Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          m26wTBooJDBXR/k077y8C8It4oxAgOQIjx2EGBS8E7M=
Subject key identifier:   A5:63:A0:6B:B1:89:3B:1D:75:A0:DF:CD:9C:D2:1A:19:D6:68:2C:C4
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       01987F79B603777D83001F3A47E7B0B90E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 13:02:19 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:19 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:19 +0000
Files and hashes:         1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
                          2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
                          3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: 6DpG+UYVdVpNZ+9Geik6ZdYyN4gLhwNk1pJA5XXLGCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:79:b6:03:77:7d:83:00:1f:3a:47:e7:b0:b9:0e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Aug  6 13:02:19 2025 GMT
            Not After : Aug  7 13:02:19 2025 GMT
        Subject: CN=a563a06bb1893b1d75a0dfcd9cd21a19d6682cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:c9:6e:55:44:11:1b:90:0c:0b:58:2a:dd:
                    fd:4d:13:9d:6b:b6:f9:d4:62:8f:90:06:0c:84:d1:
                    8a:39:02:5c:89:b5:3f:cb:63:05:e3:50:88:f3:1a:
                    a2:8f:4f:ca:41:d7:5f:a6:b6:02:5e:7e:4c:8b:bb:
                    ad:bf:ce:23:93:cc:04:97:7a:76:81:db:b5:52:4e:
                    dd:e6:45:32:0c:ff:56:a8:06:04:02:04:58:cd:33:
                    60:cc:02:0a:08:5a:78:16:c9:be:38:db:78:6d:fb:
                    b7:21:d6:19:c6:db:b3:01:3e:ed:e1:4c:1d:a5:18:
                    5a:1c:80:1b:80:db:b1:af:86:ce:99:d0:3a:8a:6c:
                    75:93:aa:a3:26:25:21:dd:4d:bb:75:81:cf:bb:5a:
                    41:e1:f0:8d:39:9f:0f:cf:bb:69:39:7c:44:1a:8d:
                    59:0f:de:2a:42:18:e9:c6:bf:4c:f8:98:ab:4d:b0:
                    8c:05:a0:a9:b4:f7:1b:df:80:0c:e4:4c:45:33:4c:
                    d7:64:85:71:ea:65:d0:10:4e:eb:30:e5:42:4b:26:
                    99:c6:57:ac:dc:e3:73:df:d6:c2:d5:66:5e:20:5b:
                    4a:4e:90:f2:8f:da:9b:3e:80:a7:6f:1d:66:44:ee:
                    54:01:a4:ee:17:b4:32:dc:46:d1:4f:da:d3:31:28:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:63:A0:6B:B1:89:3B:1D:75:A0:DF:CD:9C:D2:1A:19:D6:68:2C:C4
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:59:33:6a:83:ea:00:d3:b6:7a:e3:95:6e:e9:4b:db:e2:
         ab:f6:02:61:20:f5:92:76:cd:20:d6:5c:bd:a4:d9:24:f1:92:
         14:be:53:99:50:1d:6b:e4:36:e9:77:35:1e:c3:25:48:86:89:
         58:c0:34:b7:a8:86:70:c0:68:f2:05:7c:bf:a9:94:84:72:65:
         9b:23:28:e8:a1:bb:b7:e2:3e:fc:c3:bf:6e:36:9c:c9:3a:26:
         86:f3:23:a3:7d:2c:ce:ae:92:11:df:e6:bd:1b:eb:f1:dc:48:
         90:02:20:46:31:a1:88:1c:8f:4d:08:84:97:9a:da:66:ce:01:
         8d:a0:69:df:20:d1:ba:09:f7:9d:42:51:be:9d:c9:74:43:a0:
         aa:fe:da:6c:d1:5e:cf:13:72:a0:b2:17:82:05:40:7a:7b:d2:
         c7:8c:d6:47:29:88:95:5d:39:65:5c:65:b5:72:6f:fe:d3:02:
         d9:bc:ff:5a:d1:30:86:ed:56:10:fd:3f:70:9a:7b:8c:63:05:
         e4:ff:77:8e:a4:09:c1:34:cf:78:a3:a3:50:e6:84:ed:a0:96:
         12:17:62:b7:26:b6:6a:9c:f6:d2:f8:8c:41:47:51:f4:14:7c:
         71:ff:62:16:6b:18:cf:b6:8c:1b:73:50:5d:25:b2:84:3a:fa:
         9a:d4:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:32 2025 by rpki-client