Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          aovdSTz2S4DJ95Ky3uocQ7YsVQlIT1KnArNvkBYjJoU=
Subject key identifier:   BC:2C:52:D6:35:0C:62:5C:60:48:45:11:70:D6:46:1A:F0:F8:6D:35
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       0198880E37C07549B751DB09E0A33C22D728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          161E
Signing time:             Fri 08 Aug 2025 05:01:29 +0000
Manifest this update:     Fri 08 Aug 2025 05:01:29 +0000
Manifest next update:     Sat 09 Aug 2025 05:01:29 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: tPg5SBnvWOIWClcfYnMIw01zBnOPZrRmLSwdJ8C7uD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0e:37:c0:75:49:b7:51:db:09:e0:a3:3c:22:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: Aug  8 05:01:29 2025 GMT
            Not After : Aug  9 05:01:29 2025 GMT
        Subject: CN=bc2c52d6350c625c6048451170d6461af0f86d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:9d:f5:5b:5c:a8:c3:ff:d7:0b:f8:9c:89:
                    73:4d:b0:e1:fb:6e:d6:a8:a9:69:c3:0f:c3:ce:23:
                    94:3d:ca:e6:c2:51:3e:25:82:ef:be:5d:fc:18:9b:
                    25:8a:93:74:1a:0d:15:0c:b9:35:5c:55:0f:16:e5:
                    ef:2c:0f:4c:b9:8d:22:1a:5c:07:d1:4e:1f:0d:e9:
                    41:70:1a:6f:b6:94:26:27:e1:1f:0b:3c:99:ec:dd:
                    70:12:ac:59:d3:68:58:39:7b:9f:ff:80:18:af:59:
                    51:5a:3a:32:2d:e0:5f:69:c5:4e:20:cb:71:2b:43:
                    c7:49:dd:28:ad:b1:6d:2c:5e:4a:01:a9:3f:43:71:
                    e2:20:58:ff:06:56:85:1a:9d:85:49:ec:1c:ac:a2:
                    9f:cf:04:e4:46:8a:93:34:bf:4c:28:b9:59:8f:a6:
                    21:32:07:a4:b5:8a:b1:1e:92:af:43:79:3d:39:14:
                    6a:dd:50:b1:52:e4:04:14:de:5b:d2:84:7d:3c:de:
                    9f:a7:81:75:c1:26:89:e0:70:0b:2e:85:8f:7b:65:
                    e7:8a:0a:94:bf:d9:59:64:8a:63:ca:59:09:8b:dc:
                    12:c5:46:88:fa:46:a9:31:8e:14:97:9f:7a:ce:01:
                    a5:3d:e5:4f:42:50:5a:c3:82:b1:66:5b:52:0d:e6:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2C:52:D6:35:0C:62:5C:60:48:45:11:70:D6:46:1A:F0:F8:6D:35
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:b1:e9:aa:58:35:93:00:07:4c:31:61:4a:11:b4:70:42:
         10:86:5d:a4:70:04:19:40:d8:cf:bd:7a:5c:45:27:55:93:e8:
         06:30:37:61:06:18:75:6e:ca:38:77:a2:db:3f:25:1d:fd:83:
         87:2c:ce:5c:30:ed:c4:4b:9f:98:2d:b7:62:ca:46:c8:73:48:
         b6:7a:af:eb:62:64:04:9d:03:35:2f:72:c1:bc:57:e2:71:7e:
         47:fc:97:e1:ba:0f:82:69:f6:57:e5:0c:7e:df:31:a9:ea:a0:
         fb:bc:5a:ed:2f:45:02:ef:86:9d:96:50:51:b3:0c:66:42:df:
         ae:4c:a6:20:75:75:09:96:c8:dc:2f:30:c4:28:3a:31:37:a3:
         fe:ea:9b:d4:7d:86:34:46:a6:98:50:d0:0c:d6:c6:1d:c3:b7:
         7a:06:c2:2a:23:12:9f:ba:5d:5e:43:58:5d:c7:ae:72:05:95:
         ee:2b:d7:ca:ee:41:82:d6:15:e5:23:4b:58:70:06:62:73:9f:
         4c:68:37:45:5c:48:f0:bd:91:29:de:69:5a:cf:19:10:32:49:
         27:3e:af:fc:32:9c:67:5c:a7:96:15:08:cc:50:03:2f:c5:89:
         c7:65:5c:bf:50:dd:0d:42:fb:15:c6:9c:5e:d3:73:e4:97:01:
         c8:d3:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:08 2025 by rpki-client