Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File:                     j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier:          rMOJMkBKZFwvu4spYtITx9lFW/thLrDdJtpbXDtT8dY=
Subject key identifier:   ED:EE:8A:C7:22:B2:E9:23:DF:35:31:46:80:C6:CD:61:2E:5B:71:1A
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer:       /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial:       01987E2F2FA5552C85DAF60FA3BA425A9F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 07:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:18 +0000
Files and hashes:         1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: TBa68oU0J1XHVVaLvgAbhMM5N1pn5ZQhs/PUphEBjTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:2f:a5:55:2c:85:da:f6:0f:a3:ba:42:5a:9f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
        Validity
            Not Before: Aug  6 07:01:18 2025 GMT
            Not After : Aug  7 07:01:18 2025 GMT
        Subject: CN=edee8ac722b2e923df35314680c6cd612e5b711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:5e:2f:8c:e1:4e:0b:56:12:3e:56:25:86:
                    ef:a6:27:f4:d0:1c:e4:18:a3:c2:ce:c7:72:d9:74:
                    11:99:59:84:9a:c5:e5:0d:f6:ae:e6:f1:35:2d:1b:
                    70:e5:b2:d7:19:51:05:82:1a:f1:1f:bd:df:5e:f1:
                    a3:1f:6d:4d:b5:15:cf:20:db:c7:af:43:50:17:7d:
                    44:cf:7e:12:22:a0:42:f2:99:ac:cf:73:cb:9e:07:
                    cb:1f:91:8c:33:69:06:71:aa:8d:8c:e1:00:99:83:
                    9b:82:77:97:f2:a4:17:46:db:0f:25:72:c5:c7:5e:
                    f6:25:d9:a9:7e:8d:0f:fe:23:3a:23:3c:55:98:2f:
                    a9:2e:4a:03:51:7a:e5:f1:74:59:fe:bd:df:66:ef:
                    70:3e:06:7e:40:d2:b8:75:84:37:13:27:cc:b6:02:
                    3e:5d:15:df:3a:e2:98:88:d8:45:e9:b6:a4:d2:e7:
                    b0:a1:6e:2f:b4:19:05:08:d4:df:5a:d4:20:87:31:
                    2e:6d:39:08:f5:fc:00:32:64:aa:37:0b:65:71:cb:
                    91:1c:cf:f8:9d:69:ef:df:3a:3f:f9:5f:fb:69:fc:
                    4d:a6:42:b9:6b:ec:01:0c:a8:33:c6:77:8a:57:b6:
                    41:4e:f8:cf:b8:55:c7:c1:ca:02:0b:82:e9:25:b0:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:8A:C7:22:B2:E9:23:DF:35:31:46:80:C6:CD:61:2E:5B:71:1A
            X509v3 Authority Key Identifier:
                keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:c0:df:2d:ff:01:27:0c:61:69:af:f0:b0:e9:43:16:41:
         c3:f4:52:96:c2:3a:2d:94:de:96:c0:7b:ad:6a:6d:63:89:9e:
         a2:1c:e9:04:89:db:4b:91:c9:f9:ea:27:64:a4:22:38:2d:2b:
         b4:4b:b8:2b:54:d8:53:32:dd:fc:57:b3:66:cf:04:13:b9:eb:
         17:36:95:f0:43:b1:31:6e:f7:8a:46:60:5a:85:f1:0f:9b:96:
         9a:b0:62:12:5b:f2:ce:43:bd:83:07:a7:62:b5:b2:da:8c:5c:
         8f:59:2d:8e:8e:90:36:1a:f9:e1:68:70:0c:73:19:ed:83:52:
         94:e9:b7:02:3f:18:80:bb:76:88:57:ad:b2:53:cc:86:78:58:
         d6:54:59:8e:49:21:bd:53:39:ef:16:65:9b:ff:17:aa:d7:4c:
         78:30:df:cd:bb:4f:92:11:b1:e3:e3:df:57:7f:60:f5:c5:76:
         e4:b7:37:38:c4:63:97:e4:2a:17:e4:e3:2e:0f:f3:83:b1:80:
         c5:08:48:b8:d8:06:fb:c1:b2:1a:15:44:80:b9:02:89:41:a6:
         71:2e:e2:60:8f:30:ce:61:69:0b:d3:41:49:47:22:eb:a6:32:
         6d:a2:62:01:d6:8d:51:e6:2b:9a:80:06:70:a5:74:ee:58:e5:
         74:56:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:59 2025 by rpki-client