Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File:                     v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier:          67Tpv7qRqc05aoCQrdpzKATtfT6Ak3iqDMNW2NtylDo=
Subject key identifier:   EF:EF:05:43:F1:9D:D0:83:D6:18:CD:9F:74:60:54:E7:F6:E4:69:2E
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer:       /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial:       01987B9D576A00E8B7081A7E8157F3982F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 19:02:45 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:45 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:45 +0000
Files and hashes:         1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: BBjP3oA9QIa5qkt/g7eKleGHgA4EKjrTjJtnyas3J1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:57:6a:00:e8:b7:08:1a:7e:81:57:f3:98:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
        Validity
            Not Before: Aug  5 19:02:45 2025 GMT
            Not After : Aug  6 19:02:45 2025 GMT
        Subject: CN=efef0543f19dd083d618cd9f746054e7f6e4692e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:56:e5:ed:67:92:11:b0:06:5e:ed:85:41:
                    c9:bd:5f:bf:8f:1d:97:06:f9:33:10:4b:a9:9d:8c:
                    e8:04:15:71:00:31:ae:05:4d:71:f0:54:87:1e:c2:
                    89:d1:d0:b9:9a:87:45:ee:3b:2e:79:0a:d6:d5:75:
                    39:2e:78:28:e2:3c:47:6e:94:cb:07:93:89:48:35:
                    01:48:65:71:6a:70:ad:a7:d0:26:52:ef:c0:02:eb:
                    fc:74:cc:73:82:ee:73:3b:bf:e0:e6:c0:4a:39:3c:
                    cf:d0:52:74:ed:35:99:73:3a:76:50:36:17:6c:a0:
                    fd:e7:4b:59:95:ca:e9:52:fd:5e:69:74:1a:8c:e8:
                    07:6c:96:13:6b:25:f6:db:f3:cd:d4:d8:c8:26:7b:
                    0b:c9:54:f5:6b:db:da:94:bb:7a:68:56:be:ea:5d:
                    85:37:07:c7:cc:34:db:2e:6f:e7:44:33:77:d4:9e:
                    21:4e:97:2b:29:d8:8b:ce:d6:59:1f:5f:73:08:53:
                    90:f7:57:8a:b0:fb:46:c3:5d:af:90:d5:15:db:c6:
                    07:7f:41:2f:74:25:df:5d:a9:71:b6:6b:d5:00:be:
                    54:9d:32:93:38:db:23:56:fe:10:8b:15:7f:b6:20:
                    18:09:85:e4:18:62:e7:8c:5c:e5:55:db:13:7f:52:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:05:43:F1:9D:D0:83:D6:18:CD:9F:74:60:54:E7:F6:E4:69:2E
            X509v3 Authority Key Identifier:
                keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:c5:0d:22:be:99:62:23:90:2f:09:21:68:c7:72:2c:1b:
         94:f5:e7:f2:ad:ff:9a:08:34:bc:75:c7:1a:34:1d:aa:68:ee:
         b3:4b:c2:8c:a6:4f:e0:0d:fe:39:54:32:07:3d:03:4f:ec:a3:
         99:99:ce:7d:35:b5:76:71:7f:c6:35:95:2b:40:e6:ff:cf:61:
         3e:f5:c1:25:44:26:d0:4d:c3:60:b3:ce:c0:4e:2c:c2:2e:a0:
         73:6a:cc:ea:f7:f0:df:83:d5:cc:e2:0a:2e:0f:56:74:20:0d:
         cd:5e:a9:3f:8b:59:da:87:c0:8f:96:cc:31:48:c3:39:ab:d5:
         c4:2a:cb:82:54:30:6b:24:54:87:eb:9b:7a:d7:35:ca:4e:e3:
         2d:59:56:c7:89:98:1c:c8:01:66:73:78:95:c9:b8:8d:4b:45:
         a3:63:aa:fb:32:58:e7:c5:6f:0f:aa:18:05:6a:3e:b0:0f:9e:
         21:d2:e0:e2:3f:04:75:e6:1a:fe:a7:63:a4:a6:fb:da:73:8d:
         44:79:0b:76:94:67:f8:33:0c:a3:4b:f2:fd:2a:0c:aa:2f:2c:
         86:be:dd:e1:68:b1:11:10:36:e5:71:fb:3d:4f:bc:74:12:db:
         b8:c6:2a:57:be:e2:47:70:4d:49:33:8c:aa:6a:10:7c:b2:cf:
         6e:14:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:45 2025 by rpki-client