Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          bDuIwL581EK7J48CaKbQhZ+wkNvNV4y/RROBY9zVpUk=
Subject key identifier:   70:1E:0C:02:8C:0B:9B:77:30:38:B5:DD:C0:AB:FA:0F:F1:93:8A:0F
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       019897808C340EAF58C3FEDEB8AE8C1839C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          162B
Signing time:             Mon 11 Aug 2025 05:00:40 +0000
Manifest this update:     Mon 11 Aug 2025 05:00:40 +0000
Manifest next update:     Tue 12 Aug 2025 05:00:40 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: sind+CYkq+G/MYQr91H+8RWv7D98u0UxKTNBz/+LHwk=)
                          2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:80:8c:34:0e:af:58:c3:fe:de:b8:ae:8c:18:39:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Aug 11 05:00:40 2025 GMT
            Not After : Aug 12 05:00:40 2025 GMT
        Subject: CN=701e0c028c0b9b773038b5ddc0abfa0ff1938a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:c6:bf:43:46:22:99:39:22:e6:d6:ca:f8:
                    5b:f5:c8:20:4f:b2:3a:f0:d7:c8:5d:c0:58:b6:a4:
                    db:8a:a9:ac:df:9b:ad:d7:8f:8c:29:c4:d7:06:13:
                    cb:f3:46:c2:31:56:b4:94:a0:60:82:93:ff:89:fc:
                    29:d5:e8:37:7d:e0:87:9d:5c:c5:cf:59:89:ef:aa:
                    b8:4b:4c:f7:7e:cb:51:ec:82:2f:19:9d:01:74:6f:
                    0c:33:db:23:0f:c2:53:64:99:19:16:43:1e:73:86:
                    a9:53:99:b5:c5:be:3f:14:20:c3:b3:1f:b2:06:80:
                    4f:6e:0c:4c:ac:74:ee:5d:70:c9:bc:e8:d1:90:07:
                    a6:b6:b3:5b:cc:e5:c8:40:6d:8e:82:bb:fd:9f:8d:
                    6a:99:0e:98:23:9f:d9:40:d5:f9:04:5b:9d:33:71:
                    ba:a3:e1:40:db:e8:00:d8:5b:ae:2b:c2:c1:88:6c:
                    7d:7d:2e:67:ff:a2:4b:4b:a1:91:5b:b6:7b:3b:e0:
                    65:f0:0e:1d:fe:fd:f3:b1:85:b4:f1:39:96:ab:78:
                    34:80:cb:33:76:51:2c:c4:28:92:b4:9a:6e:68:40:
                    f9:ac:41:7a:b4:42:a2:ff:d3:ff:de:e6:96:ec:7b:
                    d9:04:21:65:19:69:bd:0c:a9:12:e8:3a:03:76:3d:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:0C:02:8C:0B:9B:77:30:38:B5:DD:C0:AB:FA:0F:F1:93:8A:0F
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:27:23:3c:19:58:de:78:4d:5c:ea:f7:aa:a6:19:1f:3b:fb:
         7d:77:49:b1:d1:af:0a:a3:4a:8c:6e:c6:7a:d3:6b:d7:91:89:
         2d:5e:af:24:a6:fe:76:5c:bc:62:af:6b:86:4a:4b:10:e5:00:
         1b:bd:ff:f3:d6:d5:29:d4:40:d6:c6:79:88:69:46:8e:5a:ef:
         0b:74:8f:92:7e:3f:73:29:aa:1f:43:2c:a5:81:0f:fb:5d:ef:
         b1:f8:e4:5d:98:59:a1:8f:7c:ff:27:0b:c2:0c:98:bb:ff:a5:
         75:6b:c8:b1:b3:18:b8:e6:e1:06:28:96:36:38:9c:01:93:21:
         9d:68:df:c9:9b:0b:90:35:be:96:e5:0a:93:32:47:d0:01:e5:
         d2:3b:59:f4:af:7b:c2:12:66:c0:87:c6:f0:4b:98:9d:49:c7:
         c0:86:5c:b0:ee:b8:d7:7c:14:ce:f5:d1:32:36:56:14:ab:65:
         10:97:3a:3e:8c:21:fe:98:0c:46:80:17:ba:0e:57:7e:4e:e1:
         a2:8f:28:91:6e:6a:93:dc:a4:7f:df:3f:f4:f6:d4:fb:1b:2b:
         b5:e2:20:4c:89:b6:d0:01:a8:01:16:00:f2:22:ef:d2:62:e7:
         bd:1b:ef:16:88:f9:f0:d5:12:b7:ef:0f:db:9f:16:9e:ab:60:
         a9:03:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:31 2025 by rpki-client