Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File:                     MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier:          5SicUkK3bi1kBW3/rYSmINVG1PPisToBMeRR935S9WU=
Subject key identifier:   6C:D6:61:B4:94:1A:20:B4:9C:EB:42:61:AF:04:07:95:63:B7:79:E4
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer:       /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial:       019874BE79E9B3177C5855B5A426A0BA2E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 11:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:36 +0000
Files and hashes:         1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: yaGduD2vYu9SGXJABWZxYI9FmtU4QwnN8IGR5nG7F4c=)
                          2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:79:e9:b3:17:7c:58:55:b5:a4:26:a0:ba:2e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
        Validity
            Not Before: Aug  4 11:01:36 2025 GMT
            Not After : Aug  5 11:01:36 2025 GMT
        Subject: CN=6cd661b4941a20b49ceb4261af04079563b779e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:30:68:aa:88:da:0c:91:05:b9:59:3d:db:
                    0a:8c:8c:36:ce:a1:61:7d:ea:f2:90:36:ba:4f:4c:
                    65:26:70:7b:a2:03:4d:b8:ef:55:92:76:0f:96:33:
                    c3:28:8c:db:54:a4:82:90:ba:15:63:37:b9:6c:80:
                    93:5d:88:3d:67:07:64:32:df:aa:8a:24:a2:3e:41:
                    2c:2a:56:01:bd:5f:94:c3:5b:22:1f:7b:c2:36:cf:
                    be:90:6e:f5:27:df:07:4d:f4:38:96:76:24:2a:d5:
                    21:13:21:66:99:a7:fd:16:d7:55:c4:88:03:e8:e4:
                    80:c2:55:9d:83:71:a1:a0:06:1b:32:7a:fc:2c:c4:
                    db:74:d4:3b:8d:f9:59:bc:02:88:a3:0d:61:10:98:
                    11:d8:f4:57:2b:09:16:90:98:ff:41:99:a3:7f:9c:
                    e6:98:c8:a9:74:6e:e0:0c:d9:67:ed:b4:b4:4c:fb:
                    cd:f6:37:10:31:f8:c0:c4:3e:8c:e6:36:13:a7:ab:
                    3c:cd:6b:06:52:60:b8:51:b2:cf:51:5b:1f:de:13:
                    28:54:c6:bf:fa:6c:37:84:18:9b:91:3a:fe:d1:81:
                    9f:24:e8:5b:55:96:2e:0b:2f:5c:45:a9:c9:6e:f9:
                    e5:8e:f2:44:b7:e0:34:64:1c:7b:f1:de:d8:86:f4:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:61:B4:94:1A:20:B4:9C:EB:42:61:AF:04:07:95:63:B7:79:E4
            X509v3 Authority Key Identifier:
                keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:fa:a6:63:36:b3:80:ae:50:80:bc:b0:b3:61:dc:19:3b:
         c8:85:8f:c9:c7:13:31:ac:ed:e4:ce:f9:8b:47:22:2b:c9:05:
         54:6e:f3:d5:b6:61:cb:ac:19:5a:9b:4e:4f:6f:94:b9:71:d6:
         83:05:c2:93:d3:c7:82:71:27:cb:7a:74:8d:5f:d9:af:c5:14:
         2b:61:5e:93:18:77:a1:d7:25:8f:57:87:2a:4b:c9:a1:c2:16:
         02:2e:c3:86:4e:73:62:df:f2:60:25:4a:c6:ea:aa:3e:d6:c7:
         b7:f6:a4:78:db:2c:8f:16:0e:26:3c:88:70:b0:c0:5e:5f:95:
         fd:ed:64:fc:54:e3:f6:bb:8d:dd:02:4e:3a:ab:38:ae:81:ca:
         7c:f4:b6:13:e4:1b:0a:56:3d:e8:94:81:37:fc:46:f0:28:99:
         68:cd:bf:e4:28:3f:01:5f:e3:42:40:a8:07:5a:77:24:6d:3c:
         80:d9:6f:3f:cb:35:7d:2b:33:b6:24:5c:ef:b4:ce:97:ec:3a:
         36:26:c2:10:f0:27:e2:7f:8a:19:be:ce:ad:6e:13:0a:57:8b:
         94:4b:4a:d7:b8:0e:7a:5b:61:3e:d4:82:ba:35:f0:18:39:9c:
         fc:a4:c6:98:a3:43:35:eb:e8:a2:35:b6:0e:3d:23:43:6f:52:
         97:ba:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:24 2025 by rpki-client