Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          ju47Gw9zJCGrIKCwc7ZYrWaSzSaPJ1Ew6QC5ueEsl9c=
Subject key identifier:   A0:17:09:F4:A0:37:D7:73:60:57:CF:31:4D:00:86:2A:5F:3E:11:A9
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       0198DA3BEA41C3CF549D2AD6549ED8E08844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          164A
Signing time:             Sun 24 Aug 2025 04:00:16 +0000
Manifest this update:     Sun 24 Aug 2025 04:00:16 +0000
Manifest next update:     Mon 25 Aug 2025 04:00:16 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: bObhOwNYAFk4S+DoyONdky4Apvc7sFRKYU2dBEUTM+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:da:3b:ea:41:c3:cf:54:9d:2a:d6:54:9e:d8:e0:88:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Aug 24 04:00:16 2025 GMT
            Not After : Aug 25 04:00:16 2025 GMT
        Subject: CN=a01709f4a037d7736057cf314d00862a5f3e11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:0e:85:1f:87:36:c3:a9:6e:a7:bd:93:15:
                    d9:5c:ab:c3:f9:52:9c:f2:85:df:95:27:7a:22:56:
                    74:5c:0a:e3:cf:63:78:cb:c7:95:29:b4:89:ed:00:
                    2b:e0:6f:7f:70:c8:0a:23:4c:6d:e9:6b:00:d6:1a:
                    58:39:90:0f:e1:84:61:75:5a:dc:b1:d0:3f:40:94:
                    f1:63:d5:43:90:e2:b6:bf:ea:29:fb:02:49:8e:fc:
                    48:81:e7:1a:7e:60:23:81:d8:5d:ff:9f:60:1a:1d:
                    81:24:d3:5a:5a:5c:bf:ae:81:0a:b1:c8:36:72:6d:
                    29:12:c0:56:a9:33:c3:ca:ce:e4:38:4c:59:23:8a:
                    52:ff:ee:3c:6d:d3:22:f4:ea:d0:cf:bb:25:0d:8b:
                    bc:07:03:67:87:3a:ea:83:ae:97:9f:66:af:cf:3e:
                    17:16:e0:91:cb:ab:c3:11:1c:ab:06:9c:5c:34:47:
                    c7:86:de:61:d7:c5:d8:c7:74:1f:01:45:e1:57:63:
                    dc:45:d3:c3:d9:eb:63:1c:0f:3d:1e:00:d0:04:bd:
                    6a:2f:18:e9:19:ed:0c:8a:56:07:49:32:d0:3b:0d:
                    9d:f8:a3:36:fe:13:ee:9d:5d:43:fd:37:7d:34:d3:
                    51:3d:5d:39:12:0e:a1:f7:32:20:c7:0c:0f:dc:fc:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:17:09:F4:A0:37:D7:73:60:57:CF:31:4D:00:86:2A:5F:3E:11:A9
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:09:ee:37:cd:05:4b:c9:33:e2:84:7d:c7:f1:c1:15:d1:7f:
         72:bd:8e:60:52:cd:ff:5c:8b:94:06:f0:b5:37:ce:ca:b8:fc:
         0a:96:8b:80:28:25:88:0a:c5:a6:e7:a9:6e:e1:84:92:82:c5:
         87:1b:ff:e0:48:a4:8a:e2:32:94:b3:d0:cb:13:64:d5:ee:a3:
         ee:f6:9b:10:01:ba:e1:2f:de:b5:80:65:e9:fa:b3:0b:0a:af:
         d0:5f:f5:67:d1:64:d1:a4:6c:49:01:5f:37:7c:ef:6b:cb:e9:
         b4:09:f8:92:5f:9d:9d:49:c6:de:9f:fd:75:8d:35:7f:a2:61:
         61:46:37:a4:d4:06:85:47:c8:97:17:25:b2:4b:e9:73:e4:22:
         47:fb:e6:47:01:32:d2:95:36:0d:4f:3e:9d:b1:89:bd:dd:e4:
         26:05:32:eb:40:5d:bc:52:32:f4:99:fc:54:a4:8d:e8:c6:12:
         0e:be:c9:2b:18:46:80:b0:67:14:5c:ae:d9:ec:da:d7:04:f5:
         a8:16:d0:3a:e6:b7:5b:44:63:c6:d1:72:46:c8:1e:a4:b9:57:
         53:f9:67:9b:be:7f:5d:3e:0e:8e:c4:6b:72:b3:9e:d4:af:8e:
         29:8e:b6:c8:29:95:f5:1d:b3:ed:12:e0:11:65:00:ef:bf:9e:
         04:3b:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:57:53 2025 by rpki-client