Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File:                     phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier:          EgjVorT1BzQfwBkciZF12dhiUMIXkNLqjspWh099NDM=
Subject key identifier:   D5:C1:0B:32:C8:2E:DF:6F:89:44:CB:F1:82:9A:6D:0F:E5:03:FA:84
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer:       /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial:       0198D4736F6D1C61107F909F744BCD47602B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number:          136B
Signing time:             Sat 23 Aug 2025 01:03:11 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:11 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:11 +0000
Files and hashes:         1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
                          2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: aDtMHBKsrbE5M2FMumbcaEBbKgbj2kwMg2npsEdWEJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:6f:6d:1c:61:10:7f:90:9f:74:4b:cd:47:60:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
        Validity
            Not Before: Aug 23 01:03:11 2025 GMT
            Not After : Aug 24 01:03:11 2025 GMT
        Subject: CN=d5c10b32c82edf6f8944cbf1829a6d0fe503fa84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:6e:4b:07:36:2b:5f:ed:4f:ea:f6:e0:74:
                    e9:a0:60:99:41:c7:1f:cb:96:45:79:8b:22:37:95:
                    0b:e1:ec:c1:15:08:18:f7:73:e5:cb:aa:96:26:1d:
                    10:02:89:fe:ec:a6:a4:01:89:d1:52:e2:d5:e0:34:
                    19:16:7e:74:52:bb:fc:ea:6d:96:30:ca:e2:8c:20:
                    fe:3a:a8:a2:20:f3:e5:07:0e:07:fe:77:53:a8:78:
                    42:c3:cb:d9:fa:fa:4f:2d:88:86:97:ae:99:1c:9f:
                    40:42:5a:5b:79:42:3b:7b:f0:fb:fc:f4:6e:04:62:
                    bf:f3:0b:b4:cf:ef:3a:d4:65:27:b6:1b:e3:08:bc:
                    f8:12:e9:a6:ab:3d:d3:9c:ea:3a:87:19:dc:71:a8:
                    50:cf:17:ca:ba:f0:12:fc:16:01:46:87:52:a7:7f:
                    26:eb:96:e7:32:2f:3f:2a:56:13:e0:c4:75:78:8e:
                    8c:83:69:63:f2:78:03:50:cd:68:9d:2a:7b:60:af:
                    ec:5d:13:9e:38:ef:e0:16:d8:77:30:ff:dd:5d:75:
                    bb:19:54:06:c5:52:25:a5:5e:64:ed:c8:68:d9:1d:
                    a0:0c:08:5c:f0:fc:9a:6f:14:6e:17:de:91:1f:b4:
                    08:ba:af:95:4d:cf:d4:65:98:c1:f1:ad:c3:46:21:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:0B:32:C8:2E:DF:6F:89:44:CB:F1:82:9A:6D:0F:E5:03:FA:84
            X509v3 Authority Key Identifier:
                keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9d:e1:9d:b8:4f:97:4d:f3:4d:9b:06:04:d6:1e:8d:68:2f:
         7e:25:0d:0f:32:11:27:25:1a:b3:05:a2:6f:0d:9a:7f:15:a9:
         ba:da:15:04:97:d5:b7:e1:93:c3:6f:99:40:50:ec:c9:99:15:
         a7:20:98:66:75:01:f9:77:f0:64:a7:b0:89:2c:07:c8:84:91:
         41:b0:5d:74:c5:54:a2:10:ca:53:9c:03:c3:2f:ea:73:d4:c5:
         f1:d5:bb:9f:d1:64:14:db:12:5d:79:e1:55:2f:b0:7b:3a:b8:
         a6:89:73:00:a5:bd:48:37:b9:f8:d4:42:70:bf:74:b0:22:86:
         88:33:15:b6:6d:55:c2:c7:2d:dc:6e:f5:34:e9:97:db:8e:c2:
         cb:17:a7:b7:14:84:f2:aa:00:db:f4:39:19:1b:eb:19:b8:74:
         f1:d4:39:7e:57:29:6f:6d:e9:ec:1d:ec:83:27:aa:f9:dd:e3:
         fe:a3:26:12:ec:01:23:ea:cd:68:3f:7d:c2:21:32:75:b7:c9:
         e4:e1:9d:3c:34:55:4e:4d:f0:e7:f0:7a:ae:1f:e4:7f:d5:b5:
         ce:c9:09:ed:57:c7:cb:87:36:de:08:8a:5d:71:5d:cd:c9:12:
         7b:6c:c5:c1:c7:69:8c:5f:07:7b:ab:a8:ac:69:93:a1:93:48:
         c9:80:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:03 2025 by rpki-client