Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File:                     hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier:          jfwtxkZOP1t51ouDe5jiqRiM5qiTu1AIP5CXXHlSNh4=
Subject key identifier:   B3:D8:E6:A2:36:A3:08:3C:07:A2:DD:57:34:02:9E:A2:CB:55:55:32
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer:       /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial:       01987DF7865D74B75BD0F73CB240E39040F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 06:00:30 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:30 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:30 +0000
Files and hashes:         1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: h66P2MZmEteTFeZIzDpTzIDSAPDGsjCHanUexcK1+ww=)
                          2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:86:5d:74:b7:5b:d0:f7:3c:b2:40:e3:90:40:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
        Validity
            Not Before: Aug  6 06:00:30 2025 GMT
            Not After : Aug  7 06:00:30 2025 GMT
        Subject: CN=b3d8e6a236a3083c07a2dd5734029ea2cb555532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:ce:f5:27:02:04:97:fd:ad:f9:c9:06:e7:
                    b7:c0:8d:66:80:d0:3a:ba:d0:16:0f:53:a8:09:f3:
                    0b:3d:89:e9:04:74:4a:45:2f:e6:66:ce:dc:e0:4e:
                    5a:33:2a:78:63:b2:d1:46:4e:49:68:1a:f5:55:a9:
                    35:84:e7:90:e2:65:fd:e6:4b:24:77:fc:8a:8e:0e:
                    32:e3:8c:5e:91:c1:92:de:30:c9:de:0d:d3:7e:eb:
                    28:79:9b:21:a7:6f:d2:da:03:58:89:45:92:1a:ec:
                    94:90:9e:72:3e:f3:bd:93:7f:66:43:67:cd:2a:83:
                    f8:c4:30:fc:1a:f9:aa:e8:66:a0:17:f2:86:d5:50:
                    46:3d:86:fe:1d:32:2b:dc:ae:46:72:ee:01:91:de:
                    6e:59:c8:4d:b9:51:13:0a:80:ba:42:86:f0:bc:83:
                    b5:32:9b:f3:0a:81:00:41:35:17:c2:f6:47:5e:95:
                    a9:6f:5d:e1:d4:bb:0a:1d:5b:aa:19:24:2f:e8:e2:
                    bf:a8:8d:e7:59:77:7c:f5:7b:3f:6b:56:ee:71:a9:
                    52:03:a5:6e:4c:0a:f3:c5:1e:66:3b:c3:32:93:49:
                    5f:ac:e5:8c:60:b8:96:02:e3:5b:c5:fb:32:6c:66:
                    b9:31:c2:6a:e5:eb:c5:12:0e:2b:ac:3a:11:bf:34:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:E6:A2:36:A3:08:3C:07:A2:DD:57:34:02:9E:A2:CB:55:55:32
            X509v3 Authority Key Identifier:
                keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a8:b6:db:47:a1:92:c0:0e:d4:4f:fb:86:98:2a:8e:f3:c7:
         6a:68:6f:3b:9a:ee:ac:7b:9b:55:06:49:be:ab:e0:2c:1a:7d:
         1b:2c:58:1c:f4:f7:33:22:51:3f:fe:22:25:3f:54:8a:ca:00:
         6d:56:e4:fa:9a:4b:14:02:06:1e:27:a3:a4:ae:8d:13:5d:7c:
         18:04:75:7e:2d:11:43:e7:c0:d2:7e:00:54:a2:87:f1:7c:77:
         07:eb:4c:ba:ab:ed:92:52:03:d0:ed:d3:cb:cf:f9:c8:de:21:
         cf:0f:af:0e:13:58:ff:14:8e:99:53:8d:06:f8:31:14:3a:74:
         14:65:ac:90:cb:f8:36:19:96:ee:8c:a2:ea:6b:08:76:a7:fe:
         02:df:39:c9:61:68:52:4a:83:7e:1b:67:ae:2a:68:10:98:2e:
         e9:33:ac:19:7d:5c:45:04:6d:a8:11:f6:e7:c0:be:50:e4:4a:
         f6:44:6b:37:37:3a:3a:0b:87:22:b6:4c:f7:04:51:0c:cc:2e:
         e0:80:b1:1f:dc:b4:47:bd:af:dd:9e:9a:09:16:ce:b9:cc:36:
         64:82:6b:f1:18:45:a8:9a:c1:63:d7:6a:bb:d6:05:f9:d3:a1:
         19:14:63:55:f0:8d:ed:78:ee:ba:3b:4c:61:d2:ad:c6:f5:a4:
         e6:78:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:13:41 2025 by rpki-client