Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          aJU6eRJLQFN6Vg2c5nEtGdSQ2MLA2HOu75iMDCSn1sM=
Subject key identifier:   6E:5D:9C:AD:F1:33:07:15:6F:07:6F:B8:3D:0A:9F:3B:98:89:24:B3
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       019844E38D62A10F293792DF4B5F1C2B7133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          161A
Signing time:             Sat 26 Jul 2025 04:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:20 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: IuLyINa7k9i5qS+F/d5K+hgetu/+TL6pYPgPprHECLs=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
                          5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
                          7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:8d:62:a1:0f:29:37:92:df:4b:5f:1c:2b:71:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Jul 26 04:00:20 2025 GMT
            Not After : Jul 27 04:00:20 2025 GMT
        Subject: CN=6e5d9cadf13307156f076fb83d0a9f3b988924b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:ad:fe:6a:2b:e1:52:1c:f9:20:0f:c1:d2:
                    64:ae:f8:5f:42:85:16:59:50:08:e3:31:44:4b:b3:
                    7b:c4:b2:ae:ae:16:fe:9f:b3:22:dc:30:12:e5:e7:
                    36:e6:a3:fd:07:34:49:a3:f0:39:78:6a:2f:e0:3f:
                    9f:93:45:72:00:64:39:ae:b2:bf:99:9d:e5:63:9a:
                    67:ea:62:67:36:0f:74:75:00:74:17:40:41:04:d2:
                    86:81:38:6a:61:28:27:60:2a:25:12:e0:b2:85:3e:
                    f8:c2:18:fa:c8:57:92:bf:1b:95:56:64:96:2e:80:
                    d3:6e:b2:9e:61:c5:ea:df:15:90:42:0d:75:8b:60:
                    b9:7c:dc:25:3d:6f:22:7b:0e:03:74:ac:49:4d:a5:
                    fb:c5:00:43:24:51:5f:78:d8:6e:2d:b1:8c:e0:1c:
                    52:0d:cc:9c:3f:a6:7c:0c:24:96:4c:29:01:97:58:
                    46:d0:a0:e8:58:3c:d8:95:0e:b2:ab:2e:1f:3c:b6:
                    e2:40:d3:f9:a2:ae:5c:10:7b:16:07:cd:ac:97:da:
                    df:9e:7d:6d:d1:b9:4c:51:b2:1f:08:b2:a2:4a:58:
                    6d:36:43:2e:2b:6b:63:af:8e:cd:37:73:0e:cb:91:
                    71:e5:5e:fb:d3:cc:33:a5:c7:49:30:d2:1f:3e:6d:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:9C:AD:F1:33:07:15:6F:07:6F:B8:3D:0A:9F:3B:98:89:24:B3
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:fb:e2:c9:e9:14:ea:22:05:25:d6:57:26:79:02:7e:a6:
         b1:f1:d2:dd:d4:d6:e8:8a:39:d1:40:10:fb:64:a3:67:ae:d1:
         a3:7d:e9:b9:f1:00:61:f7:97:50:b8:8d:4a:07:ac:41:97:0d:
         b0:d3:4b:d8:34:2b:86:12:c7:96:1d:f7:1f:3a:5d:16:a8:31:
         30:ad:89:00:4b:06:55:c4:d4:1e:c8:fb:93:c2:c2:ea:52:c4:
         5c:c1:77:bf:40:b2:97:3f:ba:58:bb:d3:0b:79:89:af:69:4c:
         ad:0a:87:50:4d:1d:27:0a:97:82:60:82:8d:4e:23:ab:27:31:
         fd:3f:51:b8:4a:8d:9c:03:ad:90:68:75:89:58:26:42:86:b9:
         ca:90:69:f8:4d:75:ff:9d:aa:01:a7:0d:61:a5:b3:29:03:26:
         82:17:cc:a3:90:5f:44:43:9d:13:85:54:6b:5f:72:01:0d:87:
         2c:e1:a1:3e:ab:d9:77:7a:e6:7a:b2:e4:32:c5:56:38:aa:d2:
         80:34:45:ff:be:0e:f9:6e:23:b0:a0:c6:73:f1:e5:73:38:8e:
         a1:65:0f:c9:ba:b3:1c:cf:c4:05:f0:de:a6:5a:24:a0:41:37:
         c0:14:f5:7c:60:da:46:2c:d3:0e:a7:6b:85:34:92:f5:05:d0:
         4d:62:0f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:41 2025 by rpki-client