Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
File:                     anNsvQAR2jHSmwYeX_TWOELaKko.mft (raw, json)
Hash identifier:          C11QXPyvE1SpC+oMzrNsd3Gu3+HNHC2JDJrspSslEOE=
Subject key identifier:   90:8F:FA:A8:0D:4B:46:62:2D:D9:B4:B0:36:F1:04:5B:D9:08:37:9B
Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Certificate issuer:       /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Certificate serial:       019881D483CCC7CD4D1D4F419FAA150284BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
Manifest number:          161C
Signing time:             Thu 07 Aug 2025 00:00:44 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:44 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:44 +0000
Files and hashes:         1: anNsvQAR2jHSmwYeX_TWOELaKko.crl (hash: VcVc5l44/ZK/G6YLU++Id/CXcQxJBOMRpu6+JsDbOzI=)
                          2: xe6f0-R3uUZBnoLs0S7n6Iepim8.roa (hash: HOV8Vg5bEFKecupNdQdTB6clHVPzjq+LxD7iw25nWc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:83:cc:c7:cd:4d:1d:4f:41:9f:aa:15:02:84:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
        Validity
            Not Before: Aug  7 00:00:44 2025 GMT
            Not After : Aug  8 00:00:44 2025 GMT
        Subject: CN=908ffaa80d4b46622dd9b4b036f1045bd908379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:f9:03:fc:a6:96:3d:a7:65:04:3b:9f:ec:
                    8b:91:6e:f4:5c:63:de:4c:f1:7d:f6:82:1a:39:5d:
                    4a:95:7a:f1:aa:cc:cc:30:9a:cc:88:8f:90:b2:ff:
                    d3:53:d4:76:a7:ee:cc:0b:f2:5a:69:03:08:93:11:
                    57:8e:19:6d:aa:0a:ae:c2:80:39:c0:21:e1:44:f8:
                    ec:da:4b:e0:39:a5:f7:89:fa:4a:d4:6a:ec:17:e8:
                    30:8f:30:b0:9e:5d:1d:af:bd:08:50:8d:7e:35:f9:
                    0d:c8:97:42:31:c7:b9:3c:ea:02:0e:a3:9c:bf:56:
                    e4:41:41:84:41:33:9e:2d:d4:a7:c6:5a:a0:3a:28:
                    ae:f0:98:d9:93:39:98:6b:d2:fc:e5:28:01:90:66:
                    b9:8d:d7:08:3f:9a:c1:60:f1:d8:9a:e0:b2:09:8c:
                    5a:dc:7a:a6:5b:4a:e4:1c:0b:06:b6:a8:d3:b8:6b:
                    ce:eb:26:dd:58:c1:75:6b:05:f2:1b:13:b5:2e:1a:
                    33:38:5f:94:4b:d5:bc:31:a7:29:c1:46:bd:95:cf:
                    06:78:ac:21:6f:b8:23:25:93:ce:d8:07:55:14:5b:
                    93:9e:40:48:d7:b3:e0:d5:35:e4:44:cc:4f:e1:57:
                    a8:13:16:8f:cd:2a:22:14:02:40:8f:8a:1a:5c:e9:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:FA:A8:0D:4B:46:62:2D:D9:B4:B0:36:F1:04:5B:D9:08:37:9B
            X509v3 Authority Key Identifier:
                keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:be:7c:7e:93:cb:a8:92:6d:fd:a8:c5:68:45:77:3e:dd:13:
         77:20:06:b6:d4:f8:9a:4b:17:36:9c:2f:0a:ff:eb:8f:6a:02:
         ab:60:c3:6d:93:90:09:30:59:4a:16:51:53:06:c5:fa:2c:f6:
         8e:d6:25:03:f1:e4:ca:b2:1b:d6:25:de:f2:ab:9b:74:fc:d8:
         3d:fb:c9:9f:69:44:b8:ae:71:41:17:80:4a:0b:87:38:43:b4:
         3f:39:24:62:cf:7e:d3:82:c5:1a:47:37:00:3c:a9:d9:b6:96:
         07:61:66:1a:9f:f5:d6:05:70:e5:e8:53:1c:9a:02:3c:db:b1:
         58:0d:85:96:11:98:16:73:d4:6e:f3:f5:3b:89:c3:fa:ac:25:
         07:36:a6:0f:54:42:79:6f:06:2e:21:0f:a8:2e:12:15:4c:0f:
         3c:f9:5b:85:f9:5f:0c:7a:c5:55:76:46:f3:59:77:9a:3b:2f:
         5d:ae:ee:88:cf:e5:c3:13:9e:b1:97:72:6e:76:78:c8:c5:a6:
         54:83:42:30:db:4c:59:96:46:91:0e:e9:99:7d:67:54:8d:1a:
         fc:dd:b9:d6:09:9f:61:df:8c:54:9e:da:41:49:22:27:7f:f9:
         33:bb:bd:a2:0f:a7:3a:a4:dd:b0:12:b2:fe:2e:93:49:92:cc:
         74:b5:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:32 2025 by rpki-client