Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File:                     hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier:          2EPD/HmpuqaliKMfdCI2sR3N1kI+CNbPoaEkAB2cfcU=
Subject key identifier:   06:FA:41:16:55:35:80:1A:91:BD:B7:62:74:DB:72:35:C6:A4:3F:9C
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer:       /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial:       01988167C85C9E0330C75EF88DAD25C25428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 22:01:59 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:59 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:59 +0000
Files and hashes:         1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: 0dNmX1OotUgiDMybAKbfkiB0pfoThBTZEVJaUc2S7to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:c8:5c:9e:03:30:c7:5e:f8:8d:ad:25:c2:54:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
        Validity
            Not Before: Aug  6 22:01:59 2025 GMT
            Not After : Aug  7 22:01:59 2025 GMT
        Subject: CN=06fa41165535801a91bdb76274db7235c6a43f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:d2:e1:b0:69:c2:7a:e7:30:3e:f8:5f:d9:
                    e8:68:fa:99:72:5d:04:4b:b4:c0:11:9f:9f:e3:6e:
                    6f:68:cd:46:38:24:20:59:3f:ba:20:db:62:a5:a0:
                    d0:03:d4:5e:38:28:6e:69:66:d2:58:76:5e:34:08:
                    0f:73:43:c2:bf:9a:e4:99:ca:e4:20:75:76:51:0c:
                    58:1a:04:64:1e:09:8c:68:35:ed:86:9b:34:48:c1:
                    a5:4c:f6:1c:44:86:c4:21:c5:70:7b:8d:65:02:1e:
                    d2:3f:45:d2:11:7e:73:ae:a3:1c:47:5e:ca:fb:bc:
                    64:20:bf:35:08:f7:bb:c4:c2:24:84:ef:c9:a1:53:
                    bf:1e:1d:5d:a7:a4:46:17:fa:a4:b2:0d:a2:98:15:
                    8b:b8:e2:7b:de:16:3c:37:fe:70:51:19:ea:c2:b8:
                    20:0b:59:aa:6c:b9:ae:4a:fa:e0:fd:7b:83:5e:2e:
                    a2:aa:f9:24:87:91:c5:7b:7d:71:05:6c:cf:68:3c:
                    17:18:1d:6e:d5:6d:ec:9d:fc:56:af:b9:0e:f1:88:
                    b9:51:f8:50:06:04:f3:42:dd:c7:7d:07:dc:9e:89:
                    f5:90:40:f8:3e:97:0e:6c:28:96:5e:0c:07:30:0c:
                    9e:bb:f0:df:c5:b9:ee:9f:67:67:15:0f:4f:64:50:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:41:16:55:35:80:1A:91:BD:B7:62:74:DB:72:35:C6:A4:3F:9C
            X509v3 Authority Key Identifier:
                keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:ee:09:40:f4:3a:d9:6e:ca:f1:b7:f4:e2:1c:57:a4:08:
         e4:6c:c0:49:86:96:d4:2c:58:09:a9:d9:75:e7:d5:9c:6a:cd:
         b8:f4:00:32:fc:25:c9:29:2c:1e:fb:30:68:0f:d7:49:8b:2b:
         94:16:d8:b8:ca:6e:85:c2:4e:b0:88:e4:1c:3c:a0:00:5f:45:
         ce:48:84:7f:ee:16:f9:3d:c0:f0:fa:19:1a:0d:da:cc:1f:90:
         88:3b:64:bc:e5:10:c7:05:7d:3f:24:fd:8b:5b:a6:1c:1e:78:
         ff:7c:72:70:51:f0:d8:96:63:65:0f:fd:2e:55:22:a7:87:12:
         54:2f:e5:e9:1b:3a:4d:d8:7f:7c:a9:c3:9f:3a:74:08:95:d6:
         7f:41:95:69:9b:f2:37:d4:d7:b5:53:1b:37:44:99:ec:1e:19:
         27:dc:72:ab:fa:7f:2a:0d:e8:de:f5:51:2b:1e:73:08:13:24:
         d4:b1:42:d1:96:db:87:a1:03:9a:8e:b9:ea:94:13:66:4d:ff:
         aa:c6:21:a7:0a:a4:de:b8:a0:3d:3b:ee:15:1b:f8:e7:9d:c8:
         4a:f5:cd:cf:75:d8:36:d3:fd:37:49:b1:0e:5f:dc:02:17:02:
         bd:6b:85:9f:bc:bb:6a:61:59:c0:45:ce:44:ec:b1:1c:9e:42:
         2f:13:51:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ8hcngMwx174ja0lwlQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzRmOWQ0OTNhY2NiNjgwOTAwZjQ0N2ExZjJjOWY3YjJi
MzU4YWMwHhcNMjUwODA2MjIwMTU5WhcNMjUwODA3MjIwMTU5WjAzMTEwLwYDVQQD
EygwNmZhNDExNjU1MzU4MDFhOTFiZGI3NjI3NGRiNzIzNWM2YTQzZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyHS4bBpwnrnMD74X9noaPqZcl0E
S7TAEZ+f425vaM1GOCQgWT+6INtipaDQA9ReOChuaWbSWHZeNAgPc0PCv5rkmcrk
IHV2UQxYGgRkHgmMaDXthps0SMGlTPYcRIbEIcVwe41lAh7SP0XSEX5zrqMcR17K
+7xkIL81CPe7xMIkhO/JoVO/Hh1dp6RGF/qksg2imBWLuOJ73hY8N/5wURnqwrgg
C1mqbLmuSvrg/XuDXi6iqvkkh5HFe31xBWzPaDwXGB1u1W3snfxWr7kO8Yi5UfhQ
BgTzQt3HfQfcnon1kED4PpcObCiWXgwHMAyeu/Dfxbnun2dnFQ9PZFDlnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb6QRZVNYAakb23YnTbcjXGpD+cMB8GA1UdIwQY
MBaAFIY0+dSTrMtoCQD0R6Hyyfeys1isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYt
YjQzMGJkMjFhMjliLzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYtYjQzMGJkMjFhMjli
LzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD23uCUD0
OtluyvG39OIcV6QI5GzASYaW1CxYCanZdefVnGrNuPQAMvwlySksHvswaA/XSYsr
lBbYuMpuhcJOsIjkHDygAF9FzkiEf+4W+T3A8PoZGg3azB+QiDtkvOUQxwV9PyT9
i1umHB54/3xycFHw2JZjZQ/9LlUip4cSVC/l6Rs6Tdh/fKnDnzp0CJXWf0GVaZvy
N9TXtVMbN0SZ7B4ZJ9xyq/p/Kg3o3vVRKx5zCBMk1LFC0Zbbh6EDmo656pQTZk3/
qsYhpwqk3rigPTvuFRv4553ISvXNz3XYNtP9N0mxDl/cAhcCvWuFn7y7amFZwEXO
ROyxHJ5CLxNRNg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:53:14 2025 by rpki-client