Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File:                     fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier:          BGcspgr/duIaIJw9caMMawkNiO/DlQgEfNlsy7lIWjU=
Subject key identifier:   F4:66:31:D1:3C:EE:7A:A0:7A:05:86:3F:E1:AB:A4:7D:3C:DD:17:1F
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer:       /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial:       019880C1E65D3A0D0DD19D50BCE8F4AC004F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 19:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:47 +0000
Files and hashes:         1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
                          2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: gpciOway3/UukkuSvUsuouQXiuep9g2yTpZcKV4PAZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:e6:5d:3a:0d:0d:d1:9d:50:bc:e8:f4:ac:00:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
        Validity
            Not Before: Aug  6 19:00:47 2025 GMT
            Not After : Aug  7 19:00:47 2025 GMT
        Subject: CN=f46631d13cee7aa07a05863fe1aba47d3cdd171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:3f:b7:23:7a:5d:3e:2b:b3:48:0f:78:b6:
                    46:02:82:d7:de:1f:62:03:f2:a5:bf:98:11:34:11:
                    fc:35:02:b3:76:66:77:8d:8b:10:e3:4a:93:fb:7f:
                    f1:ca:ae:2b:d4:7b:7b:4c:f6:de:c5:77:7e:cc:2c:
                    15:4c:67:2b:c8:fe:d8:4d:61:bf:6f:15:1a:cf:c9:
                    79:44:10:80:97:16:b4:20:f2:1e:d2:a8:7d:8c:72:
                    54:24:7b:95:23:a6:b0:45:7f:62:7c:69:6a:a4:ff:
                    77:f0:70:db:52:06:05:c8:95:66:04:20:eb:c2:92:
                    8b:32:3e:78:0f:2f:fc:c5:7f:ea:40:7f:f6:5a:fa:
                    5f:82:38:3f:c5:93:23:60:ae:b6:83:ea:b0:01:1d:
                    0e:27:02:6c:3d:61:9f:44:7b:c3:5b:d2:c9:97:54:
                    9d:7b:a0:da:b8:ba:14:77:89:c5:85:77:6b:92:ad:
                    ad:a4:c3:71:75:70:a5:5a:27:b8:cc:9c:0d:36:42:
                    63:03:d7:76:69:b5:4f:c5:ce:0d:82:12:5e:44:45:
                    4a:f0:71:39:25:92:3e:a4:42:68:74:71:77:9a:5f:
                    a0:23:b4:91:a8:a6:31:19:3a:0b:f3:57:6d:53:cb:
                    fd:62:fe:da:05:8f:a8:25:05:15:8d:7d:09:74:9b:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:66:31:D1:3C:EE:7A:A0:7A:05:86:3F:E1:AB:A4:7D:3C:DD:17:1F
            X509v3 Authority Key Identifier:
                keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:0a:a0:d2:4a:c3:a3:3d:41:3c:40:38:83:bd:ce:33:36:
         6f:51:58:19:d9:45:4f:40:52:73:40:8f:18:01:7c:1c:3d:e4:
         fa:70:0d:cc:d3:12:be:ae:b7:d7:e8:cc:72:79:86:3c:ca:d9:
         ce:48:dc:d3:11:5f:f4:b8:2f:91:71:08:dc:5a:66:a4:60:42:
         52:4f:bc:ce:4e:3f:c5:9e:f9:17:19:37:3a:ad:00:3a:7a:ce:
         08:d2:99:77:6b:b1:de:3b:63:c0:51:36:20:75:0c:60:07:64:
         b0:6d:4a:3a:53:01:07:71:80:79:b9:05:99:c2:29:6c:72:8d:
         88:c8:b7:ad:35:22:bb:e5:90:7f:35:53:49:cd:67:a6:93:88:
         67:b2:3b:a4:95:16:c8:88:8e:fe:64:8a:a8:14:7a:0c:72:21:
         8f:5e:f7:5c:f2:62:3b:2b:af:15:20:67:5b:59:b7:cf:77:43:
         fb:cb:76:2f:43:1c:bf:c2:12:c6:23:38:ae:19:63:95:3d:16:
         7f:27:6d:b8:f4:23:8d:dc:af:87:ae:a1:90:96:62:6e:6d:26:
         a2:61:bd:2a:b5:75:e3:58:cb:c9:5e:78:18:78:42:3f:85:31:
         17:bb:27:7b:0f:19:b3:16:a0:36:4b:b3:2b:7c:e9:27:3a:fc:
         61:a7:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:45 2025 by rpki-client