Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
File:                     cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json)
Hash identifier:          8xXQudqXToD8d1xtruccXVkK5Zcr6Wmelw3xf48/QNo=
Subject key identifier:   11:EB:C4:5F:03:3C:7A:1E:D3:65:68:74:E9:3A:FF:15:76:E5:E7:97
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Certificate issuer:       /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial:       01987E66304D32D3C09ECA8DBAF48D8089E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 08:01:22 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:22 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:22 +0000
Files and hashes:         1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: bqOWCg83bEUzEbzUaUU6xdVXmNblPX4X3mRAVSsqHes=)
                          2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:30:4d:32:d3:c0:9e:ca:8d:ba:f4:8d:80:89:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
        Validity
            Not Before: Aug  6 08:01:22 2025 GMT
            Not After : Aug  7 08:01:22 2025 GMT
        Subject: CN=11ebc45f033c7a1ed3656874e93aff1576e5e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:39:ce:5a:64:34:7c:e3:66:9b:e8:5d:a5:
                    5d:16:eb:1d:60:39:57:5d:71:f1:2c:18:b2:0f:68:
                    11:f7:ce:04:a3:8a:d9:5f:9e:e4:6d:6e:4f:64:04:
                    bb:18:17:f1:8e:55:62:19:71:15:63:09:c0:e6:64:
                    c1:c1:8f:99:52:18:dc:c9:8b:88:a7:1c:51:f5:7f:
                    a0:83:8e:51:a6:1d:05:3d:6d:7b:b5:28:60:ee:3b:
                    fb:5c:1e:c1:ac:9e:77:23:a9:5f:89:71:32:2c:8d:
                    3d:53:6c:21:59:27:26:31:fc:6e:38:57:a5:9a:fb:
                    8e:c6:4a:02:23:7c:42:0c:f6:39:e2:a6:b1:20:18:
                    de:6f:4a:e5:da:bd:50:ff:77:2b:1d:4a:c6:fa:ab:
                    3c:77:57:a9:3f:c5:1c:d4:2f:3f:f4:1a:9f:3f:51:
                    fa:5b:97:38:f7:11:b6:b8:a9:27:d7:33:3a:1e:46:
                    e1:5f:5b:72:77:b2:d3:b2:7d:41:2a:47:38:71:75:
                    e9:96:70:cc:4f:50:5b:b6:71:89:ec:20:1e:d4:ac:
                    50:fd:f1:4e:3f:e9:09:76:bf:f3:e1:fc:1c:15:86:
                    ef:ec:00:0b:97:b8:e9:e2:56:ff:ff:a2:cc:08:75:
                    37:1c:7c:ad:f1:43:e0:39:ac:cb:5a:8e:16:01:1e:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EB:C4:5F:03:3C:7A:1E:D3:65:68:74:E9:3A:FF:15:76:E5:E7:97
            X509v3 Authority Key Identifier:
                keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b3:d7:72:ba:00:6a:27:c7:af:4c:1e:b6:40:0c:61:e4:aa:
         5d:4c:a5:0f:f0:ce:c5:ee:89:31:05:ae:f2:5b:4c:a1:22:c6:
         28:ed:1b:7f:31:cd:c1:e6:b8:84:9d:5f:bd:58:c5:46:e9:c1:
         fc:c8:f6:32:14:41:25:b2:32:a1:c6:a1:62:96:fd:90:3d:41:
         d9:ae:aa:3d:a5:98:69:59:2a:b5:24:ea:7c:1b:f5:23:11:e8:
         68:46:3b:52:a5:77:2b:cc:12:b9:94:53:8f:83:10:75:02:14:
         e6:96:1d:44:38:ca:c0:7a:bd:73:46:24:36:10:5e:01:53:1e:
         19:17:6f:a5:e3:63:44:60:ed:e9:61:7d:c2:9a:22:69:3a:b9:
         57:d7:52:bb:de:a6:0b:20:16:73:cf:1d:80:79:d9:65:3c:49:
         1a:92:de:c1:a2:b2:37:7a:ec:a6:90:12:c9:6e:12:ad:35:31:
         6f:cd:7c:23:fb:ab:1c:96:39:17:72:3c:e0:3c:16:ec:fc:56:
         f5:bb:2b:64:59:ec:4c:4f:9d:46:4d:1a:b1:82:09:fc:40:2a:
         91:7b:a2:73:74:cd:d0:2f:4b:45:03:a3:60:07:12:94:b9:f8:
         b3:23:bb:56:6b:db:d3:83:f2:89:59:1b:56:72:24:1e:aa:e3:
         00:ed:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:14 2025 by rpki-client