Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File:                     cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier:          Uhyvh7y71I9osjGyz/scLty9tWcvtWWNGwhbcpiXVfY=
Subject key identifier:   1C:CE:CD:B5:9E:62:60:51:6B:E1:31:25:3C:24:34:13:37:02:A3:A2
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       019873E1D151E311B94A045EFCBB0834CE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 07:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:35 +0000
Files and hashes:         1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
                          2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: Wq2vSrcoK9LgGcyjjhPf3+3JMsQkxwuSY6aFyxN31VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d1:51:e3:11:b9:4a:04:5e:fc:bb:08:34:ce:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Aug  4 07:00:35 2025 GMT
            Not After : Aug  5 07:00:35 2025 GMT
        Subject: CN=1ccecdb59e6260516be131253c2434133702a3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:c3:86:16:c9:35:63:dc:7b:d2:20:a8:2f:
                    db:27:03:c9:e0:94:d9:f8:4a:2e:1e:43:35:67:6f:
                    99:f3:16:86:a6:6b:df:18:66:71:98:08:92:6a:b5:
                    52:ec:0c:a8:53:68:6d:fe:2c:6f:91:30:38:36:e5:
                    e1:78:7c:e6:4a:89:de:b5:97:dc:3c:3b:e5:c1:b8:
                    19:a0:4b:2a:c1:bd:6b:76:1a:88:3b:96:31:ac:52:
                    01:14:99:2b:0a:ab:d0:9a:d1:bf:5a:0b:6a:59:da:
                    4b:73:82:7a:99:18:09:66:67:16:56:e3:49:94:a8:
                    60:be:31:e6:39:f1:04:06:11:14:3a:12:36:a2:ae:
                    6a:3e:00:a4:2e:5c:67:a3:9c:08:36:10:0a:f3:85:
                    39:0c:5a:90:d7:94:77:86:2d:1e:37:91:6f:57:d1:
                    53:c5:5e:4e:4a:28:29:86:7a:3d:e2:d5:a2:a1:88:
                    59:85:be:67:3f:cd:c8:d3:c4:01:99:94:74:80:11:
                    1a:74:ab:48:46:8c:90:f2:6d:19:d4:27:58:1f:17:
                    41:db:6d:7c:67:65:ad:45:0e:21:26:16:26:0b:f4:
                    35:fa:8e:fc:21:ea:67:87:03:fe:db:a7:fa:1b:ed:
                    f3:05:92:f4:00:be:75:c2:96:1c:69:fb:ea:1a:ee:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:CD:B5:9E:62:60:51:6B:E1:31:25:3C:24:34:13:37:02:A3:A2
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:49:22:4f:fb:ac:e7:f7:1b:18:bc:73:5c:49:90:c0:6c:
         0a:a1:f3:30:c2:08:4f:e3:8d:cf:2e:22:36:59:fd:eb:b0:9e:
         cd:21:00:ce:a7:8b:54:d3:32:5f:37:f6:29:77:ba:0c:28:6a:
         85:0c:4e:9f:1b:52:82:2f:3d:2f:8e:9a:5b:d5:73:fc:3c:ed:
         f3:70:97:5e:b7:27:50:bb:93:56:b6:c5:4f:fa:51:5e:ed:7d:
         40:3f:3f:f4:9c:fc:1b:b4:3d:76:38:8b:c5:95:ba:d7:7c:64:
         19:c2:0d:b6:94:af:7e:0f:bf:d4:f7:f3:b8:79:ca:59:e5:f7:
         54:ba:9d:ae:fd:80:4a:34:53:4a:81:6f:a9:ca:a9:27:72:02:
         be:cc:f0:47:1c:f9:1d:d3:16:dd:e6:f0:62:04:5f:31:0e:ec:
         e4:18:79:d7:e0:a6:df:67:a7:5b:17:ed:11:16:01:d2:4e:73:
         12:95:4c:63:06:4e:98:2b:4e:91:0c:64:8a:ee:8f:c6:00:43:
         19:83:cd:3c:f3:1a:42:69:3e:87:06:1f:55:e2:c0:2b:c1:cf:
         51:64:7c:3e:54:78:2b:ac:8a:f9:59:b7:66:ee:8d:53:f3:a5:
         18:b9:bf:fa:5c:1b:6f:55:7f:ee:b5:1a:03:ac:9d:bf:0f:4e:
         05:5c:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:49 2025 by rpki-client