Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File:                     pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier:          D9W0m5/p3aErI6oPtEJK6bOqRcl5nbPu9F7BPQ+Q0GY=
Subject key identifier:   1D:6E:86:E3:A5:FB:89:1F:D8:E6:9F:FD:3C:B2:36:37:EB:BD:26:E3
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer:       /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial:       019859467E132E7536D90616312EF19883DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number:          160B
Signing time:             Wed 30 Jul 2025 03:00:48 +0000
Manifest this update:     Wed 30 Jul 2025 03:00:48 +0000
Manifest next update:     Thu 31 Jul 2025 03:00:48 +0000
Files and hashes:         1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
                          2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: R3W4mCBIYSyX/jJxis/PsK6YgNkzawr+jL3lFgD2ZJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:59:46:7e:13:2e:75:36:d9:06:16:31:2e:f1:98:83:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
        Validity
            Not Before: Jul 30 03:00:48 2025 GMT
            Not After : Jul 31 03:00:48 2025 GMT
        Subject: CN=1d6e86e3a5fb891fd8e69ffd3cb23637ebbd26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:01:e4:5e:a3:e4:62:6c:94:cd:ba:cd:ff:
                    d0:00:ef:d8:fb:de:ff:d0:bb:ee:60:ee:3b:86:69:
                    c0:98:d4:c8:8a:09:f4:02:b2:2d:2d:f6:db:41:93:
                    80:8b:fb:03:7e:e1:7b:83:ad:3d:28:a8:f4:ce:48:
                    5c:11:b1:c0:45:89:9b:e5:17:1c:5d:1a:e4:12:15:
                    c9:ba:3e:56:32:ff:3a:6f:76:8f:8b:d3:8b:9f:1b:
                    be:27:9f:a2:15:f6:45:28:7e:1b:70:62:69:e6:e0:
                    2f:c4:a4:f4:b3:4f:2e:5a:07:d9:07:72:c3:ed:af:
                    27:7d:73:27:3a:e1:c3:f6:a2:86:29:70:b3:5b:c9:
                    03:a8:49:7c:63:c0:48:0e:2e:8c:bd:3e:4a:72:c4:
                    ee:bb:c3:b1:c5:3d:1e:8e:61:2b:2c:71:13:d0:4e:
                    69:08:18:b3:43:cd:84:5a:73:90:f0:f7:fd:f9:59:
                    df:3e:48:b2:5c:18:2c:1b:16:d5:f9:34:65:86:8a:
                    df:a8:3b:00:8e:35:89:98:42:2e:ff:d6:b0:e6:fe:
                    b2:08:c6:ca:ab:41:1d:7a:f1:dc:98:f0:77:06:35:
                    b3:93:a4:0a:93:a1:53:0c:1b:bb:af:36:f7:fe:c3:
                    84:c6:8c:44:93:87:13:a3:9d:6d:c7:3a:c3:26:c0:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6E:86:E3:A5:FB:89:1F:D8:E6:9F:FD:3C:B2:36:37:EB:BD:26:E3
            X509v3 Authority Key Identifier:
                keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:4a:92:77:a8:20:b9:3e:23:b7:0e:07:01:77:70:ca:ca:
         8a:10:d3:97:cb:05:92:63:0e:50:d2:ce:11:03:26:e8:01:58:
         42:02:c1:56:1a:57:83:02:37:77:8e:64:4b:77:ad:43:4a:39:
         29:41:64:72:d7:a3:08:da:76:7b:82:2d:c7:a3:a3:9c:3a:74:
         71:15:2a:b9:b9:a0:c2:78:c4:cc:db:c1:33:17:9d:3b:56:f2:
         44:bd:1b:ac:2b:a7:9c:ed:c3:19:16:0f:49:53:f8:2c:7c:26:
         bc:20:2f:47:b1:3b:65:ef:75:f7:ef:66:3a:e4:b1:b7:ae:1d:
         3f:28:ac:88:ba:10:f3:9f:ba:81:43:a7:f0:ca:ab:76:17:52:
         d6:d0:3c:46:1d:c6:fd:5b:8e:07:1a:30:13:1d:98:07:4d:1e:
         1a:96:69:91:f4:6a:bc:34:96:37:3d:c0:11:8e:01:99:41:63:
         0d:33:6a:c4:9d:e1:81:db:14:ba:f0:93:6c:15:6f:06:0c:fc:
         35:bb:4b:72:7a:b1:75:4b:19:43:aa:8a:20:0f:76:fd:e9:76:
         50:a7:6e:35:e3:5c:45:77:d8:2f:51:74:d2:e7:9a:e4:7e:8a:
         39:a8:7d:2a:6f:eb:c1:ae:df:3c:31:cc:41:ae:fe:63:3c:17:
         fb:b7:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:03:55 2025 by rpki-client