Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          0+6c6cvYS6ltKwAUimhlgskNDafFBxCkHM90yEq89KY=
Subject key identifier:   07:CF:C4:38:24:01:7C:F4:97:4B:7D:F4:C7:BD:F1:28:D0:72:E5:92
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       01987E9C4FCA3C64867FAA6887BE0C24FC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 09:00:29 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:29 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:29 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: 96BdzBbK+z1YVlx5lrtq/BfOdhLrtq7WyvaEi8tSvIc=)
                          2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:4f:ca:3c:64:86:7f:aa:68:87:be:0c:24:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: Aug  6 09:00:29 2025 GMT
            Not After : Aug  7 09:00:29 2025 GMT
        Subject: CN=07cfc43824017cf4974b7df4c7bdf128d072e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:73:b6:16:41:05:e9:6c:fc:a9:67:8e:71:
                    c0:d1:05:e5:33:1a:89:35:71:80:b3:23:38:c1:f4:
                    22:be:81:51:57:9b:0b:fc:e1:69:67:ab:ef:ad:b0:
                    37:c3:b3:05:cb:8e:06:7e:3e:84:97:eb:c9:f6:d9:
                    0c:95:08:6a:0c:ca:fd:13:ef:bc:e3:04:8f:07:20:
                    75:22:cf:7c:6c:d8:3e:66:b7:65:49:a4:c4:55:26:
                    b2:49:8b:ac:aa:d9:b8:b3:47:1f:af:f1:f6:ee:ed:
                    37:fe:97:54:1a:7e:56:26:dd:f7:74:8d:46:0c:a5:
                    de:05:58:17:d2:c8:2e:c4:5f:e7:b1:c3:dc:5c:42:
                    a3:4d:cd:c6:8e:ac:23:39:fe:26:6b:b7:9e:6c:e7:
                    62:bd:9f:0b:b0:fa:c0:c1:c1:bb:8a:21:e9:57:12:
                    4d:a2:e5:ef:44:0a:67:f9:0d:e3:1a:e8:59:77:8b:
                    fa:12:f1:50:c4:1c:f1:a3:f8:3d:aa:64:66:49:e8:
                    46:37:60:21:d1:a7:7a:7a:ac:82:d5:07:47:da:cb:
                    c9:74:5e:0e:56:12:de:df:f7:d6:f4:28:5d:2c:88:
                    d4:a6:28:1b:fa:b9:74:59:d1:2c:74:26:2c:b2:26:
                    84:5d:44:0a:ea:f7:94:23:2a:0f:57:f7:18:2e:a2:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CF:C4:38:24:01:7C:F4:97:4B:7D:F4:C7:BD:F1:28:D0:72:E5:92
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:17:de:0f:f3:c1:57:6f:12:09:6c:f4:7e:12:3d:42:01:6d:
         13:97:dd:3e:ea:6a:1f:f4:7a:0a:6b:ff:06:7c:e7:aa:15:64:
         b8:eb:e9:d9:25:a7:e9:bf:53:d2:74:c3:2b:0d:e2:5d:e7:82:
         f3:03:d8:32:1b:a7:1e:fa:ce:68:35:61:ab:10:07:ab:69:4a:
         6f:a1:83:cc:e7:e8:8a:1d:01:dc:41:af:76:7c:10:d9:72:6a:
         31:c5:2c:66:e5:20:c0:2b:8b:c6:67:11:db:8f:c4:00:23:80:
         a5:cb:f5:8d:c3:2b:07:2a:89:4e:8e:c0:99:e9:51:83:45:01:
         cf:b3:7f:21:24:fa:f0:b2:18:e8:ce:01:46:4c:91:2a:82:34:
         99:70:70:e2:2c:d2:7e:d5:81:54:cf:b1:21:3a:fd:28:b4:65:
         ac:7b:10:5d:10:e4:51:e2:85:a4:6c:85:69:d1:a6:80:37:0c:
         c9:5a:92:e6:19:99:da:8e:a9:d9:98:05:6b:68:b2:24:d0:25:
         c7:1c:77:93:52:bd:18:ef:c1:ec:98:29:d7:43:ca:69:4f:a7:
         44:85:ab:6f:de:a6:54:0d:75:b8:ca:02:9f:0e:2a:d9:66:da:
         11:b2:ac:55:80:6c:7d:be:24:46:9a:8a:e4:c5:02:f1:c3:8a:
         e7:4b:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:02 2025 by rpki-client