Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File:                     1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier:          tUCraP6KJm5WjnfQqm1b+QiuxhQPRR5cMpkInfWEjPE=
Subject key identifier:   01:F6:15:9D:47:D2:32:21:9D:97:84:7B:56:FD:33:48:0C:BD:2D:7C
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer:       /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial:       01987D8A0A1F957C05501D3A2746518236C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 04:00:55 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:55 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:55 +0000
Files and hashes:         1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: TqC7Ik9kSfbvAFwBswi+DAVikdHHffMAtBgTu9muLnM=)
                          2: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (hash: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=)
                          3: K8XuD1NpxrW0TJB7qtrYsXkJRDA.roa (hash: /CdBF5kIZ5ECcmHw5H6/OJaH4oIiEyJ+Vl+1/T4lKZc=)
                          4: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (hash: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:0a:1f:95:7c:05:50:1d:3a:27:46:51:82:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
        Validity
            Not Before: Aug  6 04:00:55 2025 GMT
            Not After : Aug  7 04:00:55 2025 GMT
        Subject: CN=01f6159d47d232219d97847b56fd33480cbd2d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:3d:fb:ae:b7:dc:9b:fe:5b:5e:88:6d:02:
                    fe:d7:c5:ea:8d:2d:e6:1a:fe:dd:2d:1d:77:aa:b1:
                    69:59:79:30:48:c3:89:54:55:73:a0:da:fc:cb:4d:
                    66:d9:36:d2:cf:da:16:03:f7:85:83:f7:34:51:3a:
                    11:07:26:9a:11:8b:0c:6e:be:3f:ca:e2:3a:ce:a8:
                    03:16:b0:4f:35:ef:0b:9a:6a:94:90:4e:97:f8:3c:
                    0f:ec:f6:be:5a:72:4d:1a:4e:5e:8e:33:e6:a1:fb:
                    2b:23:fb:0d:16:79:a4:ad:55:9d:39:f1:7f:33:77:
                    07:26:bf:19:73:6b:18:5c:36:3b:a9:44:6f:9a:c1:
                    82:14:b6:e0:5e:9c:bb:64:5c:27:36:d3:f2:ba:20:
                    d0:5d:71:ec:f4:31:e8:2e:f9:b1:97:9c:eb:35:ff:
                    56:75:00:91:cf:d5:58:d0:17:c0:30:5c:65:70:eb:
                    8f:0e:a0:ba:7b:ad:b6:b4:1f:8a:1c:3e:9c:a7:ec:
                    25:f7:4a:d0:cf:5d:a4:8b:5a:eb:24:7c:20:e8:ce:
                    fa:1c:33:92:e9:d8:80:57:96:6d:18:5e:23:00:8a:
                    5e:21:86:cc:45:f2:1d:ef:6d:41:cd:03:5d:35:d5:
                    82:e5:b4:c1:a4:f6:ad:08:19:54:19:02:10:f4:9c:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:15:9D:47:D2:32:21:9D:97:84:7B:56:FD:33:48:0C:BD:2D:7C
            X509v3 Authority Key Identifier:
                keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f9:71:0d:f8:74:46:30:fe:07:7e:67:6b:d7:d8:e3:fa:c8:
         71:35:93:27:16:6a:82:e8:31:32:de:2a:70:cc:f0:ac:d1:30:
         6b:22:9b:4c:8d:ec:4d:11:6f:36:90:56:8c:6a:25:ff:3d:0b:
         d0:a0:0d:4d:e8:41:c2:8d:57:00:40:c2:1a:b4:8c:94:e1:40:
         76:c9:41:93:7e:c3:61:aa:83:10:61:1e:2f:c9:ee:4c:70:c3:
         3b:f8:c4:1d:38:24:c0:c7:06:4c:d5:e9:45:8d:92:7a:e0:53:
         5f:e7:2c:72:bd:35:51:6a:e7:2b:bf:ce:43:66:c4:ef:c8:b3:
         c3:cc:c2:d3:a0:76:0f:f4:ca:76:d9:ef:60:72:64:e7:03:25:
         7e:69:62:24:63:94:22:0a:74:14:84:4f:61:ae:0f:46:54:43:
         c7:de:23:6a:ae:a1:06:76:0a:74:41:2c:aa:93:c7:c3:8e:d8:
         88:e5:4a:1a:93:80:73:9a:31:29:57:f5:d6:67:78:8c:3c:97:
         ed:41:5a:b6:fb:9f:53:fe:14:c3:e7:fb:b1:6f:83:c6:b7:7c:
         05:96:e3:36:9f:88:de:bb:87:c9:22:19:47:df:92:a2:4e:a7:
         3c:0d:8b:96:5a:b6:06:ce:50:77:c3:e6:29:3b:a1:71:95:4a:
         83:db:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:39 2025 by rpki-client