Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File:                     SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier:          AW1fqWMBzygzhCQQR9pjNPkZLLxKlEXkYYWZYC3JTEs=
Subject key identifier:   01:38:1F:8B:E4:B9:FC:D6:BD:30:AC:41:99:53:F1:CA:BE:67:DC:68
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer:       /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial:       01987E6660E1F50CEBA6D7DF7E9ADC0FB31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 08:01:35 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:35 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:35 +0000
Files and hashes:         1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: W9aQrhO4EAxC1qXEPZIjjNFDdVUTq/9HVlrFUMuF4pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:60:e1:f5:0c:eb:a6:d7:df:7e:9a:dc:0f:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
        Validity
            Not Before: Aug  6 08:01:35 2025 GMT
            Not After : Aug  7 08:01:35 2025 GMT
        Subject: CN=01381f8be4b9fcd6bd30ac419953f1cabe67dc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:43:db:22:94:32:d9:81:49:cb:37:be:61:
                    1f:b6:40:25:2a:9f:e9:e5:3d:95:57:92:4e:02:b7:
                    59:48:7a:2f:96:e6:af:ef:7b:f5:37:f4:d6:b0:59:
                    25:b1:2d:d2:1b:5d:59:12:eb:8c:6b:7e:31:88:6a:
                    6c:66:dd:4f:16:5a:08:38:98:6a:25:22:02:8f:da:
                    bf:e8:2a:55:79:68:9d:a2:bb:05:24:80:0c:19:a0:
                    17:1e:ff:73:89:e8:a8:de:b0:a8:29:5f:70:db:8d:
                    b3:fc:4a:50:e3:4a:22:af:fb:ac:0c:60:ba:06:5c:
                    aa:c2:ea:b8:4c:bd:d3:19:01:4c:ec:a3:c7:be:6d:
                    ec:69:db:8c:11:6a:8a:30:df:16:29:e3:aa:e1:8a:
                    71:e6:98:95:fb:50:26:95:8a:13:22:e7:14:96:47:
                    d2:28:34:a5:d8:9f:c9:16:87:fb:8b:d4:43:3b:33:
                    7c:0e:fd:12:f5:4a:5a:5d:13:12:9f:4d:68:52:71:
                    c4:1b:8b:5d:f7:ca:22:ef:47:8b:8e:e6:e5:17:03:
                    ac:18:91:ce:e4:2f:ab:71:5d:00:7b:ec:47:4c:89:
                    69:ed:78:b2:d1:9e:14:12:d8:19:62:37:e7:c0:99:
                    48:f4:40:c9:9d:c4:ab:8d:4b:bd:0a:3d:b7:84:5c:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:1F:8B:E4:B9:FC:D6:BD:30:AC:41:99:53:F1:CA:BE:67:DC:68
            X509v3 Authority Key Identifier:
                keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:77:5d:f8:37:6c:f0:61:77:eb:6d:5e:45:6d:b2:3f:47:
         2b:78:ec:21:5e:d1:41:b9:94:4d:5f:e5:2d:ba:48:9f:a8:9f:
         58:5a:f1:0e:06:98:ff:e9:f2:1f:ec:82:0e:6d:2d:1a:9b:39:
         c5:19:c0:50:72:7f:8e:f9:8f:95:ef:c0:b9:f6:99:3e:ce:3f:
         3b:e0:ac:7a:10:fe:e7:9a:3e:74:96:ce:6b:e5:78:c4:5c:a3:
         78:c7:32:1b:74:3b:61:ed:2d:2e:9f:12:07:d2:cc:5f:7e:f2:
         a9:8b:e7:0d:06:3f:65:9d:af:27:21:fb:8d:f4:71:1b:cc:5b:
         4a:9c:38:ea:1e:48:0f:11:9a:90:9f:42:70:3e:ea:30:07:cf:
         c0:89:c7:2c:96:13:83:61:65:42:8b:ed:e7:a5:72:d6:b3:32:
         eb:e0:de:4f:9b:b9:b2:20:a4:07:a8:10:2b:84:ea:04:ba:5e:
         2c:62:1d:97:93:70:39:3a:ca:ef:0f:e7:38:87:44:86:db:3a:
         53:e9:37:62:ab:25:c3:f0:51:01:17:f2:20:1c:ea:10:7e:d9:
         d5:a4:9f:cd:59:91:c1:ca:dd:13:0d:88:ee:3a:11:e9:05:94:
         45:fb:6b:a2:da:43:ed:10:5c:57:c4:91:8a:84:0e:bb:6d:fd:
         f0:cb:86:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZmDh9QzrptfffprcD7MeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZTU1YjM5MjcwZjZhZWU4NTc1M2RjZTE0ZWQ5ZTFmMWZj
ODliMjQwHhcNMjUwODA2MDgwMTM1WhcNMjUwODA3MDgwMTM1WjAzMTEwLwYDVQQD
EygwMTM4MWY4YmU0YjlmY2Q2YmQzMGFjNDE5OTUzZjFjYWJlNjdkYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1ND2yKUMtmBScs3vmEftkAlKp/p
5T2VV5JOArdZSHovluav73v1N/TWsFklsS3SG11ZEuuMa34xiGpsZt1PFloIOJhq
JSICj9q/6CpVeWidorsFJIAMGaAXHv9zieio3rCoKV9w242z/EpQ40oir/usDGC6
Blyqwuq4TL3TGQFM7KPHvm3saduMEWqKMN8WKeOq4Ypx5piV+1AmlYoTIucUlkfS
KDSl2J/JFof7i9RDOzN8Dv0S9UpaXRMSn01oUnHEG4td98oi70eLjublFwOsGJHO
5C+rcV0Ae+xHTIlp7Xiy0Z4UEtgZYjfnwJlI9EDJncSrjUu9Cj23hFwCrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAE4H4vkufzWvTCsQZlT8cq+Z9xoMB8GA1UdIwQY
MBaAFErlWzknD2ruhXU9zhTtnh8fyJskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3VWYk9TY1BhdTZGZFQzT0ZPMmVIeF9JbXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wY2JhZDktMTAzMS00MmU5LWI0YWYt
MDRlNzk4OTMyMTYzLzEvU3VWYk9TY1BhdTZGZFQzT0ZPMmVIeF9JbXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wY2JhZDktMTAzMS00MmU5LWI0YWYtMDRlNzk4OTMyMTYz
LzEvU3VWYk9TY1BhdTZGZFQzT0ZPMmVIeF9JbXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqt3Xfg3
bPBhd+ttXkVtsj9HK3jsIV7RQbmUTV/lLbpIn6ifWFrxDgaY/+nyH+yCDm0tGps5
xRnAUHJ/jvmPle/AufaZPs4/O+CsehD+55o+dJbOa+V4xFyjeMcyG3Q7Ye0tLp8S
B9LMX37yqYvnDQY/ZZ2vJyH7jfRxG8xbSpw46h5IDxGakJ9CcD7qMAfPwInHLJYT
g2FlQovt56Vy1rMy6+DeT5u5siCkB6gQK4TqBLpeLGIdl5NwOTrK7w/nOIdEhts6
U+k3Yqslw/BRARfyIBzqEH7Z1aSfzVmRwcrdEw2I7joR6QWURftrotpD7RBcV8SR
ioQOu2398MuGVg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:34 2025 by rpki-client