Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File:                     kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier:          Nxq/txs/f/XifIhSY8arJE4h/stn8tJxOaEVnHyPjI8=
Subject key identifier:   41:6E:F6:D6:6E:AE:A0:69:89:F3:57:1A:B8:C1:35:7C:48:72:60:15
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer:       /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial:       01987D8B74F94BAD59FB8AFDDD9CFA4272D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 04:02:28 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:28 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:28 +0000
Files and hashes:         1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
                          2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
                          3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: lyJWIarK7bMwWZHj2C6p6Sdcd+sM8ag9FBIegZRn2vo=)
                          4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:74:f9:4b:ad:59:fb:8a:fd:dd:9c:fa:42:72:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
        Validity
            Not Before: Aug  6 04:02:28 2025 GMT
            Not After : Aug  7 04:02:28 2025 GMT
        Subject: CN=416ef6d66eaea06989f3571ab8c1357c48726015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:cd:15:94:ad:02:9f:7e:fa:4d:0e:56:0c:
                    a8:81:c8:a9:46:f7:89:aa:c3:86:6f:13:c1:ec:b9:
                    4e:54:56:ec:4b:34:f9:ed:0e:66:27:58:f8:18:75:
                    d8:f7:82:79:20:9b:38:ca:6c:cf:27:06:c7:b2:1d:
                    cd:6b:68:48:6d:bc:cd:96:c4:fe:5c:74:f7:47:42:
                    96:26:9a:6e:07:85:58:cd:13:f1:67:97:af:09:6d:
                    df:13:6c:06:ab:dd:31:a3:bb:37:9a:e6:34:56:ee:
                    0e:ef:85:aa:11:f6:c3:0d:f4:a7:3f:af:1e:10:be:
                    37:e8:de:a8:e7:98:af:c6:93:19:c1:9b:5e:29:fc:
                    3e:16:e1:81:e3:c3:99:86:37:a0:2d:c5:47:af:60:
                    db:3d:15:df:ba:65:b8:81:e6:97:aa:2d:3a:32:dd:
                    ab:c1:dd:a2:a1:b8:ae:04:59:9a:80:d6:20:94:9f:
                    4c:a3:0a:72:56:88:74:b2:91:4a:0f:83:80:6c:9e:
                    aa:41:49:82:d8:f7:0b:1d:52:37:91:b3:c0:f9:a1:
                    de:16:d9:09:fd:89:78:f6:0a:6b:a6:93:ce:fb:3d:
                    98:ce:88:f6:c1:e8:07:e4:28:71:76:89:a4:69:09:
                    f6:0e:62:f1:9a:60:67:5b:b0:59:f3:a0:e5:fb:a6:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:F6:D6:6E:AE:A0:69:89:F3:57:1A:B8:C1:35:7C:48:72:60:15
            X509v3 Authority Key Identifier:
                keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:e1:fb:71:61:e0:75:76:1c:53:63:2b:57:83:d5:fb:2b:
         9f:ff:56:de:81:1a:71:76:0d:8e:dd:4a:84:24:81:d4:f0:73:
         6c:85:d4:9d:14:2c:72:f4:43:cf:8c:98:f1:d5:9b:21:2c:52:
         d9:02:96:a7:4a:a2:33:ad:6c:dd:16:aa:17:06:b7:eb:31:b3:
         6f:61:8d:e3:9a:7a:db:ca:ce:e8:bd:f4:38:80:1a:2a:ce:c6:
         79:af:74:0b:36:96:bb:31:8f:8f:10:66:8b:ca:4c:e3:00:c9:
         06:96:e0:83:89:df:dd:42:4a:be:12:45:dc:e1:91:b6:84:28:
         ad:05:ba:0e:f4:30:01:ae:b3:cf:72:44:18:c4:db:b0:0d:39:
         d8:ca:cf:54:00:c8:f1:06:0d:ee:c4:44:1f:a5:99:1f:49:57:
         8a:8d:fd:0b:dd:6d:4b:97:db:49:7b:d5:42:a7:47:42:74:66:
         eb:13:c8:8d:4f:cf:9f:ac:fa:dc:f7:40:d9:05:21:a2:36:4e:
         00:64:06:82:df:03:2f:7e:4b:1d:e2:25:ae:af:40:6e:eb:37:
         bc:ba:da:3b:19:dc:da:af:14:27:6c:d5:39:5e:b8:09:89:f2:
         ce:07:ab:c8:16:03:7a:b9:5f:67:70:0c:db:80:d0:b1:ae:9f:
         e9:c9:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:06 2025 by rpki-client