Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File:                     eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier:          x0kfMWnl3Acz+gjYa/b6dm4hcF1/hbo2uK9G6ZFD1uE=
Subject key identifier:   AA:C3:44:CA:FB:45:D1:EB:AD:3A:50:04:28:EE:0F:E5:2C:AB:C0:10
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer:       /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial:       01987ED38ED37B64AA856DBBB847E1FCB76A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 10:00:50 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:50 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:50 +0000
Files and hashes:         1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: BLwLd+st5xdwq/0/wSUTqIe5bF+KYY9twYg8W0U1K5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:8e:d3:7b:64:aa:85:6d:bb:b8:47:e1:fc:b7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
        Validity
            Not Before: Aug  6 10:00:50 2025 GMT
            Not After : Aug  7 10:00:50 2025 GMT
        Subject: CN=aac344cafb45d1ebad3a500428ee0fe52cabc010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:a9:7a:75:89:64:2b:70:66:f0:b6:65:74:
                    fd:fc:8a:0d:ec:bf:23:56:f3:16:51:b4:86:07:2f:
                    8b:ef:21:df:10:f8:70:61:e3:0e:d4:fe:96:b6:ce:
                    5e:ad:8a:a8:73:04:e7:6a:74:a0:3d:33:53:23:b1:
                    05:d7:92:3d:23:5b:40:42:36:ac:c8:cc:d8:56:bd:
                    e9:7b:bb:b0:54:d2:b2:2e:53:b6:67:6d:c9:0e:a1:
                    46:1a:f2:77:28:56:9d:0a:43:6a:ef:cb:de:24:17:
                    fe:6d:74:9a:70:2f:0e:3d:9a:6e:f1:a3:03:e0:21:
                    e1:47:27:f9:e6:05:f4:28:1b:b1:fe:1f:cd:06:c2:
                    3e:8f:ad:05:dd:07:7d:62:d0:d3:d6:9f:28:3a:8a:
                    5e:d5:e2:cd:91:f5:07:db:06:07:96:58:b8:38:59:
                    98:e8:7e:c7:37:54:e9:d1:8c:ab:b7:a1:b8:b3:5a:
                    a9:51:65:80:93:78:b3:15:03:ac:60:14:b6:d9:17:
                    42:e2:e8:98:78:b1:e5:59:2c:80:da:94:fc:b3:60:
                    fe:01:d8:d8:a2:1c:54:5f:dc:1b:72:82:41:b2:00:
                    70:f8:1f:d2:e2:53:89:4e:41:54:89:8c:48:a9:c5:
                    74:31:19:45:b1:b5:69:be:48:33:46:fe:6f:55:8e:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C3:44:CA:FB:45:D1:EB:AD:3A:50:04:28:EE:0F:E5:2C:AB:C0:10
            X509v3 Authority Key Identifier:
                keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:57:20:bd:b7:4d:51:b0:79:90:89:0c:30:68:36:99:63:
         1f:3d:c0:08:e3:a7:35:b6:78:4d:4d:96:90:21:f0:b5:9a:16:
         7e:58:fe:9d:2d:45:e8:9f:13:47:31:06:ae:01:f5:00:92:be:
         9a:8a:fe:9c:7e:89:2a:88:df:9f:ff:f2:a9:7a:b5:c1:31:95:
         19:6e:5e:a2:0c:5c:58:96:1a:5a:ef:d2:4b:38:bb:c7:49:d3:
         2f:5c:7c:da:3c:2f:8e:19:40:ad:21:15:eb:34:bd:68:12:60:
         53:30:8f:08:08:90:c6:b2:e7:24:c7:62:4a:79:a3:31:e2:b1:
         7e:3c:f5:78:f7:2e:4f:31:75:8a:f1:40:08:c9:06:14:e8:fb:
         56:ff:da:b1:3a:29:e0:d0:aa:88:d5:04:58:35:4d:a3:18:02:
         8f:e9:77:80:f2:76:c9:96:9c:fd:fa:8e:cf:c3:ef:1b:0b:80:
         76:88:12:30:85:23:d9:32:77:cb:25:8d:0a:bc:c1:d7:e0:6a:
         15:8d:27:ed:8f:fd:e4:3f:ee:7f:a4:9a:15:98:18:ff:f0:a9:
         54:d5:a2:8e:a6:57:97:14:bf:42:59:4b:7d:45:44:97:5c:67:
         70:34:cc:fb:84:79:d9:f8:89:c6:80:41:e2:3e:49:d5:e4:14:
         04:4b:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:19 2025 by rpki-client