Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File:                     me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier:          uG9Cc+xCuoDkWPqC1bFd0Jr+e27KxPcurSpdDVsOCe0=
Subject key identifier:   BC:49:A1:8F:5C:03:1E:B4:23:13:14:74:CE:CC:7B:B4:D3:FF:20:43
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer:       /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial:       019882B099E3A3E118AF4800BFB668152B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 04:01:08 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:08 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:08 +0000
Files and hashes:         1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: BmAmZwZDeeiL7G6nChzUNxUDd2N1lB2xouwvGX2uGp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:99:e3:a3:e1:18:af:48:00:bf:b6:68:15:2b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
        Validity
            Not Before: Aug  7 04:01:08 2025 GMT
            Not After : Aug  8 04:01:08 2025 GMT
        Subject: CN=bc49a18f5c031eb423131474cecc7bb4d3ff2043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:ed:5e:0e:73:37:5e:f5:7e:e1:35:dd:e3:
                    8c:a7:87:60:d3:d1:9d:fd:ea:b2:48:e4:0b:ea:e8:
                    5e:b9:86:03:20:78:58:00:61:c4:31:b0:59:44:a1:
                    eb:d5:72:05:11:af:37:a6:b9:77:f6:7e:d7:e6:6c:
                    6b:9b:6e:f3:8c:48:8a:5a:5b:f6:99:91:0e:33:5f:
                    f5:d6:29:f0:0c:88:08:b2:98:dd:d0:8c:85:54:3a:
                    3e:dc:02:2b:e9:00:19:ad:7f:b6:ad:c7:63:95:c1:
                    5b:ba:cb:02:36:ec:b7:f8:72:08:33:9d:ab:6c:99:
                    ed:4d:1b:36:6c:fc:75:0f:70:21:fd:19:79:5a:61:
                    ab:0b:a4:04:29:15:83:ba:a6:8f:09:ff:2b:a7:4c:
                    55:89:ee:9c:52:ce:a8:9d:e5:6e:e1:9b:01:a4:de:
                    f1:9f:3c:a6:b0:d5:fd:5b:c8:50:e6:d5:a3:45:86:
                    93:4f:c3:81:d2:a6:c8:22:52:5f:6b:57:d7:1d:fc:
                    1a:68:7a:2a:0d:36:01:6b:e7:28:ae:b7:e1:d7:e8:
                    85:5c:03:26:a9:9b:12:63:19:ed:03:23:bf:fa:3e:
                    c8:0a:46:a5:6e:29:42:7f:06:fc:83:b9:1c:4d:22:
                    66:2f:5c:16:25:e3:e5:7a:68:f4:3b:5e:ef:d3:9e:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:49:A1:8F:5C:03:1E:B4:23:13:14:74:CE:CC:7B:B4:D3:FF:20:43
            X509v3 Authority Key Identifier:
                keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7b:46:7e:00:16:de:e3:9b:33:46:e9:69:62:a1:65:7c:b5:
         c0:8d:6c:fe:ed:f9:19:d3:83:46:cd:bd:2a:15:3e:69:81:a8:
         27:72:e3:2e:2a:59:0c:f0:7d:e9:e4:ce:20:0b:89:34:46:ea:
         cf:f6:46:0d:51:da:0e:bf:a8:56:b5:10:2c:5f:90:fb:25:c1:
         35:3c:ac:27:a1:2d:0f:45:93:36:7c:34:22:80:23:4e:e0:ab:
         27:04:12:2a:bc:87:f5:9c:7b:6d:04:b6:9c:d5:52:3c:c2:a5:
         35:43:bf:8f:37:04:71:48:5b:59:2c:cd:8b:14:22:2a:41:ba:
         ea:c0:51:76:1e:40:49:be:af:56:6d:c4:b9:60:73:b7:cc:36:
         d4:57:01:3b:85:7d:24:19:d6:24:3a:c3:e8:28:34:ea:18:13:
         26:88:7c:47:15:bd:da:4c:b4:d3:be:33:68:c1:ce:2c:79:38:
         2b:e4:aa:e2:19:20:1a:c2:7c:9c:63:fa:59:50:c8:8c:5f:f0:
         ff:5f:0f:77:0e:f3:f8:72:86:ea:01:9a:fe:21:14:e9:ae:9b:
         a4:8a:46:d8:4f:2d:0e:29:8e:57:13:26:0d:7e:df:f3:c8:25:
         9d:b4:1c:12:1d:69:78:90:f4:18:cb:e6:5c:6d:fa:b8:46:e3:
         63:13:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:56 2025 by rpki-client