Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File:                     6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier:          VXbXKEfWhMJwXgLRJJY2VgNYWjF6RFegfuBxq4uQGEU=
Subject key identifier:   AD:AF:52:50:17:81:3C:F8:95:27:45:71:4A:C1:5D:51:28:1E:51:97
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer:       /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial:       0198880D9AFCD1EC07855FFFAD017E40DB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number:          161E
Signing time:             Fri 08 Aug 2025 05:00:49 +0000
Manifest this update:     Fri 08 Aug 2025 05:00:49 +0000
Manifest next update:     Sat 09 Aug 2025 05:00:49 +0000
Files and hashes:         1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: kANivRMhny3OLC74mrh9GmVM/YdiUuiOPjceyatjTQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0d:9a:fc:d1:ec:07:85:5f:ff:ad:01:7e:40:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
        Validity
            Not Before: Aug  8 05:00:49 2025 GMT
            Not After : Aug  9 05:00:49 2025 GMT
        Subject: CN=adaf525017813cf8952745714ac15d51281e5197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:29:9b:d7:5c:35:6e:90:de:8c:6f:43:e3:
                    b0:de:46:5e:b1:87:e1:bf:64:d2:59:4d:ef:9c:5d:
                    6c:20:11:ea:27:f3:a2:10:1d:c4:b4:4d:1b:b3:8f:
                    99:4b:60:75:74:6f:3d:e9:c1:ef:be:74:04:e0:ae:
                    e1:16:86:06:44:10:9f:8f:7a:29:1f:3b:7b:30:4f:
                    bd:4a:d2:3b:2f:dc:7c:80:09:91:a8:5a:d8:c1:fd:
                    b7:bb:b7:d4:ba:06:62:f9:20:d9:3a:f9:9e:04:10:
                    0e:3f:c7:c4:45:30:70:c6:b1:65:7a:d4:4c:66:57:
                    cc:aa:1c:5a:ab:4a:a1:17:85:18:fb:30:f3:ea:9c:
                    7b:73:bf:c9:ef:f8:f7:4b:3c:8e:d9:9e:8a:19:e7:
                    20:af:1f:9c:48:5a:6c:eb:c3:d7:5a:7f:09:ea:53:
                    7d:2b:42:3f:fa:09:09:67:21:5c:f5:7d:31:17:85:
                    84:ed:74:06:b2:e4:78:eb:13:69:4a:61:33:13:02:
                    97:0a:b2:54:a2:ad:38:0a:7e:52:ab:e9:16:fe:f3:
                    9b:30:fd:11:56:12:61:19:66:13:69:b8:ae:30:1c:
                    b3:87:0e:e7:41:bf:6b:95:90:3c:3d:d9:9c:ef:73:
                    c3:4e:65:93:3f:d9:25:3a:bf:3c:71:f4:1c:7d:d2:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:52:50:17:81:3C:F8:95:27:45:71:4A:C1:5D:51:28:1E:51:97
            X509v3 Authority Key Identifier:
                keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:9e:74:6f:e3:56:d0:5e:09:af:ce:29:51:d0:13:cb:0e:
         4b:91:33:93:38:2c:b3:15:4e:cc:c4:75:92:07:63:c9:80:bf:
         fa:b0:b4:8d:06:a3:54:94:f1:9f:a2:3b:28:de:3a:18:b0:c5:
         35:67:ac:61:89:4f:76:8e:5f:35:7e:ee:04:97:a2:6e:fc:1a:
         5d:e3:aa:f5:e1:5a:5b:81:d9:77:56:c1:46:36:b0:40:52:e2:
         d9:b9:f1:84:41:90:13:65:2e:39:c3:c5:b9:ef:e0:e9:97:83:
         d5:ef:d0:fb:59:b8:1d:29:d3:a6:3c:ad:25:c5:f0:08:0b:a1:
         df:89:50:1d:f6:1b:48:fd:98:fe:bd:dc:4c:20:de:b1:f9:dd:
         d8:11:ec:aa:5f:83:df:7b:d3:c7:eb:d4:9f:47:0b:9d:4e:e4:
         ff:62:3e:a2:7b:09:61:1e:9e:1c:9e:75:2e:62:1b:17:04:1e:
         30:2c:de:d3:39:ed:22:54:ba:37:6d:10:1f:63:93:f6:3a:e2:
         66:32:d5:e0:16:64:1d:ab:5b:8a:3c:77:70:60:e8:6f:71:c5:
         ab:4c:70:18:fd:f7:8b:14:ff:a3:81:b5:b7:0a:a1:fb:8d:d3:
         fd:7e:fb:e1:7a:9f:9d:44:0e:ba:c8:b1:3e:5a:39:3f:a2:1f:
         79:dd:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:38 2025 by rpki-client