Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          SHv05LrJfrlFenltH4HFJhpPR/wJRx/AdYywveFxUqs=
Subject key identifier:   E3:6F:77:4F:F4:95:C7:6D:AF:F4:0B:4F:E6:D8:DB:41:78:12:9C:6F
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       01989C713752E9D73E789BF682966D4BB9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          162F
Signing time:             Tue 12 Aug 2025 04:02:01 +0000
Manifest this update:     Tue 12 Aug 2025 04:02:01 +0000
Manifest next update:     Wed 13 Aug 2025 04:02:01 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: 6rbGoTvEw3em3yFRcib5vYZzMXp5AOxwkhNEZ8zVkow=)
                          2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9c:71:37:52:e9:d7:3e:78:9b:f6:82:96:6d:4b:b9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Aug 12 04:02:01 2025 GMT
            Not After : Aug 13 04:02:01 2025 GMT
        Subject: CN=e36f774ff495c76daff40b4fe6d8db4178129c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:78:e1:95:ec:06:98:3e:f1:f7:80:cf:3b:
                    54:40:61:81:ac:1b:7f:10:bc:8b:47:df:52:3c:90:
                    d6:d1:c1:69:12:77:e5:f5:89:b8:e3:b1:58:52:56:
                    94:3e:8c:2a:d1:a4:d5:7b:91:65:38:37:ec:b9:7e:
                    c4:66:3b:66:b2:62:b0:f4:da:06:35:a7:23:16:8c:
                    8f:e3:80:04:17:ee:33:b7:c7:49:0c:7e:da:4d:7b:
                    0a:2e:38:09:52:31:6e:2b:d9:be:78:d4:08:a8:cc:
                    07:95:2f:47:ca:36:92:12:ce:e4:22:bd:e1:e8:ff:
                    98:1f:71:4b:6e:ab:2e:39:4e:48:02:c1:33:04:85:
                    50:78:e3:4d:42:ad:c8:b4:66:e3:33:f2:bb:b2:28:
                    d5:38:1c:5c:db:c0:ae:a3:16:f8:71:bf:27:35:73:
                    8c:75:45:d0:36:82:4f:65:50:5e:5c:82:36:af:b1:
                    ef:de:4c:e7:a5:f8:cf:ad:2f:10:8e:93:dd:bd:ee:
                    34:ab:93:08:41:c0:cf:e5:ea:66:33:ef:d2:b3:8f:
                    22:75:aa:52:76:92:0a:6a:0d:6d:67:d0:e6:a7:57:
                    89:34:8c:5d:12:01:61:c2:e8:cc:f1:82:16:3e:ad:
                    ca:cc:19:b3:db:88:96:2b:ae:5c:91:1e:ff:9a:b5:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:77:4F:F4:95:C7:6D:AF:F4:0B:4F:E6:D8:DB:41:78:12:9C:6F
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:07:c5:e0:d4:8f:96:3a:53:b6:f0:cf:60:c8:2d:84:c4:3e:
         3e:c8:d7:7f:61:23:aa:8a:a3:f0:9c:8f:03:91:f0:69:84:7e:
         4d:bd:f0:8b:0e:8e:0a:03:1f:28:5d:5d:71:48:11:6e:c6:82:
         d5:23:df:d1:53:da:3e:a0:c7:34:50:b2:9e:0f:8b:03:a9:c3:
         6c:f9:f4:f1:16:41:dd:21:21:0b:6e:4f:79:c7:59:5c:31:f7:
         18:6b:5b:66:3b:c2:15:32:8b:b1:cf:da:36:a2:17:ae:b6:9d:
         d1:bc:0e:73:a0:6d:ec:a4:d2:51:c9:e6:90:46:c1:d0:8c:4e:
         fe:79:c1:91:39:09:03:5e:67:7b:8f:51:46:56:bd:56:f9:3d:
         ac:49:53:87:97:3b:14:36:e3:4a:89:89:30:c5:10:da:b2:42:
         eb:f0:2a:75:3c:e7:00:ce:b0:d9:4b:e0:a5:7e:ee:27:82:63:
         99:d7:f3:ca:6f:23:c9:77:d2:f6:ce:57:9a:47:f8:d1:55:28:
         fd:e0:2f:c9:87:cc:5c:71:af:ea:d7:2e:f7:04:33:af:38:e7:
         3b:80:62:22:57:3e:24:1e:f5:9b:5a:ab:06:a4:03:61:08:7c:
         a6:36:94:14:62:c0:95:19:22:1d:c7:a2:d7:c2:69:ae:61:93:
         4a:07:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:46 2025 by rpki-client