Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File:                     cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier:          DBsac42v0ugvY15WKjgRC3K7n2l2Jpx46IrutWZU7GQ=
Subject key identifier:   6A:76:2B:BD:B3:C6:44:67:BE:4F:A1:B5:56:3F:82:5F:2D:C3:93:D0
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer:       /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial:       01988166F86685C3356711267AC5170B9163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 22:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:05 +0000
Files and hashes:         1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: Zpodm9EYJJpeKnULDB+wY7oR8Z6uDVvvKEAs87mbI+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:f8:66:85:c3:35:67:11:26:7a:c5:17:0b:91:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
        Validity
            Not Before: Aug  6 22:01:05 2025 GMT
            Not After : Aug  7 22:01:05 2025 GMT
        Subject: CN=6a762bbdb3c64467be4fa1b5563f825f2dc393d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:60:c2:32:7a:99:61:d0:15:98:7e:4a:64:
                    46:07:3d:66:fd:98:9c:0d:fa:ea:7a:2b:03:b8:67:
                    e7:92:bf:02:99:39:c5:57:1d:b9:d4:67:e6:c7:6e:
                    d5:3c:d5:f4:16:dd:5d:6b:c3:6a:9f:8c:7c:0b:92:
                    03:09:6d:f8:e8:ee:64:fd:24:57:9e:84:8a:7b:a4:
                    dd:3c:74:aa:f7:53:45:53:d1:30:00:2d:fe:04:af:
                    2c:4b:12:d0:07:8b:32:60:f8:9c:9d:a3:31:42:0c:
                    7b:32:b8:ae:20:5f:c0:35:eb:fb:91:c9:53:25:85:
                    02:a7:55:6a:05:55:b1:0f:76:1a:9f:ad:8f:1f:8f:
                    a4:4e:4a:82:cc:c5:f3:70:26:f5:a5:f8:e1:cf:41:
                    1e:46:38:7c:8d:8b:a3:71:61:be:42:b6:62:f4:14:
                    87:46:55:a8:52:6a:2e:f6:fd:9b:cb:9c:22:fe:df:
                    66:76:a9:a1:b3:d8:ba:3f:f3:97:e8:7a:12:98:6a:
                    14:55:82:9f:b7:c9:5a:d8:a0:7b:78:0b:8c:7b:35:
                    49:20:85:01:ce:9a:7a:d7:bc:c7:c5:f4:7e:b6:ba:
                    8e:e9:33:af:40:ab:9a:45:11:82:02:74:6a:89:b4:
                    d0:c3:6b:71:60:87:eb:9a:5c:7e:e8:e9:96:95:23:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:76:2B:BD:B3:C6:44:67:BE:4F:A1:B5:56:3F:82:5F:2D:C3:93:D0
            X509v3 Authority Key Identifier:
                keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:77:fa:68:60:ae:29:2d:fb:c3:4a:ef:1f:29:c6:64:c4:da:
         e8:16:b7:62:06:42:62:72:1d:0a:a2:1e:2d:27:65:a0:d2:f1:
         3a:1a:8a:72:ac:5e:04:d4:67:e8:c5:9f:39:73:62:7f:b4:a2:
         42:8a:0c:5a:28:c2:4e:a9:01:7d:5e:f0:67:59:fa:e2:42:a9:
         8a:94:5c:bf:ee:b6:c4:d4:97:70:7a:8a:93:b7:4b:17:d7:55:
         26:8d:ce:c2:ed:34:bb:b2:5a:00:53:30:ad:53:be:b7:75:13:
         2f:e7:8c:79:81:c7:23:82:29:d0:51:9b:e0:cc:c7:38:e5:19:
         b3:8d:87:48:9f:6f:69:57:08:af:b1:4c:5f:b1:10:2b:ab:a4:
         5c:c6:65:c6:a5:7b:7d:9a:ad:91:62:0a:d3:d7:b7:d7:26:7e:
         5c:15:49:27:9e:09:a3:ba:4a:f2:16:ed:5e:9d:2c:1a:05:12:
         6b:0d:42:c7:03:b6:23:d9:a9:80:41:95:cc:0e:de:5a:89:9e:
         8e:ff:01:e5:93:34:3a:cf:29:34:ee:37:5e:55:29:3e:92:1e:
         dd:83:58:79:20:09:1b:e1:96:be:5a:ff:b3:c4:e1:de:1e:e1:
         0f:2b:49:1f:67:81:2e:09:92:5e:d3:c8:f5:da:b7:2e:57:0c:
         9c:0d:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:16:48 2025 by rpki-client