Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          8d4/KTe8MJ3xbe0JYah61DbMxDQ28kTu8LhyNaeKEzA=
Subject key identifier:   6D:66:4F:4D:79:02:46:20:23:89:57:F2:A2:99:64:D8:B6:33:34:51
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       0198816890E8BCEC7BD8BB5484F79A42401A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 22:02:50 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:50 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:50 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: t/PjHBrduMeXcGASy677ksV+Aiie0ntomy7+pwQlWOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:90:e8:bc:ec:7b:d8:bb:54:84:f7:9a:42:40:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: Aug  6 22:02:50 2025 GMT
            Not After : Aug  7 22:02:50 2025 GMT
        Subject: CN=6d664f4d79024620238957f2a29964d8b6333451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:1b:df:69:c1:cc:e0:38:02:db:1c:f5:33:
                    55:0c:e3:c8:2c:18:3b:2b:d0:74:6e:d4:f9:9c:6f:
                    ec:13:22:12:2e:67:01:76:da:ef:aa:d3:98:d3:6a:
                    9b:0f:87:f1:0f:45:08:56:18:da:7e:86:4b:a4:d7:
                    6d:15:eb:bb:53:46:c0:f3:74:e6:c9:50:c4:e5:ff:
                    64:cb:fe:eb:d2:d3:88:05:f8:13:33:27:e3:1d:75:
                    ed:0d:b9:1e:d5:f9:5d:0d:dd:89:bd:c5:55:c3:ea:
                    37:e0:5c:bf:c6:08:b4:42:22:a2:27:5d:86:e4:74:
                    c3:c7:c7:cd:ce:8b:8d:2d:0f:7c:7c:27:97:71:26:
                    9a:16:52:8f:14:f9:de:d7:da:b6:be:08:ca:45:41:
                    50:39:93:55:e4:79:ff:c6:b0:1d:af:84:f4:bf:5c:
                    88:d4:ea:7f:ef:92:72:ba:f4:08:81:f7:c6:65:55:
                    fc:65:a7:65:d2:bb:8b:c1:6a:8a:8a:46:b5:d5:b3:
                    c9:76:82:be:02:06:d8:80:ca:4d:bd:8f:24:b6:3e:
                    92:46:d6:5e:6e:d6:54:e8:46:d5:91:3f:cd:44:2e:
                    59:64:f4:1c:29:fc:2a:c6:b4:fe:1b:1d:28:9e:84:
                    b5:cb:22:cf:ef:36:e6:cf:e7:2c:c7:da:38:01:13:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:66:4F:4D:79:02:46:20:23:89:57:F2:A2:99:64:D8:B6:33:34:51
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:df:76:1b:c2:fe:f4:41:38:64:d3:2f:d7:12:c5:c8:eb:
         37:d5:6f:bc:42:ed:81:de:98:b4:50:4f:9a:42:43:90:af:ab:
         86:4d:dd:6b:39:da:83:7e:71:30:8b:dd:4e:00:ae:31:1d:b9:
         c4:b6:e2:2c:c2:77:b0:5d:da:c7:2a:6e:4b:20:8e:9a:fc:8e:
         f0:1b:52:e5:6a:1e:71:ea:45:b8:24:e9:c3:05:02:ed:8a:0b:
         2f:cd:52:b2:7c:a2:13:6c:52:af:c3:2d:12:78:1d:f3:62:e8:
         ac:e6:91:ca:05:e8:ca:5a:09:4b:df:7a:2d:78:ab:8e:2d:f3:
         27:e4:91:c7:f6:8e:65:13:01:d0:25:6a:d1:45:f1:98:23:4f:
         c7:24:b7:dc:d0:83:55:ed:b2:c6:f6:cc:3b:1c:8e:d7:c7:5e:
         0e:fa:4b:30:f8:7a:7c:a6:a5:dd:1b:b3:fc:12:f6:e0:4a:8a:
         91:4a:b5:bc:48:a7:64:1c:f7:4b:fb:e9:11:71:d5:e5:5c:39:
         75:b2:fc:5e:b6:36:39:7a:cd:a9:b8:04:3f:8c:2a:58:2f:fb:
         9f:19:b7:af:25:3d:ca:eb:0a:41:b3:f0:9d:66:f9:46:c5:ed:
         2d:0b:d9:50:f9:c2:a0:02:07:17:98:8a:44:aa:c0:e7:d2:8b:
         6f:4a:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:30:26 2025 by rpki-client