Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File:                     XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier:          y4JBV2QCT2BlmELyT6b6R7I1++WQg+sK3Io4BxIwd4A=
Subject key identifier:   46:1C:D1:73:DE:2E:39:C7:A0:83:11:23:BF:0E:F6:74:17:1A:50:27
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer:       /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial:       019880C21C5FE80789F944283F4D05927AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 19:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:01 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:01 +0000
Files and hashes:         1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
                          2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: no2Y+neXGiS2wbL4LA4YhLUTn6shoCwwkABO5lyE3pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:1c:5f:e8:07:89:f9:44:28:3f:4d:05:92:7a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
        Validity
            Not Before: Aug  6 19:01:01 2025 GMT
            Not After : Aug  7 19:01:01 2025 GMT
        Subject: CN=461cd173de2e39c7a0831123bf0ef674171a5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:d0:2a:49:3e:26:ce:20:92:c0:43:68:40:
                    72:6c:43:fa:ab:72:9b:bd:b3:e5:ea:b4:8d:0f:5d:
                    fe:f2:5c:59:81:93:3a:51:8f:ba:35:b6:54:22:d7:
                    42:a0:10:37:9a:d7:79:ff:61:da:ea:23:41:cf:d0:
                    96:8c:df:9f:f6:99:90:da:62:8e:1a:bc:30:dc:ac:
                    6a:eb:ea:c4:4c:52:64:e8:cf:48:40:73:c9:65:80:
                    ea:eb:f9:f4:b5:cf:cd:14:5a:42:6d:7a:f4:34:a8:
                    8d:a0:1b:52:50:8e:bc:b4:83:1e:78:5f:e9:cd:91:
                    60:c3:a3:8c:39:20:7f:0b:8d:5f:e7:c3:ea:22:41:
                    92:0c:df:da:44:c8:e7:6d:21:a8:37:91:5a:53:38:
                    53:fe:88:a9:d3:ad:84:bc:04:52:2e:78:eb:be:43:
                    cd:b9:83:3f:aa:5b:d9:fa:54:8e:a7:fd:dd:07:ee:
                    be:83:02:37:3a:03:cc:21:f7:1c:4f:69:db:40:8e:
                    24:e6:91:b2:7c:9b:f7:f0:d2:8f:97:27:27:e6:22:
                    83:bb:c6:26:ff:74:c7:73:13:d2:6c:6a:40:d6:3e:
                    ba:a5:bc:51:d0:db:62:3d:72:0b:70:63:01:81:f3:
                    b0:ee:84:ba:46:3b:38:63:e6:55:ab:20:c3:fd:27:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1C:D1:73:DE:2E:39:C7:A0:83:11:23:BF:0E:F6:74:17:1A:50:27
            X509v3 Authority Key Identifier:
                keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:4d:e6:bf:12:a5:96:ae:61:a5:cf:c7:1c:4e:d0:71:60:
         70:ba:d9:11:c9:5a:22:87:cc:c6:d8:c3:09:ce:1e:4a:70:89:
         15:c7:d0:44:dc:10:19:14:ed:2a:8b:4f:32:09:d6:30:03:7f:
         6d:ef:9d:cc:f7:a7:ac:1a:8d:d6:55:c4:8e:62:8f:7c:bd:82:
         4c:c0:23:26:81:6f:9b:57:d7:1a:87:48:2c:28:16:ef:ca:de:
         9d:50:63:09:ed:2a:72:64:5c:11:f5:7e:88:54:80:bb:7b:40:
         d4:b9:b1:43:16:14:b7:8f:f5:f0:ce:bc:2b:37:06:31:3a:b4:
         3b:dd:2f:2f:a4:ea:c4:70:ac:61:c3:87:47:b7:3e:f4:88:54:
         c5:25:c1:d4:d4:f0:4b:35:cf:fd:2f:d1:f1:8d:f7:84:d0:e1:
         50:22:44:a4:e3:70:b5:62:f6:fe:5b:6f:60:92:e4:a2:1c:3e:
         f8:85:a2:ba:d0:85:c7:a3:d1:a7:49:a5:76:fa:98:03:32:a9:
         85:4f:42:f4:24:3d:ba:cc:3f:06:3e:ed:19:a2:54:c2:b0:11:
         d4:e2:f1:96:20:54:32:a4:fc:72:2d:f1:98:0d:26:3c:6f:c7:
         92:bd:fa:90:24:39:9f:c7:0a:5d:f0:b9:d6:c4:28:d5:cf:41:
         7f:19:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:12 2025 by rpki-client