Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File:                     FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier:          kCTkHUUh5wLRVwYokWzicirvDGdv40aLQ3zaoHQg1MY=
Subject key identifier:   7B:98:49:C9:CA:82:1D:97:54:2A:21:A9:BD:D6:EA:83:1A:F4:05:8D
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer:       /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial:       01987F798BA5C2946E7B36CFB9CC699F8285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 13:02:08 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:08 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:08 +0000
Files and hashes:         1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: HZjAktf7bAQtjEuNRjZvFuw5vOmv5wTPrbGKKEiWcIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:79:8b:a5:c2:94:6e:7b:36:cf:b9:cc:69:9f:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
        Validity
            Not Before: Aug  6 13:02:08 2025 GMT
            Not After : Aug  7 13:02:08 2025 GMT
        Subject: CN=7b9849c9ca821d97542a21a9bdd6ea831af4058d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:73:5b:90:41:9b:e5:3f:e7:b8:b8:1d:c1:
                    c7:37:4e:9a:ab:a3:9b:c5:d1:65:7c:34:3c:f2:10:
                    0b:d4:17:fe:44:ed:54:b6:8c:57:6c:49:f5:83:82:
                    71:bc:f7:8c:80:49:72:52:e5:1d:c6:43:97:56:41:
                    9d:dc:cf:8e:2e:f5:78:14:0c:9d:bd:bc:a1:47:05:
                    4b:46:e7:30:3d:e3:13:bd:cd:3b:31:bc:59:b9:12:
                    ec:f0:f5:f8:05:8c:1c:32:26:03:3f:58:2d:90:aa:
                    47:61:b7:2c:67:dd:9e:a7:0f:2a:ef:d1:ab:ce:88:
                    d6:b4:4a:4d:13:a3:bb:e0:30:20:ab:15:99:33:cb:
                    20:0f:6d:a3:bf:c6:09:dc:c9:c8:81:94:23:ec:cb:
                    3f:8b:58:44:5f:a3:e1:e0:9a:49:a1:33:b3:89:08:
                    6b:1a:1f:40:1f:c7:c7:7d:28:1b:e9:0a:43:c5:a8:
                    5a:7a:d6:4c:dd:d8:be:5e:b8:f8:21:12:3e:84:10:
                    d6:8a:7b:ad:5a:47:43:f8:33:d4:1f:f4:0d:12:3e:
                    e1:1e:32:af:89:e4:d6:d2:79:4b:18:1a:e4:68:01:
                    10:fa:e7:1b:da:d5:21:0c:89:96:3a:db:62:67:07:
                    6a:41:16:cf:18:f8:35:3e:e5:74:19:a0:54:9f:08:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:49:C9:CA:82:1D:97:54:2A:21:A9:BD:D6:EA:83:1A:F4:05:8D
            X509v3 Authority Key Identifier:
                keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:9d:06:60:e7:01:39:09:bf:6f:99:62:c4:ae:1a:c2:3b:
         aa:c0:b4:92:f1:bd:47:3c:c0:61:63:f2:b7:aa:5a:ed:bf:48:
         9f:59:5f:a1:7a:1a:ed:8f:14:01:0c:ab:9d:6f:93:8e:ea:bb:
         51:08:b2:4a:6d:07:37:60:5e:6a:30:62:66:79:f0:06:93:18:
         68:c0:86:0e:48:43:5d:21:3f:c2:f4:67:3c:6a:9e:b1:e8:57:
         59:0b:a9:5f:99:71:00:8f:59:47:f4:cf:7b:85:4a:8a:12:ba:
         4d:0a:2a:15:88:d8:c5:ce:b2:84:2e:0e:cb:6a:7c:2a:ab:c4:
         7e:ba:80:ef:01:98:5e:fa:1d:17:e1:1d:eb:8e:8e:07:34:32:
         81:ea:35:34:fe:26:d8:55:0a:7a:d5:5e:e4:3b:52:72:a1:92:
         c3:2e:a4:37:fa:e5:0e:b3:5f:46:f4:7e:4b:e4:b1:08:55:34:
         1a:53:5a:88:88:02:5f:a7:21:10:2b:d9:a6:a8:fd:a7:f9:b5:
         b0:08:cd:1c:59:93:e5:28:cb:2f:3e:05:8e:f5:8f:17:53:5c:
         82:82:4b:66:7c:15:ba:fa:b6:37:0e:d0:66:68:3c:94:51:21:
         85:df:54:86:d9:5f:dc:cd:b1:1b:65:d1:b0:36:c9:cc:9f:ef:
         91:cb:4e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/eYulwpRuezbPucxpn4KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4
NzQ3MWMwHhcNMjUwODA2MTMwMjA4WhcNMjUwODA3MTMwMjA4WjAzMTEwLwYDVQQD
Eyg3Yjk4NDljOWNhODIxZDk3NTQyYTIxYTliZGQ2ZWE4MzFhZjQwNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFpzW5BBm+U/57i4HcHHN06aq6Ob
xdFlfDQ88hAL1Bf+RO1UtoxXbEn1g4JxvPeMgElyUuUdxkOXVkGd3M+OLvV4FAyd
vbyhRwVLRucwPeMTvc07MbxZuRLs8PX4BYwcMiYDP1gtkKpHYbcsZ92epw8q79Gr
zojWtEpNE6O74DAgqxWZM8sgD22jv8YJ3MnIgZQj7Ms/i1hEX6Ph4JpJoTOziQhr
Gh9AH8fHfSgb6QpDxahaetZM3di+Xrj4IRI+hBDWinutWkdD+DPUH/QNEj7hHjKv
ieTW0nlLGBrkaAEQ+ucb2tUhDImWOttiZwdqQRbPGPg1PuV0GaBUnwgByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuYScnKgh2XVCohqb3W6oMa9AWNMB8GA1UdIwQY
MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt
N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw
LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNidBmDn
ATkJv2+ZYsSuGsI7qsC0kvG9RzzAYWPyt6pa7b9In1lfoXoa7Y8UAQyrnW+Tjuq7
UQiySm0HN2BeajBiZnnwBpMYaMCGDkhDXSE/wvRnPGqesehXWQupX5lxAI9ZR/TP
e4VKihK6TQoqFYjYxc6yhC4Oy2p8KqvEfrqA7wGYXvodF+Ed646OBzQygeo1NP4m
2FUKetVe5DtScqGSwy6kN/rlDrNfRvR+S+SxCFU0GlNaiIgCX6chECvZpqj9p/m1
sAjNHFmT5SjLLz4FjvWPF1NcgoJLZnwVuvq2Nw7QZmg8lFEhhd9Uhtlf3M2xG2XR
sDbJzJ/vkctOQQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:34 2025 by rpki-client