Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File:                     At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier:          o3UQw5F6EjcSVwDHsToKObBkUlB32YdFdmKP0325Rjc=
Subject key identifier:   B0:5D:88:7B:F4:E4:4E:82:CC:6B:25:C2:E9:9A:18:29:9E:95:96:CF
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer:       /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial:       019882426A80431C25255C13F695530184B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 02:00:47 +0000
Manifest this update:     Thu 07 Aug 2025 02:00:47 +0000
Manifest next update:     Fri 08 Aug 2025 02:00:47 +0000
Files and hashes:         1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: 6bQdGeUrNHqjUBw3y7pwImIrXgd6oojvHXlzEvmabQA=)
                          2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:6a:80:43:1c:25:25:5c:13:f6:95:53:01:84:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
        Validity
            Not Before: Aug  7 02:00:47 2025 GMT
            Not After : Aug  8 02:00:47 2025 GMT
        Subject: CN=b05d887bf4e44e82cc6b25c2e99a18299e9596cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:fd:6c:28:08:b6:ce:b7:dc:61:86:28:14:
                    da:0f:6c:aa:0b:78:a8:40:8d:2f:de:18:0c:0c:ff:
                    aa:1f:e0:54:2c:f7:35:42:b2:b1:10:dd:4e:de:9e:
                    58:ea:96:e3:bc:e9:ed:eb:37:7d:36:11:a2:97:cf:
                    60:70:af:70:ab:15:4a:13:40:4f:bd:a4:34:6d:ef:
                    c8:dd:e2:b9:d3:5a:cf:ae:4d:ea:2d:e5:62:cf:a9:
                    07:f3:f3:fe:33:e3:1e:64:35:f1:ef:33:4f:88:22:
                    48:63:f8:de:e5:04:ff:fb:f6:19:d0:ba:77:3e:3c:
                    fb:cb:a4:50:81:4d:22:53:cb:26:61:43:16:4d:a6:
                    71:bf:55:d3:ce:d9:cd:5e:a3:8f:55:ac:ce:a4:5c:
                    94:13:6c:0e:e4:c6:92:72:23:59:c7:6d:b8:01:4b:
                    d7:33:62:95:00:50:bb:e4:9f:70:76:4f:de:14:e5:
                    2f:93:f2:be:64:5e:c0:7b:ba:57:12:09:c6:94:55:
                    3d:40:d2:1a:73:58:ea:de:52:11:d1:cb:36:55:d0:
                    58:e8:26:e8:34:af:2e:3d:fb:ea:c9:bc:52:62:c0:
                    0c:44:40:99:d3:1b:1c:76:b3:8d:d1:ea:97:93:90:
                    b6:8b:f0:fb:a4:03:36:96:8f:2e:5d:a0:2d:38:ef:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5D:88:7B:F4:E4:4E:82:CC:6B:25:C2:E9:9A:18:29:9E:95:96:CF
            X509v3 Authority Key Identifier:
                keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:08:45:be:d3:8f:cb:d6:f6:4c:bf:32:97:47:75:e3:a8:
         3b:1e:ec:e7:72:9f:e1:3a:15:6e:eb:f4:4c:c0:48:03:ea:00:
         6b:5b:2a:ce:59:02:92:33:31:3e:15:b3:b8:dc:01:13:8a:92:
         24:dc:cf:44:c8:1a:de:c1:33:22:d1:00:64:b1:9b:c3:73:2b:
         6a:8e:00:af:36:be:f5:c1:9b:31:61:e4:da:e4:67:46:66:60:
         c3:d7:9f:be:e2:df:bf:5d:32:8e:d2:a7:70:76:ec:1c:c5:76:
         87:9e:e3:3e:5b:f0:73:23:20:40:d8:e2:b8:11:3b:b3:31:01:
         88:4d:a2:b4:2e:86:fe:82:a0:b5:38:94:3d:7d:a8:b6:83:8a:
         a6:cb:e6:31:5e:99:d0:83:b3:57:f4:0a:a0:80:cf:86:bc:82:
         51:4c:b3:97:17:09:46:86:1c:a9:2f:04:6a:b9:b7:21:fa:11:
         77:2d:91:22:74:79:76:85:7f:c3:5d:e3:2f:8e:72:ee:3d:4c:
         85:01:b6:a7:78:5d:c6:fd:83:4e:e6:f7:cf:e3:1a:ca:6e:3a:
         59:c7:1d:c1:a6:f9:67:f1:a8:2e:fb:fc:7e:7d:08:17:87:35:
         57:37:eb:b1:a7:79:97:03:20:ef:af:cb:3e:9e:69:6d:02:71:
         c7:0c:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:35 2025 by rpki-client