Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File:                     k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier:          yr4LK26ro7S9WxpJCUBzi0rUXx42iOmbXk0aQSgsq3E=
Subject key identifier:   A1:26:12:6D:E8:1B:E3:55:4F:70:B7:A5:53:25:E1:56:4E:BB:DC:4B
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer:       /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial:       01987D8BCAE7F49342AFD9AA0C272C2100F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 04:02:50 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:50 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:50 +0000
Files and hashes:         1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: fu3SQ6lFCQxzA0/1yHd5jElSZ6tJb9o9fznKAr5RL5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:ca:e7:f4:93:42:af:d9:aa:0c:27:2c:21:00:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
        Validity
            Not Before: Aug  6 04:02:50 2025 GMT
            Not After : Aug  7 04:02:50 2025 GMT
        Subject: CN=a126126de81be3554f70b7a55325e1564ebbdc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:7e:11:8c:1a:6f:c4:eb:d2:04:87:ae:d3:
                    aa:e0:02:21:87:05:c1:06:cc:ed:54:02:78:43:4e:
                    da:cb:3e:90:80:a6:86:e7:00:56:57:23:ec:68:16:
                    40:6a:56:2e:08:ec:f4:00:e2:b1:c8:9f:04:a6:99:
                    35:d0:94:fe:3b:02:b5:c8:2f:26:66:fe:56:55:e5:
                    f3:64:18:d7:e8:5f:57:41:27:c6:70:2c:a7:16:dd:
                    d9:03:f1:c5:47:96:87:d1:8d:3f:78:c5:a8:6f:3a:
                    0f:98:b4:16:9c:52:e1:3e:63:fb:51:5b:3b:76:65:
                    6a:9b:93:86:77:09:28:f4:07:18:7d:68:1b:0e:c9:
                    88:29:49:6a:a1:0a:58:21:f1:7c:5d:2c:66:6d:42:
                    2f:69:6a:b7:25:48:75:5b:e6:8e:f8:85:02:18:71:
                    7c:f2:be:96:f6:48:77:d3:23:cc:34:c9:ef:cb:ab:
                    b1:3a:f2:22:ac:5c:a2:a4:9c:c0:0e:75:fa:30:e5:
                    5c:76:e1:53:4b:ba:6b:3f:f8:0a:72:c1:19:b0:a2:
                    8f:a9:bc:b3:b3:b4:40:96:4c:f3:ee:e6:c1:8c:c4:
                    71:ab:e2:e4:c7:59:12:ee:a5:da:c7:a0:d9:8e:c2:
                    17:a4:98:65:b5:2d:d9:97:d6:ba:83:21:17:94:43:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:12:6D:E8:1B:E3:55:4F:70:B7:A5:53:25:E1:56:4E:BB:DC:4B
            X509v3 Authority Key Identifier:
                keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:11:6f:15:a9:9b:5f:81:5a:ca:f2:12:5f:b7:68:9f:dc:
         05:61:22:78:f8:3a:55:06:ac:6d:2a:6f:8b:e4:86:f8:11:63:
         29:bf:40:20:59:15:8b:64:f1:85:65:1d:81:47:83:24:d8:ef:
         76:dd:fd:e7:47:59:2b:11:8e:a0:03:9a:9c:89:0d:1e:d9:72:
         e1:31:31:3b:8b:8a:5d:65:a4:c3:9f:6c:95:7e:26:f4:6b:51:
         5a:29:f1:a5:1e:07:63:ef:aa:a9:b5:aa:8d:b2:6b:c0:7a:48:
         47:c0:78:fe:1a:38:9f:15:4f:e5:c8:36:4c:02:ea:c0:69:40:
         cc:ae:5e:8e:22:da:98:0a:08:16:f6:12:31:ae:f7:e1:60:14:
         f7:37:e0:13:aa:d2:72:0a:4c:69:f8:f8:f9:28:2d:f0:66:d7:
         14:97:4e:a9:5a:ce:c0:48:36:8d:f2:f1:c3:4b:84:f2:71:86:
         4b:42:e9:1b:26:05:00:a5:27:44:6e:67:b9:f8:6d:5f:99:b4:
         b3:1a:08:ba:ed:5b:dc:3f:57:1c:ee:0b:ae:8e:6f:32:8a:a0:
         fd:13:18:18:d0:18:d8:34:e8:41:e6:93:5e:09:d4:19:c8:7f:
         b5:91:f5:f3:dd:a6:d6:96:af:12:9f:c3:d2:c7:34:60:53:eb:
         4a:17:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:06 2025 by rpki-client