Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File:                     wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier:          yno7Dm0KMAjpESA7UpXOhRi1h6FGCaM0YhVtgCQpI0k=
Subject key identifier:   36:F1:47:C4:50:79:2A:8C:20:A2:50:14:E5:38:55:88:0B:AD:2A:93
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer:       /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial:       01987DF7C161800D6619943E78B7F3A9BCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 06:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:45 +0000
Files and hashes:         1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
                          2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: a7XUCVPanvjXnsh7HcrcKKxgcdc9BhN7DMwDhtd4vSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:c1:61:80:0d:66:19:94:3e:78:b7:f3:a9:bc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
        Validity
            Not Before: Aug  6 06:00:45 2025 GMT
            Not After : Aug  7 06:00:45 2025 GMT
        Subject: CN=36f147c450792a8c20a25014e53855880bad2a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:1c:f4:54:8c:a8:75:35:e5:76:51:5e:69:
                    b2:b4:98:c5:0b:90:61:77:9c:c3:d8:35:92:2d:45:
                    6d:f8:b1:be:c3:6b:66:2c:62:b3:fc:d8:fc:ab:7b:
                    53:8e:7f:55:8c:9d:70:58:b0:7d:84:99:bd:b8:d7:
                    ec:eb:25:70:3b:13:dc:47:60:ee:57:85:b1:4c:c4:
                    5c:ae:ea:f5:aa:30:51:e4:6f:72:92:8f:b7:bc:bb:
                    ff:56:b7:35:b2:e6:30:e4:a3:b5:6a:c7:24:33:36:
                    2f:db:d9:57:9c:f2:17:87:0e:af:d0:b6:b7:26:b0:
                    26:83:4e:f1:a5:ba:ba:2f:a9:fb:cc:30:fe:d1:dd:
                    fa:cf:88:4c:59:35:03:45:31:6b:9c:a1:d0:3c:84:
                    db:28:37:d8:ae:c1:87:3f:c6:6c:6b:35:97:99:bd:
                    53:33:e0:5e:ae:d3:f1:16:6a:5a:07:1c:6b:d5:02:
                    78:c8:08:1c:88:74:43:43:bb:f3:f2:e8:81:82:90:
                    da:31:97:04:1a:96:3a:c0:e3:f3:a0:d7:78:70:2f:
                    b6:db:ae:e5:25:e0:80:4b:59:a6:90:20:35:a0:56:
                    1f:7d:b9:cf:9d:4f:06:4f:5a:6e:c7:3b:e9:51:78:
                    f3:97:c6:33:21:0f:95:a9:5f:18:7f:00:ad:8a:dc:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F1:47:C4:50:79:2A:8C:20:A2:50:14:E5:38:55:88:0B:AD:2A:93
            X509v3 Authority Key Identifier:
                keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d2:27:17:4a:7c:68:d7:71:fc:68:c0:46:72:d5:bd:7b:d1:
         6b:5d:ce:fe:e6:46:42:8b:f8:81:61:34:17:69:ad:d5:cc:81:
         2f:fd:6c:54:87:e9:b9:14:66:37:bb:ea:b9:af:7b:dc:01:e4:
         ec:17:75:c3:0d:51:59:ce:c7:3a:e8:f0:e2:21:be:ed:29:0c:
         52:22:f9:40:f2:73:02:0c:7e:89:84:2a:1c:da:c8:b6:b0:c9:
         26:f9:1a:82:e0:7e:12:ee:66:b2:a7:b4:11:63:9e:b4:b5:e4:
         28:0c:9a:f9:ea:c1:1e:fe:c6:c2:58:f5:7c:39:b2:00:6d:19:
         a6:c1:0f:1e:61:d8:0f:9e:36:1c:43:c1:92:38:82:28:65:e2:
         4e:55:97:f3:c2:8c:07:92:e6:96:34:46:8b:4f:ba:a7:b8:cd:
         62:7d:fb:6d:d4:e3:7d:b9:04:5e:96:f7:94:5e:fe:46:ae:59:
         2d:50:1f:5e:f8:cc:7f:9d:ab:f8:bf:a4:74:7f:49:64:f9:16:
         37:a3:b5:57:c6:dc:4f:40:f0:02:4d:2b:a9:60:7a:7d:53:22:
         b0:f7:5d:f3:fa:55:fb:85:c5:e9:76:5a:b6:f5:89:8a:e9:ee:
         78:09:83:f6:5b:3f:68:24:74:71:55:bd:03:36:c9:43:08:39:
         de:27:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:04 2025 by rpki-client