Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File:                     k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier:          rXIJdGcx3KzRs1j+ToXwErDm4lKeymI66hhGYG7FLDc=
Subject key identifier:   BE:D1:43:E5:9F:53:AA:17:9E:AC:82:71:70:BC:2E:39:00:4A:D3:C4
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer:       /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial:       01988355618F59363771C5B72A6C1A847498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number:          161C
Signing time:             Thu 07 Aug 2025 07:01:07 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:07 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:07 +0000
Files and hashes:         1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: +xu4YiCWqmGNHgwzhkblT2E8LUuhspyTNmUeUnt+jx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:55:61:8f:59:36:37:71:c5:b7:2a:6c:1a:84:74:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
        Validity
            Not Before: Aug  7 07:01:07 2025 GMT
            Not After : Aug  8 07:01:07 2025 GMT
        Subject: CN=bed143e59f53aa179eac827170bc2e39004ad3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:6f:8c:6d:56:0e:83:96:da:5b:c7:4c:c0:
                    2b:c3:7c:55:95:c3:d4:54:5a:f5:94:10:05:cb:97:
                    06:1c:20:1a:bf:a5:4f:e7:21:c2:64:71:bd:70:70:
                    2b:4c:99:16:42:76:eb:79:57:09:0e:4e:c0:cf:c1:
                    6d:37:98:4f:cc:3f:e3:9f:ec:64:80:c6:1d:ad:98:
                    ef:e0:16:ce:68:da:32:9b:69:73:8c:5e:81:f6:ff:
                    3d:5e:25:ad:91:89:b4:fe:08:9f:8b:1e:a5:3b:52:
                    16:23:e6:de:8f:4e:62:b4:22:5d:8a:cb:b9:36:ce:
                    d0:76:99:37:02:a7:87:54:ca:7b:1e:cc:ff:fa:6f:
                    af:b0:4d:d3:4a:bf:af:59:ee:ed:a0:2a:5d:47:c6:
                    1d:01:1d:71:83:35:51:79:81:9c:40:49:97:88:0b:
                    23:7d:3e:37:22:c8:04:44:34:db:af:6e:d1:77:b5:
                    a1:9d:be:4f:a6:34:72:fc:60:85:11:70:51:68:f1:
                    da:2a:c3:b4:fa:bf:1a:c6:00:0b:68:5a:45:f2:c6:
                    9c:49:f8:76:52:7f:3b:70:1b:53:d1:d2:47:59:91:
                    f1:e3:6d:c7:c5:4f:87:07:40:92:1b:dd:f3:2e:8a:
                    70:61:42:2f:a7:36:dc:5b:0c:67:74:b3:a3:c8:07:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:43:E5:9F:53:AA:17:9E:AC:82:71:70:BC:2E:39:00:4A:D3:C4
            X509v3 Authority Key Identifier:
                keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:15:2f:d9:cf:16:82:be:ef:6e:48:66:64:8e:68:3c:33:f0:
         04:e4:59:8e:23:43:76:3c:c4:7c:fb:5e:e3:e6:7b:dd:8d:a5:
         17:e4:49:dd:e5:fe:9c:da:fb:1c:b8:52:c7:f0:9d:f3:e3:a6:
         2b:f5:5c:43:36:29:09:70:ef:5a:f4:fd:0e:c6:6d:bc:ef:8a:
         02:4f:83:14:3b:22:e1:e9:9f:6d:d1:93:5f:56:6e:53:1e:36:
         d9:dd:06:ee:d6:74:2e:93:a1:8c:d2:d4:25:91:47:e1:dd:30:
         67:5d:f9:73:bd:8f:02:c0:98:22:60:b4:40:91:1a:22:a2:fd:
         81:b3:b5:f7:f3:83:48:0d:1e:fc:1a:19:96:9a:bc:4b:ca:92:
         a9:7a:c4:45:d5:31:f0:56:b2:34:bb:47:e9:9a:d7:31:45:39:
         3c:63:32:96:30:e5:31:9a:02:87:aa:20:34:bd:2b:fe:e8:08:
         68:3a:8a:34:05:98:1a:66:39:ec:d3:64:ea:1d:e7:6e:c9:8a:
         75:55:87:a6:e4:da:66:30:62:32:e7:9a:db:e3:1a:56:9e:b7:
         8c:b3:f7:f3:b0:c7:b8:c5:31:50:11:db:ec:7d:98:d0:dd:12:
         cf:f1:9b:e9:55:47:58:e3:22:5d:00:13:84:ae:b5:cd:1b:5f:
         d0:60:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:41 2025 by rpki-client