Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          X4Q4qO9NztUd4mxK4c+f7A2Jaj160zoHougpeBPo1xA=
Subject key identifier:   63:2F:2D:41:B6:C6:4E:6D:A1:AA:73:62:53:D3:F1:12:BB:EB:42:51
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019873E3780B95F2AB388A214FFB75CBBA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 07:02:23 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:23 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:23 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: 7/yN4t7wzs787agnR1NaY6cuAeIUCNl8hix0asf9zOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:78:0b:95:f2:ab:38:8a:21:4f:fb:75:cb:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Aug  4 07:02:23 2025 GMT
            Not After : Aug  5 07:02:23 2025 GMT
        Subject: CN=632f2d41b6c64e6da1aa736253d3f112bbeb4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:d7:46:f3:66:5a:1d:3b:0c:5f:d7:17:6c:
                    fa:5f:6b:4b:8a:26:a4:34:c0:fc:23:0a:e1:9f:bd:
                    5d:c4:e5:85:df:27:ad:00:b4:c6:c3:a1:2d:71:64:
                    04:57:b1:58:ee:67:62:13:c5:9e:6c:0b:17:37:64:
                    54:e0:b0:51:91:1f:7e:d6:da:23:f3:a1:16:33:9e:
                    9b:7f:35:98:a6:da:de:d6:78:5d:89:c2:21:56:dc:
                    f0:7c:5a:11:1c:8b:31:3a:31:f8:ac:45:35:b8:e7:
                    66:73:91:da:ce:ab:78:b9:c7:78:c2:e3:84:1f:6d:
                    8b:a5:1e:05:92:7e:e0:56:c9:6f:fd:fe:61:38:7e:
                    83:2a:89:c5:fa:76:d5:27:fa:5e:c5:e9:b9:83:06:
                    c6:47:fb:b4:48:57:05:ce:e0:cc:ee:b1:68:f4:f9:
                    96:90:08:a1:e3:4e:bc:de:bb:df:ec:33:73:34:98:
                    6c:0d:5d:ed:75:1c:32:a0:c4:2d:f6:cd:28:65:d2:
                    ac:75:4a:08:b0:a3:de:8e:fd:71:3b:4b:26:21:d2:
                    b4:e9:8a:a4:2c:84:23:a9:8d:16:e6:a1:09:4c:61:
                    7e:53:42:71:f9:85:89:7b:b9:6e:ef:f9:99:a8:b7:
                    7d:48:62:7c:6a:79:c2:bb:15:bb:8a:cc:ac:81:9e:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:2D:41:B6:C6:4E:6D:A1:AA:73:62:53:D3:F1:12:BB:EB:42:51
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:2b:89:0e:42:b7:52:4e:ff:f0:d1:f0:3f:e5:d3:46:6c:e7:
         9f:7e:fe:f1:56:8f:65:21:d1:b7:4a:c0:2e:83:52:28:b8:e1:
         9b:9f:fe:7c:77:5b:da:29:c2:e4:35:25:90:a8:d5:40:b4:b6:
         f6:ab:64:c4:2b:dc:5b:16:07:a8:bb:9e:5a:a4:ca:50:0b:0b:
         a8:5c:b0:59:20:88:9f:a5:0e:10:01:52:1f:43:de:7d:15:0a:
         48:53:89:f0:8c:4c:63:b9:a6:5c:62:c7:5a:38:5f:e3:1d:5c:
         43:76:82:82:21:65:94:ed:09:ee:9d:ff:fe:b9:0c:f1:30:01:
         35:78:a1:e0:e1:1f:32:02:f7:d2:0f:27:00:92:0f:19:4f:95:
         9b:a6:55:62:8f:7c:57:99:c5:0b:02:83:ef:2f:8e:a2:f1:00:
         09:5a:33:93:86:db:86:44:1a:c1:58:77:2e:e8:2d:04:ab:82:
         a3:39:55:98:71:df:e5:79:53:f0:df:93:77:f9:ee:56:bc:ca:
         ab:15:ca:17:ca:0e:d1:5e:d0:47:da:15:b4:88:68:7f:65:4f:
         ff:a4:b8:3a:fe:7c:f2:5d:ab:ae:d3:c7:4a:4b:fd:32:09:bf:
         f3:a1:81:3e:d6:3a:fb:42:21:d2:d8:0d:0b:60:00:8d:86:51:
         4d:9c:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:48 2025 by rpki-client