Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File:                     fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier:          TsUpMctrTapDNHkaduZrb1XKSbxXx3FcnfYmJqvtw9A=
Subject key identifier:   37:9D:DF:87:FC:25:47:74:64:41:0C:7A:57:13:9D:BD:8E:BE:C6:22
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer:       /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial:       0198741948B952E33B2818CA27AC37A96D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number:          161E
Signing time:             Mon 04 Aug 2025 08:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:10 +0000
Files and hashes:         1: BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa (hash: ojCr5JBVKUCnA0I9p1E7esZg/ahEto7MwTtjkK6NUEk=)
                          2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: I/e6MjJ60GX0BNTpOJi3xg65mhU0Ap9loN70/gSFbLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:48:b9:52:e3:3b:28:18:ca:27:ac:37:a9:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
        Validity
            Not Before: Aug  4 08:01:10 2025 GMT
            Not After : Aug  5 08:01:10 2025 GMT
        Subject: CN=379ddf87fc25477464410c7a57139dbd8ebec622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:d9:02:a3:6e:7e:f2:9c:e9:27:26:35:9d:
                    90:eb:82:e6:f0:ba:e1:e4:ec:01:25:72:d8:a3:23:
                    a9:4b:6a:d1:46:b1:04:3f:68:82:7b:f5:67:17:c0:
                    55:c1:bf:3f:5d:03:dd:ad:79:09:e1:26:b7:56:8a:
                    f4:26:52:d2:90:78:7e:b8:f1:cf:fe:ed:bd:37:33:
                    38:59:cd:be:80:08:56:c8:c7:e3:21:35:2b:2b:ea:
                    40:e7:25:32:2c:29:e2:36:90:9e:d9:7b:29:1f:37:
                    a6:d5:18:c2:9b:f9:07:51:b3:f7:7b:40:fa:e2:90:
                    cb:40:1d:37:62:26:93:dc:26:04:ce:f4:b2:a9:66:
                    4b:71:d5:b8:25:a3:7e:da:b1:29:ae:26:94:e6:33:
                    80:a0:79:9f:9a:c7:8b:31:11:84:f4:21:8f:07:30:
                    d1:fb:7e:98:b5:af:7b:14:f3:91:8e:26:cf:d4:1d:
                    ec:41:1a:b6:ba:2c:2f:cc:6a:0a:29:ad:d9:31:f9:
                    71:51:45:fe:b0:d2:86:b9:9a:33:c5:4c:01:7f:57:
                    04:c7:05:fe:1e:7b:b7:b6:d5:46:cb:4d:f5:ea:05:
                    98:5f:18:9f:58:9f:0d:7b:51:8a:58:18:54:17:d8:
                    90:8b:38:37:bd:21:db:aa:b7:e2:26:22:76:2f:16:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:DF:87:FC:25:47:74:64:41:0C:7A:57:13:9D:BD:8E:BE:C6:22
            X509v3 Authority Key Identifier:
                keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:26:1e:c7:62:f4:b2:4e:57:3e:0d:61:33:bb:68:50:85:61:
         7f:3d:24:ee:99:88:ed:85:57:f3:2b:58:77:ae:ca:81:37:1b:
         bc:59:77:4b:58:f2:97:2e:69:fd:c2:ce:d1:d0:b1:81:20:2a:
         8f:16:4a:10:bd:45:e3:7b:b4:62:bf:a9:5f:7b:4b:1e:ea:87:
         fd:fa:26:a2:2b:da:ed:88:b0:8c:8f:29:67:f3:8e:99:3e:4c:
         d8:00:f0:d4:97:ca:ac:61:97:8f:7f:71:1a:e8:06:3b:2b:aa:
         20:47:f9:d5:f7:67:a7:a7:dc:a2:2e:f8:8f:95:78:93:76:03:
         d6:28:81:44:15:15:4a:4c:d4:7b:7f:d0:f9:3c:92:3f:2d:54:
         5d:33:01:79:05:a0:53:2e:9f:e7:73:a1:ad:17:12:65:a9:da:
         c0:b4:40:b2:50:0e:42:18:6f:bc:95:6d:70:20:46:d0:d5:ff:
         8e:cb:fa:ce:f6:ed:84:78:21:0a:70:f2:0f:48:d1:8e:d5:4f:
         5b:63:1b:ae:57:ac:33:09:27:f1:41:68:49:01:06:48:b9:87:
         47:64:e7:12:4b:82:ec:87:4c:18:03:d1:f0:c4:73:e0:2d:59:
         9b:64:07:51:13:90:5b:33:b0:8d:9c:3b:ec:c3:d2:07:6d:65:
         36:66:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:14 2025 by rpki-client