Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          41J1Pk40ucrtNonRNOMxF6vvQFuAuFH8/9PwEbI/bXE=
Subject key identifier:   B0:01:47:75:42:A5:4A:E1:8C:54:47:E1:C8:30:3B:CC:4A:BA:50:18
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       01988167DB9B0F9D8408E867C3195483AAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 22:02:03 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:03 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:03 +0000
Files and hashes:         1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: 52fscYJfZDJiMO/r72OiY0hz6PlUPCJ0PFYbyQK+FCA=)
                          2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:db:9b:0f:9d:84:08:e8:67:c3:19:54:83:aa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: Aug  6 22:02:03 2025 GMT
            Not After : Aug  7 22:02:03 2025 GMT
        Subject: CN=b001477542a54ae18c5447e1c8303bcc4aba5018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:6b:9f:50:dc:6a:4a:28:a4:72:6d:73:cb:
                    a6:89:01:03:e3:83:c7:e9:51:dd:37:78:cf:1f:f0:
                    f5:9c:49:87:c5:a0:57:8d:a8:f4:73:ab:3e:dd:57:
                    ea:c9:4e:c2:3c:bf:2d:c9:a0:54:e6:d1:bd:92:4b:
                    9d:22:75:02:6e:09:b3:c9:8b:67:5e:7a:bf:a6:df:
                    48:83:32:bf:bc:61:59:fe:c9:1d:92:0f:e7:78:93:
                    d9:42:c5:2c:ec:81:56:b0:2f:25:95:60:6e:d5:e4:
                    9f:57:c2:a5:0a:be:a3:8a:fe:63:4d:86:cc:24:40:
                    fb:fe:42:c4:74:a8:de:e2:5e:bf:9b:72:df:9c:d8:
                    56:c1:cf:24:02:de:57:0c:57:ee:2e:fd:00:b9:78:
                    9d:94:98:c3:ff:7f:59:da:a8:b7:f3:8d:28:3b:f2:
                    1b:ad:2a:ae:fd:bd:46:6a:1c:2b:60:cd:53:ad:f6:
                    e1:f0:8c:e9:9d:95:2b:03:fb:b6:65:87:3f:98:75:
                    c8:6f:3d:6e:28:b6:ed:a9:2c:ae:61:17:23:62:13:
                    b5:17:0b:a2:25:67:d7:7a:6b:d9:d6:5d:55:5e:95:
                    f9:ca:c6:e2:7f:70:97:68:2c:8c:f2:f4:66:4d:cd:
                    86:25:44:13:46:16:d6:59:a4:48:f7:5a:d6:e5:24:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:47:75:42:A5:4A:E1:8C:54:47:E1:C8:30:3B:CC:4A:BA:50:18
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4d:00:e7:ac:f3:8b:55:17:e7:11:72:ee:6f:a4:05:bb:0f:
         81:c5:40:d9:57:a1:a4:70:4a:87:c4:aa:f5:b3:cb:44:38:d4:
         0b:68:e8:da:d2:6a:24:b8:88:5b:22:7a:32:fb:5c:b3:8c:f6:
         bf:67:1c:0d:41:b5:c1:3a:81:ac:59:c3:ad:e4:90:c1:f9:66:
         81:d9:e9:6f:dd:dd:70:50:c3:ff:8f:98:f8:fe:49:b0:fa:02:
         1d:b4:15:c5:d4:f7:54:3d:3a:2d:25:2b:19:46:e0:20:f4:91:
         a9:83:84:91:6b:3d:1e:52:e9:0c:1d:36:d3:5b:28:27:2c:ff:
         d3:d8:85:93:87:4f:b8:a3:9d:3b:4c:51:22:08:83:6d:e5:a3:
         c1:e4:34:a1:87:e3:00:03:e2:66:23:63:a2:4f:b1:a3:3f:73:
         c3:78:d1:92:df:84:4a:1c:d9:bc:ca:4f:d4:56:a0:60:1e:5c:
         44:cd:93:b8:13:34:ea:99:c0:31:c8:29:ef:92:05:c6:f8:4b:
         f1:c1:4c:8c:df:b9:51:ac:09:a8:26:50:e8:af:3c:33:4a:85:
         a5:57:99:86:75:1d:50:4a:0b:0d:69:ec:1c:57:aa:a0:19:7b:
         83:19:3f:97:12:0d:af:62:6a:d1:0b:6b:4c:27:67:56:16:cb:
         d9:92:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:16 2025 by rpki-client