:ea:60:fe:fa:62:b5:52:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
        Validity
            Not Before: Aug  6 05:00:54 2025 GMT
            Not After : Aug  7 05:00:54 2025 GMT
        Subject: CN=5e00b64e91a5e85e0cf1b1105c410225928ab7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:c1:51:89:21:94:47:1f:32:73:34:65:d9:
                    91:ea:1e:ae:a4:51:9c:f8:7f:3e:23:0c:92:86:e5:
                    0d:28:70:d6:fb:c7:88:fc:1b:b3:6e:40:34:47:11:
                    57:64:43:ef:3d:01:32:1d:b2:55:64:87:94:89:18:
                    6b:f0:dc:50:f5:a2:7d:f9:17:a9:41:85:49:c5:3e:
                    5a:c6:f5:44:e9:32:13:6a:0c:17:30:6c:8a:c7:cb:
                    16:c0:1a:23:a6:2d:c5:e3:bb:f3:b3:8f:a9:4a:7a:
                    5a:33:6f:a1:9d:23:87:e9:57:7b:7e:f9:15:17:f7:
                    6e:7e:08:a4:49:48:06:f9:73:d1:7f:53:b8:df:92:
                    e4:fc:9e:ab:ba:9a:ed:41:8c:ee:f5:6d:8f:d1:0d:
                    2f:1a:f9:43:fd:67:1d:38:01:46:72:37:61:71:8d:
                    a3:25:7c:9a:f2:54:f4:ce:c5:88:38:e7:9e:74:71:
                    d3:d1:6e:e1:a8:4f:00:12:55:9c:97:72:80:b8:60:
                    de:22:57:5c:0b:43:ac:0a:6a:5d:07:55:8e:b4:c4:
                    72:57:41:7f:78:51:45:e7:30:8a:f9:54:0b:0e:35:
                    72:03:80:56:7a:c3:26:ff:43:87:11:43:a0:ea:5a:
                    be:93:8c:78:be:83:b6:bc:84:b6:50:be:5d:4e:bf:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:B6:4E:91:A5:E8:5E:0C:F1:B1:10:5C:41:02:25:92:8A:B7:E6
            X509v3 Authority Key Identifier:
                keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:a2:c7:39:98:1a:44:29:5c:c3:fd:49:24:3b:66:06:52:
         53:51:78:3d:67:60:a5:92:55:39:e1:da:c9:0d:d3:af:17:1f:
         8b:12:56:0d:13:13:4a:00:ae:39:86:7c:d5:52:f2:fd:c4:0d:
         78:1a:11:d6:38:b7:18:b5:9a:fc:75:0c:20:2d:6d:7d:e0:91:
         72:75:e3:1c:2a:f1:20:f4:3b:54:06:08:3b:19:d2:99:ef:a4:
         cd:1c:30:54:25:82:84:20:63:90:a3:4c:65:f8:e5:c7:f0:8e:
         64:42:cf:b3:b6:b7:29:03:d3:c7:39:de:56:e4:d9:a9:8f:6e:
         91:31:4e:16:34:e4:3f:bb:55:ff:21:78:9f:82:63:0b:cd:66:
         a8:d4:6b:9f:a2:74:79:52:82:34:03:f4:78:8e:6c:97:3b:73:
         07:4b:fa:c9:dd:83:76:e3:f8:8c:6c:34:0a:bb:19:0f:f6:0e:
         15:7f:54:4b:b0:2c:06:70:e7:c3:92:49:7a:25:95:eb:34:1f:
         59:35:18:21:b8:31:7a:77:1a:55:3f:0b:6a:6a:fc:84:dc:ef:
         3c:ba:a9:cd:bb:27:8a:94:6d:ad:40:eb:e2:e5:a6:98:5c:3f:
         57:f0:b0:03:d1:d6:8f:eb:ad:7d:de:34:ec:2b:7b:93:39:da:
         6f:93:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:06 2025 by rpki-client