Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
File:                     7qArGX269963Tgon2dTs0_rh6O0.mft (raw, json)
Hash identifier:          BNG8ZuCxRBwYgAKYMVgZchPKTqCxITKZc66UzIqWKnE=
Subject key identifier:   4D:0A:E0:62:40:6C:DF:8A:52:88:2E:55:29:39:70:42:08:6D:A1:A0
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       019844AC6B1CEEED40FDEBEF25CCCEFC3D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
Manifest number:          161F
Signing time:             Sat 26 Jul 2025 03:00:06 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:06 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:06 +0000
Files and hashes:         1: 7qArGX269963Tgon2dTs0_rh6O0.crl (hash: csrf0Yw6aZkw+LVlb3NElSj+vg5n72wOlPRqrBopz7A=)
                          2: FxWebtYYlGe-nsvzX4oDF8uD6mE.roa (hash: k4FRn4gBtVdswS2WfZGMM+Vy5KwCdhuYYS+n70PWeoU=)
                          3: NxsBpjDsWy9v0RWMdQHyTsw07lc.roa (hash: leheEhbDI4XfsGyTiSLU6x5xDwKD07q9ll4YmYgHG4Q=)
                          4: W2y7ILyVjCj4EaeyqbQeC_Dcd1M.roa (hash: Zefjs5+cQyH8QCnVGn+TztucGEd7H6R6h5c8uGrlYWM=)
                          5: aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa (hash: yU020JUGihSFwGMLXiDxQbplODmP3bvw7D4/kPZyPGs=)
                          6: qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa (hash: KF47TtbdP48u62TLuuhtCoJv1ZVOVKI3VHzg8tm8ZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:6b:1c:ee:ed:40:fd:eb:ef:25:cc:ce:fc:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Jul 26 03:00:06 2025 GMT
            Not After : Jul 27 03:00:06 2025 GMT
        Subject: CN=4d0ae062406cdf8a52882e5529397042086da1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:82:e1:95:1a:41:7f:94:c6:16:2c:8e:35:
                    d1:cf:d6:83:26:a7:1b:34:fc:a3:17:62:09:ab:78:
                    36:f0:3f:dd:81:14:cf:25:c9:60:98:aa:6f:ba:60:
                    5e:cb:76:ca:a7:e7:d3:64:e6:50:dc:7d:41:49:17:
                    a0:b3:e6:06:02:b5:dd:a2:9f:26:11:55:86:1e:25:
                    68:13:85:3a:f4:ab:12:1f:80:a8:d7:24:02:02:77:
                    91:e2:94:f6:c1:5c:9d:10:7c:9b:a2:63:2e:a4:55:
                    8e:8e:14:12:95:e6:84:fc:4d:4e:0e:66:7f:5f:db:
                    a0:7e:6d:47:ee:09:cc:36:27:f6:b8:52:6b:56:a5:
                    49:34:ef:6c:9c:a7:e6:fa:74:f0:5b:0f:ae:6c:06:
                    c3:b3:6f:be:69:76:14:04:ca:c1:3e:95:55:36:25:
                    4c:38:9b:84:6f:f0:78:f8:8c:03:66:bb:ae:37:a5:
                    84:92:38:f0:8d:81:b8:ca:6f:af:7b:00:a1:15:04:
                    b8:e5:28:36:a0:0e:91:4a:26:ff:cd:54:50:c7:e7:
                    47:ec:f7:79:87:04:e5:19:5d:f9:6a:83:6a:f7:ea:
                    c4:33:19:28:94:1c:50:17:aa:50:70:bd:88:22:36:
                    f9:91:77:04:e9:4c:5c:75:f9:8c:d1:f6:7b:98:7e:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:E0:62:40:6C:DF:8A:52:88:2E:55:29:39:70:42:08:6D:A1:A0
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:88:a7:f0:40:f4:ec:a2:93:63:f4:d1:29:76:91:a2:72:
         3b:ab:31:0a:3a:d6:3d:70:8b:3d:8b:99:ec:46:48:d2:f4:d4:
         78:d6:94:0d:b0:95:1d:60:11:d8:28:19:37:53:58:54:98:e0:
         b5:b1:2e:ef:98:fc:50:03:0d:f1:69:3d:d2:50:f1:7c:f4:c8:
         c2:6f:97:36:9b:9c:0c:df:92:a5:19:22:bc:33:23:03:56:6d:
         62:16:02:d6:5c:2a:b8:4a:aa:b5:d2:20:f6:e4:d2:99:3f:59:
         b1:9a:9f:c8:07:cc:32:5b:c7:d8:34:a6:0d:91:d9:99:30:c8:
         c9:15:e9:46:b0:78:fa:74:56:cc:72:bb:3a:d3:06:60:42:20:
         bb:33:66:9f:12:4e:51:c2:5e:a9:e7:f3:b1:e3:dc:0d:91:f8:
         84:f4:d1:58:57:f4:5a:fb:0f:74:d9:73:b5:1c:20:22:f9:dc:
         d0:e5:66:55:07:68:19:33:3d:58:9a:3b:7b:c1:ab:60:32:9f:
         c1:b7:da:6c:23:7c:bf:e6:f8:2b:8f:6c:53:af:fe:3c:0a:7d:
         c0:3d:ed:55:c9:b1:9b:79:52:39:c8:e5:4d:cc:0c:d2:6f:1a:
         8c:6d:f9:ab:58:a9:b4:e0:78:88:46:a4:b7:36:62:df:1e:e4:
         7e:14:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:06:03 2025 by rpki-client