Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File:                     ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier:          Wm4IEeVOA8qDPef0izYl9Ff7IVh/SsBpWy5tvsaEZoY=
Subject key identifier:   95:22:32:98:7F:05:09:DC:AE:43:DF:1C:45:F2:95:F3:33:AD:17:8B
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer:       /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial:       0198A04CE9E71875FB3EC3561F99151D0CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number:          162B
Signing time:             Tue 12 Aug 2025 22:00:51 +0000
Manifest this update:     Tue 12 Aug 2025 22:00:51 +0000
Manifest next update:     Wed 13 Aug 2025 22:00:51 +0000
Files and hashes:         1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: FDV9PIuQT8g5WU51FAeBOaO6+EtoytEdzKwVqQ2vEzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4c:e9:e7:18:75:fb:3e:c3:56:1f:99:15:1d:0c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
        Validity
            Not Before: Aug 12 22:00:51 2025 GMT
            Not After : Aug 13 22:00:51 2025 GMT
        Subject: CN=952232987f0509dcae43df1c45f295f333ad178b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:1c:1d:68:bd:c4:a5:b4:3e:ff:25:cb:1e:
                    a2:62:9c:a8:51:9e:7a:c2:9e:dd:cb:a2:f8:67:4f:
                    c2:09:a8:5d:ef:10:aa:1e:63:53:26:6f:90:88:0b:
                    b4:23:a0:98:08:44:d3:80:3e:2f:fa:5e:a2:49:52:
                    3e:ab:b8:fb:f2:3e:27:db:d3:17:29:ab:16:18:2c:
                    6b:15:d8:e6:49:38:bc:3e:54:d4:37:87:75:20:7f:
                    ec:03:00:65:cf:b4:37:01:ab:02:f2:5a:27:2e:d7:
                    2b:0c:30:15:8c:93:45:b1:8f:d8:c5:11:ed:25:73:
                    ee:d9:a4:2e:17:4e:2c:7c:d9:50:93:25:4f:97:00:
                    bd:7d:3d:75:dd:6f:29:97:b4:cd:4d:d0:c4:e5:4d:
                    7e:7b:d7:91:66:f9:b5:4d:4c:82:4b:d8:35:2d:79:
                    07:2e:91:29:a0:55:b0:35:6c:77:a1:8f:c5:76:d9:
                    f0:ad:52:39:3c:79:01:f4:01:0a:ba:f5:7c:87:74:
                    88:8b:5a:da:00:eb:97:b5:7c:18:5a:92:ac:ca:64:
                    d6:f2:f7:37:8e:fd:af:bf:68:30:fb:80:d6:e3:7d:
                    5c:a4:69:2a:68:ea:61:bc:97:28:53:c0:7a:8a:63:
                    80:e0:11:f8:5e:2d:bc:82:4a:cf:14:97:b1:d0:48:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:32:98:7F:05:09:DC:AE:43:DF:1C:45:F2:95:F3:33:AD:17:8B
            X509v3 Authority Key Identifier:
                keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:af:ce:82:95:10:d4:e1:1e:af:bb:e6:18:6f:c2:fc:3e:
         df:06:71:73:74:79:e9:94:7b:b2:c6:a3:3e:de:7e:cd:b9:4f:
         fa:d5:ad:f8:8c:2d:5c:fa:f4:53:94:dc:4b:38:65:bd:0c:bb:
         a0:78:a3:d1:33:c6:e4:5e:4f:ec:52:95:cc:30:a5:bb:bb:aa:
         b1:a5:f3:3e:86:0f:40:01:a5:64:08:b8:18:17:25:92:2f:73:
         99:41:be:cd:26:0a:4e:33:84:fa:91:cf:27:36:69:98:e8:45:
         81:1f:59:48:eb:c8:81:a6:a9:04:80:e8:37:ef:59:fb:56:83:
         b1:a9:76:5e:d2:d0:d5:ea:29:a4:c9:82:cc:4a:d2:57:42:6b:
         50:9c:a5:0e:3f:2b:06:8a:cb:09:78:5e:de:5d:a2:8b:74:aa:
         63:52:fe:35:b3:86:44:1b:84:a3:a1:fe:b4:30:d0:db:d1:ab:
         4e:93:dc:f0:11:c3:04:df:ce:8c:38:96:73:75:db:b8:3e:cf:
         4c:bb:98:6b:e8:06:43:f1:2f:43:b1:b3:a1:e1:22:27:16:ff:
         52:ee:6b:2b:ec:1d:60:ff:5b:66:dc:dd:31:2d:ed:1e:f3:cd:
         c6:9c:1c:a6:b1:e9:4b:60:f9:96:d4:bd:a5:68:c5:81:b6:4d:
         4d:02:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:14 2025 by rpki-client