Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          pNIx3kUsarq3mnboJB0cVC2iGQcZmkXJkm9JIFi7YGo=
Subject key identifier:   2C:49:4F:A0:6D:75:6F:12:1B:F8:3D:BB:26:62:FF:18:4A:0B:4F:83
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       01987D8A6B9F8CDF44EE9E0BC3368AB549F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 04:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:20 +0000
Files and hashes:         1: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: /rYEUaOzeSNiNuPDCWM0WDAKdshFU2Fa7CI/B+RgAcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:6b:9f:8c:df:44:ee:9e:0b:c3:36:8a:b5:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Aug  6 04:01:20 2025 GMT
            Not After : Aug  7 04:01:20 2025 GMT
        Subject: CN=2c494fa06d756f121bf83dbb2662ff184a0b4f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:1c:c1:d2:7b:3a:8f:cd:90:8a:b9:34:c0:
                    53:3d:64:4b:2a:65:be:b4:a8:70:de:d4:b7:a7:9b:
                    3c:1e:f5:ee:b5:51:8f:ba:8c:fd:fb:6c:73:99:20:
                    d8:ad:03:84:13:30:d7:a6:68:2e:b7:31:1d:23:21:
                    f3:fa:79:c9:3b:ea:54:91:1a:8a:9a:60:6e:af:44:
                    1c:14:d3:8f:30:73:bd:8a:2e:c4:6c:da:d3:0d:95:
                    56:48:cc:61:04:8e:66:2b:0a:a9:9f:9d:d9:1e:70:
                    5c:03:b4:fa:d1:b6:80:47:df:6c:4e:c6:86:72:6a:
                    4f:83:2e:b4:dc:2a:ea:fc:0b:d5:32:e5:3c:09:8a:
                    bb:d1:86:f9:bd:fd:f4:e9:43:2a:19:fe:6a:de:21:
                    c8:4f:a8:39:22:f9:7f:61:36:35:25:e0:ca:e6:18:
                    e1:f0:e6:89:a1:6e:b7:e3:e6:41:4e:45:e9:ee:d5:
                    41:0d:63:2a:1a:12:cd:88:3e:ac:34:2e:a4:a0:9e:
                    d8:6b:02:2c:f7:ac:b3:ec:93:c1:b8:72:d6:59:fa:
                    34:2b:a8:75:b7:39:df:9b:c2:f4:2d:82:55:1b:11:
                    f4:cd:ed:12:50:51:ee:a8:40:3f:3b:9c:6f:d8:49:
                    b9:be:c6:d8:52:00:48:aa:02:53:8c:16:cb:f6:58:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:49:4F:A0:6D:75:6F:12:1B:F8:3D:BB:26:62:FF:18:4A:0B:4F:83
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:79:18:49:0f:cf:44:6f:cf:e1:46:2c:46:d8:ef:0a:f2:
         c4:0c:c9:e3:ce:05:c0:90:42:6f:62:d1:b9:23:74:e6:2a:a3:
         d9:52:43:74:ce:41:3b:7b:96:26:48:2f:cd:62:b0:e1:1a:2f:
         24:c9:f3:3c:67:74:0b:80:66:de:6a:ed:00:77:5c:f0:71:06:
         a2:3f:cc:a3:3f:5c:26:e6:1f:94:8f:b8:bb:c5:2c:3d:bd:b8:
         0f:10:98:26:cc:f0:1a:4e:43:13:66:9c:7e:33:42:01:c7:2e:
         fd:7c:89:c8:db:a9:f5:c1:d1:9a:58:39:66:5f:2b:b3:04:97:
         24:cb:2f:29:93:e5:bc:38:fa:a1:49:df:a2:5c:c5:3f:eb:78:
         67:71:41:02:bc:9b:96:ba:9c:d5:03:e5:0d:1a:02:cc:3f:87:
         96:77:7e:db:37:fd:87:51:64:b7:ec:ed:bc:8e:b2:89:9a:5b:
         5c:ad:40:c6:98:80:8e:0f:7a:cf:93:d4:56:77:46:f4:39:a7:
         c7:ba:2f:35:82:b2:2e:5a:99:31:1f:08:e7:32:79:04:b1:07:
         a1:b5:b9:fe:3b:68:d0:2f:ef:de:d3:5f:74:8b:88:3f:bf:bf:
         27:04:2e:34:4f:2b:86:be:63:3d:f9:f6:38:e7:6a:85:04:f5:
         f4:b4:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:06 2025 by rpki-client