Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File:                     k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier:          mtGcvfn7sXfK/4/smB7RW9QMEwes2oC4+1ldGxMo6Nw=
Subject key identifier:   50:85:61:21:80:D0:71:EB:D9:3E:5F:73:1A:B6:E4:A2:34:CF:64:CC
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer:       /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial:       0198A1293DC7D4E1359797F1182B30015438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number:          162E
Signing time:             Wed 13 Aug 2025 02:01:31 +0000
Manifest this update:     Wed 13 Aug 2025 02:01:31 +0000
Manifest next update:     Thu 14 Aug 2025 02:01:31 +0000
Files and hashes:         1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: PYfgkmRHxCL3FlSzzHIabBEr9n/jcjnSCkIdYje4WmA=)
                          2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:29:3d:c7:d4:e1:35:97:97:f1:18:2b:30:01:54:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
        Validity
            Not Before: Aug 13 02:01:31 2025 GMT
            Not After : Aug 14 02:01:31 2025 GMT
        Subject: CN=5085612180d071ebd93e5f731ab6e4a234cf64cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:dc:e7:d5:3a:ab:b4:09:a0:4e:ae:6e:04:
                    d2:e2:86:29:7e:8b:c8:93:70:eb:59:43:11:3a:27:
                    ea:e8:c4:01:de:7e:77:95:ff:76:35:48:7c:05:18:
                    1a:c2:13:ab:a6:9e:22:93:a0:a2:3f:b7:b5:e2:ac:
                    f4:f0:08:91:3b:3e:c4:01:f4:69:7c:5a:85:eb:8b:
                    f8:20:4d:0a:cc:c4:ff:a0:ec:db:40:3c:44:18:7e:
                    16:25:58:1d:1e:ae:02:77:c5:8c:ec:68:d0:42:29:
                    8a:43:d5:e4:d3:b8:26:1b:4b:d2:b0:71:c6:33:66:
                    37:38:98:49:4e:bb:d6:63:7a:73:26:0a:39:83:47:
                    5d:ec:9e:f5:c6:79:75:a5:52:9b:2a:63:82:ba:d4:
                    42:1e:a4:73:be:50:8f:08:4a:69:72:48:c4:af:0e:
                    79:6c:37:c2:62:bb:33:4c:55:38:bc:6b:83:0f:1b:
                    94:2f:1e:30:4c:63:89:f2:da:17:ab:9d:c8:be:d1:
                    72:ab:ce:d1:1d:d6:62:17:2b:e3:64:a5:7f:ec:28:
                    16:00:a9:ac:72:74:89:41:57:7c:ee:41:dd:7c:cf:
                    03:45:10:17:05:10:21:46:43:25:0a:4c:c3:55:76:
                    d1:93:49:02:85:1d:b5:44:c7:5b:ab:c3:cb:6c:81:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:61:21:80:D0:71:EB:D9:3E:5F:73:1A:B6:E4:A2:34:CF:64:CC
            X509v3 Authority Key Identifier:
                keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:79:2a:bb:0b:84:ce:e4:44:1d:ac:45:ed:7d:9b:df:ac:
         e1:16:74:34:3c:e2:6a:36:ca:ea:e5:e5:cb:b3:95:49:8a:f6:
         f5:53:5e:bf:6b:af:00:ae:85:57:d5:a8:c7:d5:c3:61:2b:85:
         1e:ae:f3:b4:76:0f:d3:8f:e9:72:eb:66:61:01:44:21:2d:cf:
         2c:a7:1c:f5:d5:11:d8:b0:64:6a:e9:e4:61:d5:73:1f:4f:b2:
         6d:6f:d0:cb:88:e5:71:9d:e2:b0:de:d4:16:87:08:44:f4:77:
         fc:6d:3c:16:18:23:3b:12:f6:b6:fa:2c:fa:0f:b6:10:4b:3c:
         bc:b5:fa:c2:e2:c7:f4:8c:ea:1a:9e:77:f8:5c:ae:42:31:61:
         82:d3:d4:f6:fd:91:b7:b0:79:64:85:ad:93:08:71:9b:9a:db:
         a9:b6:78:15:d8:d7:c4:55:eb:66:01:f3:e1:f7:e8:e5:1c:f3:
         fb:de:12:43:f7:c3:00:7f:aa:a0:f0:4e:80:25:15:aa:f2:06:
         43:20:d4:8c:ba:dd:c5:a8:fb:f6:a5:9b:06:6d:e2:02:f4:41:
         7d:6d:fe:6d:e4:1e:9f:11:0c:d6:e6:33:af:93:d4:ee:b2:28:
         9b:9d:29:ed:33:d6:85:74:84:0b:dc:3e:49:ac:10:63:3f:76:
         ec:24:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:45 2025 by rpki-client