Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          rN2jKEIEF1v/y+GoROs496ertNlpDYc1ptKCxqsw2Eg=
Subject key identifier:   7C:CC:3B:F9:6D:8D:7C:2D:8C:A8:40:6A:79:21:09:D0:B1:2E:08:17
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       01987BD28AE4F17E19096B05F0F8F87479C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 20:00:52 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:52 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:52 +0000
Files and hashes:         1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
                          2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: 28dD1PICYjHMC4lBJhtKfqpcIQtzi6HojOsMBcAIAIY=)
                          3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
                          4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
                          5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:8a:e4:f1:7e:19:09:6b:05:f0:f8:f8:74:79:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Aug  5 20:00:52 2025 GMT
            Not After : Aug  6 20:00:52 2025 GMT
        Subject: CN=7ccc3bf96d8d7c2d8ca8406a792109d0b12e0817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:b7:83:dd:af:f2:f2:1b:ff:50:78:65:5f:
                    6e:bb:50:1f:b8:75:b2:e8:d9:91:6b:1f:80:3a:1c:
                    84:44:db:b1:51:1b:55:e9:5b:8f:77:27:44:28:bb:
                    38:1a:ff:15:ee:92:06:84:ca:49:3a:72:e5:0e:aa:
                    77:b7:0a:ba:96:e1:39:ce:4d:2a:5f:e4:73:ac:71:
                    63:2d:19:af:88:e2:7d:2f:54:4a:c8:c1:9f:88:16:
                    da:d0:bb:40:c2:67:23:d0:6c:5e:c5:55:70:aa:ef:
                    4a:40:a5:1e:b5:b2:e5:a5:9b:5a:2e:60:11:88:a7:
                    c9:4f:3d:da:29:4b:c9:c3:af:81:93:0f:82:0f:c6:
                    e9:45:b3:16:a4:df:3d:01:3a:83:37:e4:cc:d2:ce:
                    72:d4:94:a6:13:1e:45:ba:3a:54:1d:b5:6c:8c:0a:
                    3d:e8:91:ad:91:c2:77:dd:d4:11:1f:7b:ad:21:24:
                    24:ce:1d:a9:95:4a:f9:46:6b:af:2f:86:02:39:bf:
                    d6:51:8e:1c:8b:5f:29:c5:45:ca:72:db:d0:03:79:
                    2c:f0:6f:94:e6:08:5b:f0:c3:d7:89:36:ae:6f:83:
                    2d:e1:9f:f9:fe:77:97:68:f0:10:16:2f:75:b1:e6:
                    0a:37:86:64:28:77:59:a4:f3:ac:8b:fd:3d:64:59:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:3B:F9:6D:8D:7C:2D:8C:A8:40:6A:79:21:09:D0:B1:2E:08:17
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:40:eb:85:5e:10:3a:2a:7c:20:d2:9b:ff:fe:4e:73:8d:83:
         9b:a6:f7:74:06:23:e4:42:27:a9:8a:ea:7f:b6:08:cd:a5:62:
         7f:a6:aa:1d:17:ec:a1:15:a0:e5:1b:c0:59:47:6f:6e:41:a2:
         70:9e:0d:70:ff:ea:14:5d:d4:f5:0b:ac:86:f5:ae:f3:63:83:
         4d:91:04:9a:6a:f3:ab:18:a1:a3:80:28:36:d5:cb:fd:78:bd:
         3e:82:5a:cd:91:78:7e:30:07:de:bd:cc:9b:c4:47:a8:ef:2d:
         dc:92:70:d1:08:ee:2c:d3:18:d7:fc:38:a3:bc:6f:15:ed:e0:
         4b:d8:06:f4:24:a8:2f:8e:9d:07:bb:89:01:7b:f3:10:3e:b3:
         b3:cc:77:d8:d3:4d:70:13:44:bf:08:d4:78:80:fc:46:64:0e:
         92:1e:bd:36:1e:e0:40:5f:0a:14:98:a2:ac:74:88:57:8d:27:
         19:6d:85:fa:0d:4f:a1:23:dd:69:d3:72:4d:c4:fe:a8:3d:6c:
         91:4f:08:00:1d:bc:01:c0:da:aa:a8:ed:e8:ef:45:2e:ba:f0:
         a0:22:86:26:4b:ae:94:db:dd:5f:22:d8:4e:f7:eb:a3:89:4f:
         45:fc:b7:b2:99:35:d5:c9:db:96:6d:7e:95:94:8d:d7:bc:ef:
         1f:82:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:34 2025 by rpki-client