Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          IMsqoW2a0stIpPt2YTEjlbRQnpA1yUCLzPKs65ONA9k=
Subject key identifier:   51:F1:77:B1:E5:48:2D:41:BA:D6:DA:A9:90:9E:89:F9:8E:58:9D:6C
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       019881681AF29225F4000BE02D564BD97B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 22:02:20 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:20 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:20 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: 5NpDLtqj4Ko1jL0fzfNAmM5SoRLHDXJhQSGxvs63pD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:1a:f2:92:25:f4:00:0b:e0:2d:56:4b:d9:7b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: Aug  6 22:02:20 2025 GMT
            Not After : Aug  7 22:02:20 2025 GMT
        Subject: CN=51f177b1e5482d41bad6daa9909e89f98e589d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:64:58:cb:94:6d:aa:6f:58:ae:84:5c:d9:
                    5a:d3:04:e7:01:91:a7:23:14:d4:17:ed:91:78:7e:
                    15:33:8a:86:4e:6e:c1:cf:d5:a1:85:1d:b3:3e:72:
                    e4:e6:57:1c:31:47:0c:1f:a7:e8:e0:95:ac:0c:31:
                    63:43:1b:bf:ac:1c:9f:da:cb:59:6e:b5:b8:55:89:
                    a0:cd:b9:45:65:9c:3d:c1:19:0c:98:4c:c3:3d:5c:
                    f1:46:a0:27:1d:61:03:83:09:a2:cc:df:72:56:20:
                    67:d6:27:59:53:6b:2c:23:4d:df:df:45:bb:40:2a:
                    67:1c:d4:31:a9:fb:4c:a3:c2:1e:bc:eb:f6:cc:ad:
                    72:4f:69:25:aa:cf:78:4d:9c:dd:d7:6b:8d:fd:52:
                    7f:ef:12:d7:9f:ca:c6:fd:8c:33:37:32:ad:5b:43:
                    99:90:fc:a2:6f:82:a6:f7:f9:4d:3c:67:4a:ad:c3:
                    04:ab:bf:5b:0c:54:fc:76:b9:c1:b4:06:46:63:d2:
                    85:9d:96:d4:4c:24:f3:e9:4f:ac:c9:7f:f2:c3:7c:
                    14:f4:c9:4e:1c:b2:9a:8c:e5:55:91:b6:c9:bf:41:
                    a2:23:8e:fc:91:58:7a:ce:be:3f:ab:44:1c:4f:96:
                    9c:fb:6b:d5:4b:d6:c3:41:1f:19:58:48:61:78:ec:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:77:B1:E5:48:2D:41:BA:D6:DA:A9:90:9E:89:F9:8E:58:9D:6C
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:38:c2:78:32:36:9e:5d:c4:66:61:e5:ea:f9:46:a9:46:18:
         eb:99:61:03:b7:03:12:0c:40:8a:e0:f0:60:41:ac:69:47:e1:
         c8:86:52:2c:aa:ac:cd:c9:fa:7e:53:b4:36:28:7d:c8:be:d0:
         09:89:fd:32:a6:82:4e:d1:ff:96:4b:9d:13:62:b4:68:43:13:
         8b:65:4b:af:88:75:78:b8:98:58:bc:f8:ad:57:89:91:ea:92:
         c5:44:2c:f2:3f:5d:d0:81:ce:ba:8d:eb:30:87:07:ef:ce:21:
         e5:ed:11:27:2f:9a:ef:6c:13:5e:51:4d:f9:e3:a3:9f:ba:87:
         fc:d5:fd:bd:7f:2d:73:75:bc:a5:0f:95:d2:10:1e:f3:f8:f7:
         d3:f6:87:cb:0f:67:2a:38:50:65:57:b2:98:a6:f4:17:d3:ea:
         63:54:cf:eb:d8:4a:45:6a:67:cd:69:d0:4b:a6:f3:6b:17:b0:
         fc:d4:ca:03:52:8d:d2:5b:b8:ab:c3:a2:25:06:b8:4b:37:b3:
         8c:c5:c1:bb:d4:18:ea:21:33:56:51:91:30:67:db:29:76:5a:
         9b:7e:de:b8:74:03:0f:cc:e6:93:54:40:20:fb:9a:5a:85:01:
         e4:19:3d:1d:80:01:21:04:b2:66:f8:33:14:09:4c:50:a1:cc:
         81:30:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:26:44 2025 by rpki-client