Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          NbHTc6RIQpOuKO/8pHuWagZCcABFScp8fvhWxy0fc00=
Subject key identifier:   5C:39:6F:E6:AF:07:E3:A0:F1:DC:82:A9:F6:32:01:FE:B8:7F:42:49
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019879E3DF8B341763312B9227BDC82FD84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 11:00:33 +0000
Manifest this update:     Tue 05 Aug 2025 11:00:33 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:33 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: zkBmmwtyf1PcdpJFkEXlwUf5moS5MgWzG0FXNokMszA=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e3:df:8b:34:17:63:31:2b:92:27:bd:c8:2f:d8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Aug  5 11:00:33 2025 GMT
            Not After : Aug  6 11:00:33 2025 GMT
        Subject: CN=5c396fe6af07e3a0f1dc82a9f63201feb87f4249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:4f:69:b3:4d:99:5a:20:6f:e4:ca:da:95:
                    e6:2b:3b:96:19:1b:c0:d1:3c:4e:54:0e:0a:5d:68:
                    21:54:c0:bd:69:1f:14:13:d2:44:a8:2e:dc:40:91:
                    d2:04:49:e2:86:e7:43:05:8d:96:d7:14:ac:12:5b:
                    49:be:40:e4:68:4c:97:d4:00:2e:95:28:ec:18:f1:
                    0a:7d:bb:17:5d:67:4f:69:e0:e2:f8:fb:44:e7:f2:
                    fc:d6:79:1f:26:4c:3b:8d:37:15:a6:77:87:72:95:
                    ca:9a:7e:c6:a1:18:52:58:8d:f9:4c:8c:a9:a0:a3:
                    c3:a2:9e:78:00:27:6b:74:58:85:51:58:5a:ba:d9:
                    08:9c:7d:ce:49:0d:74:5a:ad:69:32:cd:aa:99:6d:
                    4d:3d:70:6a:28:6d:7d:2d:c8:9c:32:23:2d:a4:31:
                    67:e5:b9:46:87:d5:c3:73:7b:a5:c7:9d:22:82:eb:
                    12:74:c9:62:e0:ee:7c:6d:1e:e8:85:cd:c6:9d:68:
                    32:3f:11:5e:a4:98:73:22:0b:51:ae:f6:43:fb:52:
                    05:98:02:f9:7f:43:6c:6e:cf:d6:29:ac:46:74:e9:
                    0f:41:41:33:6d:d0:24:3c:10:cf:23:ce:b4:85:6b:
                    39:d7:55:19:ab:85:41:05:28:68:5b:91:cf:d9:e5:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:6F:E6:AF:07:E3:A0:F1:DC:82:A9:F6:32:01:FE:B8:7F:42:49
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:2c:0d:bf:a8:8e:2f:45:2f:a9:fb:5b:91:e3:07:04:2f:
         35:a5:d8:fc:ce:ec:e1:02:72:c9:a2:d7:6e:f8:8a:78:f4:a6:
         54:e9:4c:fe:1f:0d:3c:ca:cc:47:c7:a3:ef:52:7b:19:7b:bf:
         e5:31:5c:17:85:37:a2:34:ab:97:24:53:f9:44:5e:91:42:df:
         0f:be:fc:d0:1e:bf:e2:fe:fb:30:af:5d:fd:e1:6f:66:15:f6:
         93:f4:40:d4:0f:01:17:38:92:a0:2e:c6:c0:1e:a6:25:4e:ec:
         2c:99:5d:88:8c:fb:a6:89:98:ed:2d:67:4e:58:f7:44:33:f3:
         1f:48:e2:39:fe:c7:c8:7f:c2:c2:91:99:4d:68:7b:17:b9:0f:
         e4:cc:18:d9:bc:15:a0:3d:46:b8:da:ca:39:79:8a:4f:11:a8:
         39:4a:87:0c:e9:b0:56:7d:fe:63:6e:68:5e:1d:ef:01:02:0f:
         02:ac:ed:00:ac:2e:ad:f6:99:d3:73:6b:8b:3a:b0:fa:ad:2e:
         1c:b3:e5:10:96:7a:65:b3:f1:7a:13:e2:de:24:39:ef:18:61:
         37:62:b9:67:de:ce:ca:8d:ca:75:51:13:ad:a6:52:69:7f:d0:
         93:78:a4:43:d4:ad:6c:8a:40:fe:d0:79:00:2c:f0:d2:80:9c:
         29:0d:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:00 2025 by rpki-client