Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File:                     soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier:          O6xMmCkbZvg1yhTHlUHXN15u5xIIJgS+uGcqyeyutsU=
Subject key identifier:   B0:D6:38:3E:EC:AC:20:61:20:0D:BC:BB:13:DD:D2:8A:9C:FA:43:3E
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer:       /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial:       019875DEC04DE2AAC4B5A1FF58F5F2955DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 16:16:29 +0000
Manifest this update:     Mon 04 Aug 2025 16:16:29 +0000
Manifest next update:     Tue 05 Aug 2025 16:16:29 +0000
Files and hashes:         1: G4p3T3vKIJwpoVG087GbMaXF5PU.roa (hash: S1k3o+lhMdQMdnd1dbHX7NQg9XvE842LHxXNFh07jnY=)
                          2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: vs22X3YNtXYs6XFy06APZwFJorNGXCzb+NkYOdjOPLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:de:c0:4d:e2:aa:c4:b5:a1:ff:58:f5:f2:95:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
        Validity
            Not Before: Aug  4 16:16:29 2025 GMT
            Not After : Aug  5 16:16:29 2025 GMT
        Subject: CN=b0d6383eecac2061200dbcbb13ddd28a9cfa433e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:93:90:e6:ba:44:0c:fb:b6:b7:01:00:c6:
                    df:b1:f0:97:d2:18:90:c3:31:6d:51:7e:62:46:65:
                    be:0f:21:ae:86:d2:af:4f:ba:e5:de:de:bd:dc:73:
                    e7:6d:d5:09:09:6b:6c:31:d2:c8:eb:33:77:a4:42:
                    fa:7c:bd:1f:a1:e7:d4:51:41:2d:5e:79:46:16:7b:
                    48:22:f0:d7:2d:6d:04:71:eb:ab:17:85:07:9f:9a:
                    04:5a:3e:36:03:b6:69:c0:12:15:6e:27:01:21:5c:
                    de:bc:3b:55:fb:ad:16:22:b5:a0:ec:d4:f6:e0:a7:
                    15:45:b0:42:93:93:02:7a:58:c4:8f:6d:8a:40:1c:
                    13:c8:65:23:94:40:ca:c8:38:55:08:ec:98:07:2d:
                    36:89:51:76:69:ba:77:2b:a6:cf:57:36:04:2c:78:
                    18:e9:4f:3b:62:f8:03:5d:f8:e2:1a:b2:71:8a:86:
                    b3:20:38:14:61:f3:29:6c:7b:e1:cb:26:30:c5:48:
                    3c:5b:38:9f:fe:9d:96:78:b7:1c:67:36:df:90:c8:
                    f8:80:15:bd:09:c8:10:8d:92:4d:d3:b2:5a:11:dd:
                    cf:78:f6:b8:d2:9b:36:6f:03:76:af:f4:19:dd:eb:
                    3a:0a:5c:e0:73:38:1e:e5:c9:85:70:6b:f2:f5:62:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D6:38:3E:EC:AC:20:61:20:0D:BC:BB:13:DD:D2:8A:9C:FA:43:3E
            X509v3 Authority Key Identifier:
                keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:e7:be:51:58:ab:be:49:50:95:8a:b2:d7:0f:5f:a9:1e:
         5b:7c:30:4b:ea:c4:ae:f2:48:2e:8f:0a:42:c2:4d:32:13:23:
         ae:46:fe:30:19:6c:f1:e5:41:0f:9e:7a:21:8a:91:d4:c6:8b:
         93:6a:42:f9:ee:47:91:b8:2b:64:54:25:79:f7:58:90:26:3b:
         12:d1:50:0d:d0:99:7a:99:08:cb:e0:31:ea:6d:04:ff:01:be:
         cc:c7:ac:94:e3:65:46:5c:6f:5e:8b:c4:36:b9:f4:2d:64:04:
         cd:07:e6:71:b8:9f:36:ee:59:8e:41:e3:14:0b:32:b7:04:7f:
         82:25:c0:64:3c:b3:21:a5:9a:15:7c:1a:fe:f5:9e:fb:2f:4c:
         14:43:fb:1b:0b:72:29:e7:53:0c:1b:c7:2f:89:59:bc:6c:72:
         c5:6d:e5:59:b3:75:aa:6a:88:7a:93:93:7b:02:5d:71:35:1c:
         8b:5e:01:f4:e4:d9:03:d3:f1:7e:6a:1b:32:66:35:98:09:6a:
         30:9f:d1:e1:40:e0:f6:db:df:4e:08:dd:90:46:b9:b6:bb:11:
         09:6e:e6:6d:d2:bb:de:3f:75:ae:7b:a8:1d:42:ab:85:d0:5d:
         f4:a3:fe:80:a6:10:34:a5:fc:59:b0:5a:4c:fd:83:41:36:db:
         f5:76:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:26 2025 by rpki-client