Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File:                     tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier:          qvm4F8hr6zluHAmAxNTL48rf8TPf+YlDlnsa2rZ/WVA=
Subject key identifier:   47:82:27:FB:7B:BE:0E:FB:C3:97:E7:E7:DC:3D:3E:15:11:64:E7:30
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer:       /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial:       01988166F7F6EDC75F25F81DA4B24BDD64F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 22:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:05 +0000
Files and hashes:         1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
                          2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: jpEBJFbupqSLFbxp2cKzhXORqEctATDMr/R5trH6yQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:f7:f6:ed:c7:5f:25:f8:1d:a4:b2:4b:dd:64:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
        Validity
            Not Before: Aug  6 22:01:05 2025 GMT
            Not After : Aug  7 22:01:05 2025 GMT
        Subject: CN=478227fb7bbe0efbc397e7e7dc3d3e151164e730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6c:c1:a9:c9:46:23:78:23:9d:f3:06:ce:7e:
                    f3:55:5a:52:96:74:82:d3:13:5f:4f:7f:39:5b:90:
                    90:63:b5:0e:63:c4:6c:01:e1:c3:34:1e:47:b7:9b:
                    ff:96:73:50:b1:00:52:fb:0a:d7:46:b6:58:46:9b:
                    87:44:d8:2f:e9:6f:55:23:60:07:1f:82:93:22:44:
                    6d:d7:eb:b3:26:f9:a0:c6:75:2b:aa:27:ab:a3:21:
                    9b:9f:f0:31:10:b9:f8:c4:20:1e:42:7d:18:4d:30:
                    b7:24:d1:c6:c3:d3:c6:82:42:7f:32:6d:39:c8:c2:
                    06:c2:45:06:b0:12:7b:27:a8:9d:60:fe:7a:04:df:
                    9a:37:b1:9f:fa:3c:d3:32:b6:21:f8:3f:59:15:6c:
                    2b:f0:d6:75:15:fe:34:82:52:18:ac:64:48:0e:f2:
                    f9:27:aa:c0:8e:23:1b:c3:e4:c5:7b:3e:21:3a:56:
                    4b:fd:9b:3f:03:08:55:87:0e:f7:4a:ac:06:25:21:
                    5b:78:15:b2:ae:ce:89:38:c2:7e:96:16:7b:29:9a:
                    2a:74:76:de:7a:c1:78:c0:3e:27:59:ca:f6:dd:43:
                    42:36:68:a6:3c:3d:fd:d3:09:58:88:f1:e1:1b:cb:
                    41:93:f6:e8:84:34:2d:87:51:48:6a:90:c7:fd:40:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:27:FB:7B:BE:0E:FB:C3:97:E7:E7:DC:3D:3E:15:11:64:E7:30
            X509v3 Authority Key Identifier:
                keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:fa:86:dc:cb:0d:49:07:67:7d:7d:7a:07:e4:b8:2d:47:a2:
         fb:d3:d0:62:7f:ed:33:83:4a:b0:c2:e1:c3:d8:bd:06:6e:c2:
         cc:b1:dc:05:d6:3d:7b:8a:8a:37:fc:a9:27:fb:94:21:a8:89:
         0b:c7:54:2b:ef:e8:e9:fd:35:b7:7e:9d:fa:62:20:a4:03:52:
         62:3f:d6:71:6e:eb:fc:32:ae:16:1e:5c:55:49:80:b9:1e:63:
         72:3e:b1:f0:bd:93:da:a1:e4:a4:7e:f8:d0:8a:7d:10:25:62:
         fd:ea:2d:86:d2:39:a1:e2:12:e2:29:a6:23:2a:f2:e2:a1:c1:
         d3:d6:58:f2:5f:32:3c:26:5d:d2:89:b6:0a:43:85:9d:53:b7:
         7f:be:51:83:9a:0d:7d:cb:4a:42:70:1c:ab:4d:77:0c:a6:19:
         bd:9c:1f:7b:1c:4b:b9:ed:ab:26:9d:e7:12:37:56:02:bd:f9:
         f2:46:0c:e9:63:fa:e7:ce:22:6f:41:7d:52:a5:dc:9e:68:88:
         92:17:2c:ca:22:e3:19:df:81:ab:49:8a:6f:7d:a0:45:a2:1f:
         5d:95:30:2e:52:5a:2c:22:0b:48:91:b9:e2:91:05:2b:30:48:
         57:a6:50:8f:2c:e9:62:e5:d0:bd:9f:d4:e2:46:93:b2:b5:12:
         9f:b7:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:43 2025 by rpki-client