Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File:                     AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier:          G4+iGHPPKHlT0LCltNPbXYJ6LFlOEnJnH4Dbt6oEO+U=
Subject key identifier:   F8:DE:A1:51:EA:DD:74:FF:FB:D2:21:F9:F8:9B:EE:10:DE:96:02:92
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer:       /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial:       01987CADFA6AF86D4C43DBE5AD5AD1E207EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 00:00:33 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:33 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:33 +0000
Files and hashes:         1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: 4BJTJ5IuktB030EuQc18d6z/LPTFqBv3C2oLM41G4GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ad:fa:6a:f8:6d:4c:43:db:e5:ad:5a:d1:e2:07:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
        Validity
            Not Before: Aug  6 00:00:33 2025 GMT
            Not After : Aug  7 00:00:33 2025 GMT
        Subject: CN=f8dea151eadd74fffbd221f9f89bee10de960292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:1d:2e:24:34:18:88:0b:05:c3:39:e6:05:
                    49:19:45:7c:6a:6e:97:16:f2:42:03:af:2f:e0:24:
                    81:99:8d:50:9e:d5:c4:7e:45:21:07:15:e4:97:d4:
                    32:41:3c:3b:fb:ba:5c:b5:ba:de:2c:23:2e:0f:5e:
                    f3:04:52:d2:22:74:34:05:88:42:3c:0e:2a:7d:b5:
                    fd:e0:52:0c:82:2c:0f:18:b1:a0:85:44:70:16:24:
                    ec:6a:82:5b:9f:fc:81:52:4a:8a:9e:71:a6:d6:44:
                    91:a9:0c:0e:bb:e3:2b:71:d5:34:e4:7d:c0:33:30:
                    6e:a9:4c:43:56:af:34:fc:28:0c:39:de:8e:3d:50:
                    e4:d6:51:d8:11:95:e0:0e:a1:7b:00:36:90:a5:14:
                    07:aa:1d:90:14:38:5a:74:7d:15:16:60:6e:4a:10:
                    34:62:ff:70:e4:e6:2f:9a:50:63:f0:03:c8:ef:a5:
                    5e:34:f0:4f:d7:e9:40:5c:53:c6:ef:68:12:05:5f:
                    65:c5:d9:2c:e1:58:84:b2:65:9d:69:ca:24:7e:56:
                    01:ae:86:aa:b9:f6:7d:72:40:31:4b:7b:3b:b1:c7:
                    f3:a1:00:c4:a5:c5:b7:d4:ab:a7:e1:85:1a:9b:3b:
                    13:11:41:61:34:fe:b8:98:cf:6b:75:60:26:84:64:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:A1:51:EA:DD:74:FF:FB:D2:21:F9:F8:9B:EE:10:DE:96:02:92
            X509v3 Authority Key Identifier:
                keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:32:9e:5d:8d:5b:ab:7a:76:a5:97:45:f0:58:b2:2a:97:c1:
         c6:fd:b1:b0:cc:49:4f:a7:40:db:7f:b8:b8:42:55:39:46:87:
         8e:1c:1d:ab:74:96:ab:c3:bb:22:97:7d:7e:44:fe:2e:f9:94:
         19:c2:2b:a3:57:df:81:73:08:9d:1d:c8:7e:c1:63:8d:24:50:
         b1:07:c8:71:cb:b2:b1:f9:e8:5b:ec:7f:0f:67:6e:82:ff:ee:
         87:e6:43:5c:e9:5a:cd:83:39:98:48:ce:41:91:8d:8b:60:0b:
         d3:50:95:52:88:05:9f:5f:8a:73:78:66:3b:7c:12:4d:bc:0a:
         dc:c4:ac:05:e3:ee:fd:6f:be:48:57:e1:0e:c2:d1:14:8c:d2:
         65:cc:ce:78:10:d2:d0:1d:4b:d7:55:64:45:cc:a1:c8:0d:10:
         a4:d9:96:26:0a:f8:74:84:36:1e:6d:40:f6:d4:92:35:05:1d:
         d4:0c:08:84:b3:f5:f7:ec:49:1c:6f:17:a9:6a:f9:0f:39:15:
         09:e2:a3:13:ce:e5:64:6e:66:53:69:77:f7:45:d6:f5:f1:71:
         9e:98:c0:d3:2c:82:10:31:18:e2:6c:8b:5b:18:ff:b6:3d:3f:
         27:52:f4:29:bf:62:60:f8:ff:34:55:86:07:44:b1:f3:70:01:
         11:fc:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 08:00:43 2025 by rpki-client