Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File:                     1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier:          n8EZugpX+KQAIMdBdcjELqkqY2qgu054lIzk7kGTCog=
Subject key identifier:   71:64:A8:A1:87:22:3C:AD:E4:DE:A5:AF:DD:63:CC:0C:48:B3:A3:B9
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer:       /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial:       019950E598A6629837228B07A5C421F08DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number:          161C
Signing time:             Tue 16 Sep 2025 05:00:48 +0000
Manifest this update:     Tue 16 Sep 2025 05:00:48 +0000
Manifest next update:     Wed 17 Sep 2025 05:00:48 +0000
Files and hashes:         1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: TZKj7zVcyElnv0R27jWI3ZkOb/BtVhVsheds674mLJA=)
                          2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:e5:98:a6:62:98:37:22:8b:07:a5:c4:21:f0:8d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
        Validity
            Not Before: Sep 16 05:00:48 2025 GMT
            Not After : Sep 17 05:00:48 2025 GMT
        Subject: CN=7164a8a187223cade4dea5afdd63cc0c48b3a3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c4:b8:c3:5c:6b:f1:07:ab:4f:2e:7c:3a:f2:
                    c6:cd:22:91:ce:91:54:12:33:b2:41:e6:82:46:f6:
                    9c:8b:11:01:47:9d:f7:33:1e:9c:e8:25:16:ab:aa:
                    c5:a3:e2:50:37:90:3e:73:3d:fe:44:f5:d8:a2:96:
                    b2:d0:1e:81:77:1c:4e:71:41:70:d3:e9:e2:de:cb:
                    37:1c:d4:9d:99:78:7d:8f:4d:98:22:70:a7:b4:d4:
                    2e:fe:1f:48:74:08:6a:8e:ce:69:9a:46:a9:c0:1d:
                    c9:f3:0a:75:3b:7f:e4:e1:33:da:21:4f:b1:79:af:
                    cb:29:4c:e3:b4:2f:ef:5e:09:83:b0:8e:54:0f:28:
                    41:62:78:28:17:c1:a0:a9:94:54:ce:ee:71:c7:43:
                    d3:83:f3:82:74:e0:a9:17:50:5f:1e:26:e8:3e:39:
                    0a:fa:19:17:29:87:5c:eb:c5:e6:42:3d:13:d6:9f:
                    b3:13:82:69:dd:74:f4:43:d7:22:ad:3a:a2:ac:66:
                    16:c4:3b:d8:59:8a:d8:14:74:f9:b5:5a:00:7e:f1:
                    1c:56:8f:b6:9e:cc:21:2a:83:aa:04:ae:ea:c2:3c:
                    b2:d0:93:c6:b5:7a:1e:66:95:17:17:7a:76:bc:32:
                    db:cf:3f:6c:66:23:8a:1f:70:a4:af:a0:d3:70:32:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:A8:A1:87:22:3C:AD:E4:DE:A5:AF:DD:63:CC:0C:48:B3:A3:B9
            X509v3 Authority Key Identifier:
                keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:77:ce:dc:01:b8:d7:11:eb:71:c3:c1:44:91:4a:3a:7b:e4:
         d1:ef:2c:cb:3e:f4:4a:64:81:11:ce:4f:b4:49:12:69:49:af:
         51:9c:01:ef:d1:a7:72:1b:d2:55:ed:34:71:d1:b4:cd:49:77:
         fd:03:96:87:d0:ca:1c:66:28:46:ed:85:3b:b5:2f:6b:cc:71:
         73:73:d9:51:ce:29:d0:20:88:04:df:04:45:49:dd:e5:c4:17:
         95:a7:8d:ae:bb:5a:fe:79:86:7f:55:a7:53:12:4f:ab:21:6a:
         00:ab:d1:c1:b6:c8:9b:c8:67:ce:11:4c:b3:82:74:9a:1a:85:
         f0:ba:b8:a1:68:35:00:20:e8:27:1a:68:b7:17:63:c7:d9:f4:
         74:e3:00:bc:32:b1:3a:14:2e:2b:6c:02:f2:9a:0c:03:43:ee:
         0f:26:d7:90:16:7a:9f:5a:95:75:4a:c9:cf:39:4c:e5:53:e2:
         6c:76:cf:07:c5:35:ae:b5:d9:03:ca:04:ce:ac:be:e2:7e:80:
         68:9c:f3:a8:85:87:6f:2d:97:93:c4:51:01:d6:d2:8b:62:e4:
         fd:e0:9b:a9:f7:03:28:77:5b:cf:1e:c3:21:f4:88:c7:25:f7:
         5e:54:a8:d6:aa:4d:48:50:4a:e8:40:16:66:b8:7f:34:7a:81:
         d7:b6:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:21:31 2025 by rpki-client