Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File:                     CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier:          a1Slz8aMp0VlT3oZln3kRXIvd0wW1Or0DSc9eM/kfPo=
Subject key identifier:   27:43:07:E0:D9:72:35:61:48:98:A0:6E:61:FB:4F:FA:CF:BE:E4:E4
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer:       /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial:       01987C0971D6025EAB4062DA76D0F1230B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 21:00:50 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:50 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:50 +0000
Files and hashes:         1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: 6Mr5aUgDTKOpWjeScwLmIBj60xl3yEGp5LT29Rr26os=)
                          2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:71:d6:02:5e:ab:40:62:da:76:d0:f1:23:0b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
        Validity
            Not Before: Aug  5 21:00:50 2025 GMT
            Not After : Aug  6 21:00:50 2025 GMT
        Subject: CN=274307e0d97235614898a06e61fb4ffacfbee4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:0e:5e:a9:42:c4:82:02:9b:41:5d:4a:42:
                    94:83:6f:ae:e4:49:3f:df:e6:f7:d4:b5:da:87:9d:
                    54:6e:6f:4f:e3:fd:2e:6c:d2:c5:3d:1a:c4:ba:dd:
                    b8:ab:d7:e4:17:90:50:c7:f5:e1:23:0a:b4:a5:bc:
                    19:38:9d:d8:c2:08:91:b1:5f:57:13:eb:20:9b:66:
                    79:7d:be:47:78:ff:e9:87:09:89:3e:03:ab:7f:7b:
                    63:d4:50:fc:70:e3:ea:81:e1:00:62:99:7d:9b:41:
                    56:05:b0:ab:05:01:2d:dc:a9:f7:4a:34:08:01:ce:
                    8c:aa:ff:ee:97:0b:d9:82:f9:46:ee:88:1b:4a:dd:
                    92:71:5d:f9:aa:d3:fe:75:64:32:02:3d:85:6c:69:
                    f8:89:8a:8e:03:5d:d6:32:7b:77:75:fa:67:a6:9e:
                    30:14:31:a8:4c:c4:73:dc:0d:6e:4a:60:9b:9d:ca:
                    6f:6b:c9:c3:3f:92:f5:a5:c0:9d:2d:be:43:ce:31:
                    36:27:f4:19:ff:46:5c:15:72:3a:74:e2:05:a3:6f:
                    d7:79:22:e0:c0:44:cb:50:99:f4:8e:eb:58:b6:f9:
                    e4:cf:5f:ea:3a:e7:4e:22:76:fb:ab:44:f6:9c:8b:
                    13:bb:e9:c6:e6:20:3f:5f:c5:6d:6e:c0:29:3f:57:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:07:E0:D9:72:35:61:48:98:A0:6E:61:FB:4F:FA:CF:BE:E4:E4
            X509v3 Authority Key Identifier:
                keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:e0:96:39:78:eb:2f:55:58:ed:d7:e4:ee:87:61:ef:f3:
         aa:1e:ff:fe:b8:23:fd:e8:99:ad:53:9f:90:f6:68:5a:47:4c:
         67:31:75:88:61:1d:47:9e:15:6e:db:53:7d:d5:c1:4f:8a:36:
         70:73:f5:66:95:b4:4c:ba:d4:f7:99:41:e6:25:ba:39:32:d3:
         80:b4:f2:20:c3:5c:1e:30:75:3b:b7:26:80:9f:96:9f:ea:42:
         6a:7c:d4:24:ef:ef:3d:03:b9:57:68:f5:22:89:0f:b9:2e:63:
         59:64:8d:9a:7f:bd:ee:78:ad:9d:ff:c4:3a:09:2f:21:35:e0:
         b7:16:f4:20:74:cf:d4:50:a0:8b:d4:bd:01:7e:b6:8a:6f:7e:
         51:c5:b9:82:bb:0e:4f:e8:b2:b5:32:68:fd:e9:d4:88:4e:c4:
         85:68:62:75:51:f5:03:6f:30:f2:05:a0:4f:35:73:2d:37:ec:
         6e:0c:5a:05:af:95:6d:81:f2:03:9d:01:b7:4f:9a:40:7e:a6:
         b9:ea:10:cd:fe:13:42:51:2a:de:9a:ee:3f:e3:29:e2:f1:50:
         24:99:ee:8b:2c:4f:e5:d6:c7:af:8f:40:1a:85:05:58:fa:84:
         51:b9:7c:5a:41:af:05:ec:d2:24:bf:84:8b:72:04:ff:e7:6b:
         a8:04:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:01 2025 by rpki-client