Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File:                     cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier:          /xl7t1C8Gklqm+huzjb5WlUH/oqGeCp4fQbzuMmdU4A=
Subject key identifier:   67:69:06:69:BC:82:BA:F8:A4:BE:22:E7:0E:18:64:22:82:74:E3:79
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer:       /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial:       01987C0A0718128E51059CF3EC7524B95CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 21:01:28 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:28 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:28 +0000
Files and hashes:         1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
                          2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: fqp6Z+4CP8+Topko7NDEiYdxKY1V6NZacRg5w7z3q0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:07:18:12:8e:51:05:9c:f3:ec:75:24:b9:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
        Validity
            Not Before: Aug  5 21:01:28 2025 GMT
            Not After : Aug  6 21:01:28 2025 GMT
        Subject: CN=67690669bc82baf8a4be22e70e1864228274e379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:7c:20:65:f4:cd:63:3c:f4:34:a7:a1:c7:
                    59:e6:49:ec:1b:b8:f1:1e:32:07:36:5f:31:28:1d:
                    6a:d1:c0:77:cf:25:ef:59:e4:e1:59:63:93:94:3c:
                    ad:7c:58:f9:ba:ba:80:41:06:18:98:52:aa:79:69:
                    f3:d5:7f:e2:73:96:69:ca:2c:20:35:e2:72:76:25:
                    ac:70:49:c6:a4:e8:2a:23:38:3e:b7:9d:87:da:ff:
                    44:e1:35:8b:36:8d:23:e4:07:77:f8:65:ea:56:10:
                    4f:60:e2:e9:96:7d:b7:07:d6:63:e4:2d:a0:28:4a:
                    78:a5:2f:86:99:39:5c:16:fa:ec:05:bb:bd:36:32:
                    07:cf:6b:06:4c:b3:56:f3:94:e8:e4:2a:62:5b:cc:
                    c3:e7:09:a2:be:45:09:36:1e:85:20:e7:56:a7:79:
                    51:5c:f3:af:86:98:2e:da:6f:66:ec:4e:6b:f3:ca:
                    27:29:38:4f:b6:9e:0b:c7:94:8e:6c:c4:7f:0c:d7:
                    23:27:da:73:7a:c1:70:af:35:05:f6:d4:f5:50:9e:
                    9c:f2:db:8c:29:b7:d3:0d:66:8a:0f:9e:8e:5e:89:
                    3a:b2:85:8c:1c:ad:68:38:eb:66:47:19:30:cf:d8:
                    56:38:28:dd:45:40:20:19:ed:84:a8:d7:72:4a:16:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:06:69:BC:82:BA:F8:A4:BE:22:E7:0E:18:64:22:82:74:E3:79
            X509v3 Authority Key Identifier:
                keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:b0:53:f3:7a:24:2d:f3:ab:32:14:c6:9e:03:e0:27:f2:
         a8:95:e8:47:03:16:05:25:1f:1f:a1:fa:c2:b2:91:2d:5b:45:
         ac:12:e3:a7:ce:dd:71:5c:40:31:a4:ac:09:99:54:36:4d:6a:
         7b:ac:a6:a4:e7:c2:86:aa:b4:38:9b:97:ab:b2:8c:39:a9:0b:
         40:ce:3b:09:8b:79:d3:71:cc:f6:13:31:3c:7b:b8:c4:86:89:
         9e:0c:95:be:0f:fc:5e:f7:d1:ab:15:51:d4:f6:5f:4d:98:29:
         81:3a:c4:0b:3a:67:19:f5:98:17:84:9a:36:6e:54:7b:a3:f3:
         45:12:1b:71:ae:74:a4:9f:ed:22:79:0a:6c:2c:59:f5:b5:b5:
         4e:67:a3:e3:00:93:41:67:56:0b:b7:8f:63:88:1e:70:4b:16:
         a2:33:c0:79:0c:dd:57:4a:f7:2f:c5:aa:ec:08:11:7e:70:3c:
         23:c6:84:81:bb:91:9c:2d:b5:4d:99:bb:6a:b6:a5:c2:10:b5:
         b3:2d:04:92:54:e3:0f:ad:0e:47:04:70:02:9d:fa:09:c5:de:
         68:6d:c4:68:2d:0b:ca:87:c7:79:56:86:6c:a5:10:e6:43:3d:
         31:34:e9:1e:0d:a0:3c:7c:85:5e:5a:ca:a7:12:64:51:25:2a:
         25:49:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:01 2025 by rpki-client