Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          bjSAo0Op2yDKrQHOce9EpFeWMU1UiAahX6pCG4Vi2Ek=
Subject key identifier:   23:A9:9C:B4:07:81:67:E7:62:13:04:71:F4:63:21:B7:11:C1:36:66
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       0198D7734567E17E5ADA51C2FB219E7BC439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 15:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:52 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: FHqdYWkKkUoCMtaTcQq2OJPOkwM063FoEdmXc56Zqtw=)
                          2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:45:67:e1:7e:5a:da:51:c2:fb:21:9e:7b:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Aug 23 15:01:52 2025 GMT
            Not After : Aug 24 15:01:52 2025 GMT
        Subject: CN=23a99cb4078167e762130471f46321b711c13666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:3b:9d:0f:fb:6b:47:d4:cc:c6:fc:90:6b:
                    f2:d0:ec:25:89:0f:39:d5:22:e7:0f:46:4b:61:02:
                    2b:6d:2b:c7:ac:be:d5:4a:62:0f:75:62:fd:bf:93:
                    31:bc:6b:7e:2d:41:5e:b3:b9:22:36:e3:cd:9e:c9:
                    30:90:a0:54:c5:c0:d2:6f:2b:27:f6:a4:98:cc:95:
                    c4:bd:41:d8:12:19:56:33:d5:0f:ba:5f:ff:93:5d:
                    81:48:ba:a7:98:6a:db:6b:94:48:1a:53:23:92:80:
                    d8:1d:77:7e:9a:cd:23:15:80:2c:c9:8c:d1:9b:bf:
                    1a:f5:72:12:92:f3:56:b8:64:0a:76:ca:2c:db:27:
                    e9:01:81:1b:6d:21:b9:5d:90:bd:d4:3f:9f:85:fb:
                    0f:9d:ab:75:e9:e6:36:7e:be:39:30:1c:a7:2d:56:
                    be:c9:bd:a2:1b:04:8d:51:fc:e6:93:2b:ae:04:68:
                    eb:bb:6a:1e:5e:ec:48:2a:bd:ab:38:ee:b7:8c:5c:
                    21:fa:11:ce:31:51:84:da:2b:df:4b:25:6f:d4:d2:
                    4b:d0:93:de:c2:b9:3e:c5:e4:e2:bf:55:74:d3:d7:
                    d3:e7:82:77:03:8a:69:eb:a4:d9:95:43:6f:6c:2c:
                    fd:d8:5a:a1:89:55:83:ec:20:21:d8:c1:c9:16:21:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A9:9C:B4:07:81:67:E7:62:13:04:71:F4:63:21:B7:11:C1:36:66
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:64:9f:b7:85:3b:ad:67:79:6f:9a:d8:8e:8f:0b:d7:8d:
         34:ef:06:29:de:85:2f:e7:1c:db:74:da:cc:3e:3b:8b:a0:e6:
         20:0b:37:c9:2b:72:f6:d4:73:70:de:d1:2b:d4:30:9b:f2:21:
         ac:ee:7f:c5:48:06:0a:d6:3d:b1:3e:02:71:fd:a9:44:87:2c:
         65:59:93:d6:76:aa:e3:3c:e3:92:71:c7:75:bb:45:43:11:ed:
         8b:fe:8e:99:e4:12:0a:8d:f7:09:30:5f:b3:bc:12:4c:c4:99:
         af:1d:d1:80:95:53:48:07:27:8a:64:f3:19:0a:c0:7d:3e:f2:
         74:4d:d7:7a:c9:bf:63:e7:84:c2:ed:e5:12:c2:d5:c6:80:cd:
         31:91:f7:13:27:f3:ff:e1:5e:92:d8:e4:93:0d:a1:7b:ea:73:
         9b:75:62:87:ba:f0:94:93:fe:6b:ac:19:cd:58:66:ef:28:f2:
         77:d6:ae:a0:9d:8e:85:64:0b:5c:bc:fb:03:f9:be:41:e7:a8:
         9e:63:e7:f9:79:fe:7d:8e:da:7a:2f:9f:da:54:82:dc:9d:2b:
         da:bf:df:7a:09:9a:e5:47:65:fe:2c:a3:5f:c0:40:a6:5b:d1:
         a5:c1:37:d0:e7:36:10:a3:f7:33:9d:31:c3:d0:4d:e2:8e:41:
         09:1e:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:12 2025 by rpki-client