Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          J0h3UhG2wcXBK1P/9wzytjMHrCYsAPYAP86xNgfHiVo=
Subject key identifier:   95:10:9F:7F:DC:AA:F9:27:A8:C8:5B:F8:D0:49:8A:EB:92:C7:71:2B
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       0198D96099F8609A30ACA267F01349A46145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          161C
Signing time:             Sun 24 Aug 2025 00:00:43 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:43 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:43 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: gOqBCs4JDzWcFl9BrCzbq2AIUTFEotKED8ir5zxYCd0=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:99:f8:60:9a:30:ac:a2:67:f0:13:49:a4:61:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Aug 24 00:00:43 2025 GMT
            Not After : Aug 25 00:00:43 2025 GMT
        Subject: CN=95109f7fdcaaf927a8c85bf8d0498aeb92c7712b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:42:54:8e:f8:15:ce:e3:5c:16:6c:a2:68:
                    5a:12:b9:4f:18:84:04:5a:63:88:fe:d3:39:75:b2:
                    a7:7c:a6:8c:ce:29:98:50:75:0c:a8:10:06:94:b5:
                    30:d8:11:ea:96:80:d1:8b:2b:08:ac:48:89:0b:3d:
                    38:89:cc:13:7a:42:2f:5e:02:47:31:ef:77:a9:f1:
                    64:61:b9:78:dd:41:fe:a1:a9:1c:3c:fc:3e:9e:a6:
                    a1:de:76:37:b0:60:63:f4:70:ca:c4:1b:44:c5:59:
                    f2:3c:31:5b:65:6d:7b:a0:36:64:8d:86:2c:7d:0d:
                    2c:5f:f0:6f:0e:ac:b4:f1:73:ad:de:df:18:53:99:
                    2d:de:ee:bf:0a:9c:82:d5:9b:a3:c8:28:fd:33:cc:
                    d0:bf:42:f4:9d:f8:35:60:9f:c4:1a:ff:fe:ee:f9:
                    39:67:28:03:92:59:5e:c1:b0:a8:36:2f:f6:dc:61:
                    eb:39:e2:ba:0c:b2:94:42:c6:1f:3f:88:09:3c:22:
                    09:6d:75:fa:0e:2e:5c:35:e7:d8:0c:48:01:05:3c:
                    9c:69:6a:32:20:55:e7:d4:b2:9f:4f:1c:2f:d0:e5:
                    82:32:65:97:c8:24:72:9a:96:84:e7:76:19:b1:09:
                    5d:2a:1b:64:39:bc:e0:56:51:01:c4:d6:1e:e9:e3:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:9F:7F:DC:AA:F9:27:A8:C8:5B:F8:D0:49:8A:EB:92:C7:71:2B
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:ff:50:a0:85:16:8c:30:74:9b:41:d6:19:9c:fd:71:41:
         45:3d:f7:d8:4e:65:9d:98:d6:a4:50:f3:83:9d:1f:9c:5d:3f:
         e3:86:0b:67:a0:64:2e:44:81:6a:99:39:32:91:ce:41:f4:58:
         36:8d:bf:a2:8e:94:15:98:30:9e:7a:95:04:64:cd:63:7d:77:
         36:52:8c:27:9d:b5:9c:80:c9:6e:21:55:cf:04:6f:26:e5:bd:
         94:fe:21:d7:8f:f7:58:c7:1c:86:59:4a:4a:6e:80:45:11:db:
         d9:95:97:e3:94:ea:f4:46:b5:17:e0:1d:85:04:40:bc:10:ce:
         9c:d4:82:a9:86:9d:dd:fa:03:b8:fa:2f:fe:8c:30:ff:93:4f:
         87:8f:67:14:71:7e:94:48:41:49:8b:c1:f4:5d:2c:82:c1:99:
         a9:25:46:5b:9b:41:9e:f7:42:e5:40:c8:db:c8:c1:67:4f:34:
         dc:94:a9:22:98:9c:e5:60:64:eb:c7:b5:40:57:97:6b:85:7c:
         f3:a3:7b:6e:4e:4e:09:c9:c7:3d:f8:96:85:98:de:f7:9d:21:
         c4:d4:c3:de:e1:22:63:26:dc:0b:23:b7:64:50:34:ce:f4:06:
         65:88:57:d4:77:48:96:7c:7c:2c:40:46:be:78:3b:56:7f:dc:
         e0:f7:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:38:32 2025 by rpki-client