Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File:                     RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier:          jRdGvsuNcoRA0H+09S8vocBjSlM1zSHly6hzoAKFCy0=
Subject key identifier:   5B:1D:CC:B1:B2:33:35:70:85:25:2E:FA:E1:10:2B:23:A5:C9:FB:F5
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer:       /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial:       01988166DEA2121A7190AFAA38E1A7F0C5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 22:00:59 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:59 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:59 +0000
Files and hashes:         1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: ACzIepWlOVSP0FyBhKYkFrY18svyobw6ce2257Jiefc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:de:a2:12:1a:71:90:af:aa:38:e1:a7:f0:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
        Validity
            Not Before: Aug  6 22:00:59 2025 GMT
            Not After : Aug  7 22:00:59 2025 GMT
        Subject: CN=5b1dccb1b233357085252efae1102b23a5c9fbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:db:51:27:b2:89:59:de:86:cd:7f:a0:9d:
                    41:b4:71:a3:31:15:68:cf:18:0c:1c:f7:93:92:21:
                    e2:41:0e:34:f2:20:a0:d7:4c:3f:d1:d9:b0:80:6f:
                    6f:f3:c3:b7:45:71:44:e1:57:e3:45:17:22:bc:15:
                    b5:8b:db:f1:24:43:33:7f:e5:99:58:86:4e:32:3c:
                    55:5e:21:09:42:43:34:00:71:08:c1:d0:e4:89:1a:
                    a1:01:c2:f5:53:4a:2a:29:7e:77:fc:fb:d8:2a:06:
                    b8:d4:08:a4:fa:b9:b8:6b:cc:ef:73:fb:29:64:69:
                    92:ee:5c:9a:f4:6d:a3:71:fd:9d:97:9c:09:ae:b6:
                    84:d7:fa:29:ed:2b:f1:82:33:5b:89:82:0b:3d:c8:
                    dc:b9:9c:5c:6e:93:54:e4:d3:00:c7:30:bd:16:ea:
                    55:db:95:f2:f6:02:c0:25:b5:1a:2e:73:33:15:16:
                    26:69:2c:85:cf:ff:c1:2b:62:fe:9e:91:67:01:31:
                    c0:0b:8c:1e:02:cc:9d:9c:74:32:4d:ef:49:57:ce:
                    aa:83:f8:3e:0a:bf:a2:11:c6:fb:f7:f7:28:3c:b8:
                    40:07:e5:ae:d4:92:b9:37:df:71:37:4b:72:7c:87:
                    3b:24:98:83:44:32:45:0a:f4:74:dd:03:1a:78:f7:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:CC:B1:B2:33:35:70:85:25:2E:FA:E1:10:2B:23:A5:C9:FB:F5
            X509v3 Authority Key Identifier:
                keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:77:c8:18:5c:05:c0:1e:6b:da:80:3c:ec:fb:a1:4e:14:
         d9:d2:fe:04:ec:99:2e:1b:17:9b:4e:fe:bd:33:82:07:a0:93:
         38:26:65:38:d2:58:b9:1a:ad:91:76:aa:28:82:6d:f1:3b:7f:
         cd:4c:bd:fd:b4:37:36:14:4f:d3:71:b0:3f:fd:a9:fe:cc:61:
         63:eb:bf:f0:7d:5c:f8:37:58:74:b9:57:61:ef:06:fb:62:20:
         6d:2e:a2:1a:54:00:9e:e5:05:86:71:bd:1b:0c:05:c6:14:65:
         7c:28:57:9e:34:a7:0e:04:57:e8:87:a6:51:c3:3a:83:9a:86:
         2d:16:98:d5:ec:9d:20:e0:f1:28:ba:5d:41:8c:23:09:54:30:
         98:7a:c9:8e:08:f9:eb:09:25:c5:3d:df:b8:a8:15:3d:dc:d7:
         4f:0a:43:92:43:1e:09:6b:50:d3:d0:71:3d:52:f1:63:ce:da:
         69:bc:0e:4e:f4:95:93:1c:c8:58:a9:5b:b1:96:7d:e3:ac:1d:
         c6:13:39:ff:a9:a3:49:ae:44:d9:a9:dc:d5:3f:eb:b6:b2:97:
         94:06:37:90:c6:3d:d5:88:4b:a3:57:a3:ca:b3:8f:72:bf:65:
         fc:de:11:f5:09:f8:23:ee:65:4e:fd:dd:03:46:77:2a:e9:f7:
         0f:bb:4e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZt6iEhpxkK+qOOGn8MXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTgxY2U3MTk0MmQ0NTcyOWY4NzA2ZTJiYjFiMDE0OWE1
MmI0MTUwHhcNMjUwODA2MjIwMDU5WhcNMjUwODA3MjIwMDU5WjAzMTEwLwYDVQQD
Eyg1YjFkY2NiMWIyMzMzNTcwODUyNTJlZmFlMTEwMmIyM2E1YzlmYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsATbUSeyiVnehs1/oJ1BtHGjMRVo
zxgMHPeTkiHiQQ408iCg10w/0dmwgG9v88O3RXFE4VfjRRcivBW1i9vxJEMzf+WZ
WIZOMjxVXiEJQkM0AHEIwdDkiRqhAcL1U0oqKX53/PvYKga41Aik+rm4a8zvc/sp
ZGmS7lya9G2jcf2dl5wJrraE1/op7SvxgjNbiYILPcjcuZxcbpNU5NMAxzC9FupV
25Xy9gLAJbUaLnMzFRYmaSyFz//BK2L+npFnATHAC4weAsydnHQyTe9JV86qg/g+
Cr+iEcb79/coPLhAB+Wu1JK5N99xN0tyfIc7JJiDRDJFCvR03QMaePdy6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsdzLGyMzVwhSUu+uEQKyOlyfv1MB8GA1UdIwQY
MBaAFEWYHOcZQtRXKfhwbiuxsBSaUrQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUt
NjIxMjgwMmFlMTZlLzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUtNjIxMjgwMmFlMTZl
LzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8F3yBhc
BcAea9qAPOz7oU4U2dL+BOyZLhsXm07+vTOCB6CTOCZlONJYuRqtkXaqKIJt8Tt/
zUy9/bQ3NhRP03GwP/2p/sxhY+u/8H1c+DdYdLlXYe8G+2IgbS6iGlQAnuUFhnG9
GwwFxhRlfChXnjSnDgRX6IemUcM6g5qGLRaY1eydIODxKLpdQYwjCVQwmHrJjgj5
6wklxT3fuKgVPdzXTwpDkkMeCWtQ09BxPVLxY87aabwOTvSVkxzIWKlbsZZ946wd
xhM5/6mjSa5E2anc1T/rtrKXlAY3kMY91YhLo1ejyrOPcr9l/N4R9Qn4I+5lTv3d
A0Z3Kun3D7tO1Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:01 2025 by rpki-client