Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File:                     bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier:          tQbbgAelQKgxiY9uc3e9G22Bm+QtQfwW1QVfivO9o5o=
Subject key identifier:   AB:8C:40:1C:48:44:65:38:87:19:C0:47:EF:6A:C4:2A:9F:31:F3:61
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer:       /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial:       019879E4517D27D0E8E10BF413656C19ED7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number:          1616
Signing time:             Tue 05 Aug 2025 11:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 11:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 11:01:02 +0000
Files and hashes:         1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: eAWdHu5Eo0NoZD63bugawcZc7c9mSdWSO8dIXYBxQUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e4:51:7d:27:d0:e8:e1:0b:f4:13:65:6c:19:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
        Validity
            Not Before: Aug  5 11:01:02 2025 GMT
            Not After : Aug  6 11:01:02 2025 GMT
        Subject: CN=ab8c401c484465388719c047ef6ac42a9f31f361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:49:de:f9:d0:80:38:76:95:6e:5e:17:dd:
                    34:8c:0f:0a:f3:3e:5e:35:73:3a:17:fb:06:26:38:
                    e1:5c:33:05:3f:5c:7b:f8:ee:1e:7d:50:f8:37:27:
                    b7:68:0e:89:52:08:58:dd:68:3b:ca:a4:2a:ad:c2:
                    7f:5b:09:0d:e9:a7:a6:cb:bd:e4:66:59:c8:c0:ee:
                    bb:cf:1a:f9:13:50:78:fd:3f:67:04:fc:cf:4d:26:
                    f0:61:78:ca:c5:fc:c5:19:6a:64:70:29:11:6a:77:
                    ea:3f:a9:cf:da:3e:c0:38:29:71:20:b6:f9:81:f5:
                    0f:65:0f:29:44:52:ba:b6:36:dc:58:b9:6e:a8:34:
                    af:2b:a5:0a:54:d1:de:87:13:04:4b:c3:fb:b7:fe:
                    ec:41:ae:20:34:7b:56:6c:fe:48:b2:e7:9d:a2:8b:
                    14:86:f2:af:a7:0d:42:cf:c3:c4:7a:9b:c1:37:2d:
                    3e:4b:4b:cb:79:80:22:3e:c3:70:53:f6:f3:3f:f1:
                    2f:0d:6b:c9:53:7f:66:49:a9:86:f4:41:a0:3b:b5:
                    5c:2a:18:88:33:c8:42:64:ec:c5:41:cc:6c:a0:2e:
                    19:dc:03:7e:13:eb:a7:ec:42:d4:9c:7c:93:82:76:
                    20:09:1b:83:bc:96:df:df:40:24:aa:0a:5a:ea:92:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:40:1C:48:44:65:38:87:19:C0:47:EF:6A:C4:2A:9F:31:F3:61
            X509v3 Authority Key Identifier:
                keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6a:0b:ea:9b:64:c3:79:3f:43:53:47:b6:10:6b:bd:29:bb:
         ae:61:15:46:5d:15:ea:64:09:dd:51:fd:cc:f4:1a:dc:e1:b3:
         13:14:64:0f:ad:2a:79:ff:5c:b3:d8:d6:d0:85:dc:ed:19:eb:
         b0:e2:bc:de:8e:9f:14:6c:e4:24:d9:f5:94:ec:c4:57:ec:fd:
         06:01:22:b0:ac:64:fa:f0:9e:03:e7:d1:5b:05:39:d6:d0:8b:
         cc:f2:2d:83:84:5b:20:58:1c:fa:25:68:e3:bf:60:97:5c:5b:
         9c:8e:6f:75:21:a0:8a:a5:d2:41:1a:38:74:97:6e:bd:33:40:
         6b:24:98:06:8e:99:bc:a4:8b:a3:b3:50:ab:02:0f:ed:da:50:
         36:4f:ca:ca:ef:3e:fa:36:99:3e:7d:5d:71:c8:1d:ad:3f:26:
         9c:a4:be:78:89:da:74:2b:f5:46:48:33:81:63:a4:cd:b7:91:
         b9:55:14:c3:cd:b5:7b:c7:52:8f:cb:79:05:3a:81:21:b0:8d:
         c3:42:8f:0a:72:ad:9d:4a:d2:d0:2e:d9:b0:7e:5b:c2:e5:9f:
         51:90:e1:d4:dd:3b:25:da:63:17:04:3f:45:a0:05:64:9b:1f:
         21:e0:23:bc:94:a8:48:28:53:55:51:ab:4e:7f:0d:39:99:bd:
         42:f9:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:48 2025 by rpki-client