Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          YPNrsZWeGyVI+j/cn0X5Kqc9vx8k8sh3b2andntlpZo=
Subject key identifier:   09:7B:3A:36:B5:AC:EA:F6:23:5C:6B:CB:DD:E7:55:9B:88:4F:4A:59
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       019880C1E6CD45EA2803CD21A623926FEB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 19:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:47 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: HsQ4tCuzBSGi1TtrQYZs0kbosKWhfFq/xcTQconbwo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:e6:cd:45:ea:28:03:cd:21:a6:23:92:6f:eb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Aug  6 19:00:47 2025 GMT
            Not After : Aug  7 19:00:47 2025 GMT
        Subject: CN=097b3a36b5aceaf6235c6bcbdde7559b884f4a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:18:8c:68:e1:69:35:f9:40:83:08:d0:3e:
                    0d:74:ad:91:ef:c7:38:04:59:2f:d9:49:91:98:86:
                    e3:6f:5b:65:8b:cc:58:5f:77:1c:f4:7b:ae:d9:ef:
                    69:42:01:32:d5:74:9b:46:c4:f4:f7:9f:91:26:dd:
                    6a:c2:f5:8d:de:95:e8:e7:8a:40:05:3a:9b:a7:d0:
                    7c:e7:31:bf:fe:e0:e3:2c:6c:63:47:62:7b:4c:ed:
                    4d:e1:b5:e1:98:4c:03:c9:6b:77:c9:a7:c7:58:a3:
                    a5:4e:f7:39:d8:90:a6:97:fa:79:38:dd:68:0e:72:
                    6b:67:ae:6c:b8:89:21:94:95:15:f8:54:fa:e5:9c:
                    4c:c1:12:ea:f2:5a:81:73:c3:a2:ea:c7:b6:6a:00:
                    18:9b:51:20:1a:ae:e9:bc:7e:83:cc:74:b2:c9:9b:
                    8e:b3:b7:46:4e:d4:84:49:42:13:05:0d:c9:da:a8:
                    99:4b:5b:82:a7:d4:ae:61:99:c9:62:39:4c:20:90:
                    d2:57:dc:1e:56:81:4e:04:43:56:b6:29:de:01:d4:
                    c3:0e:a0:b8:e1:7b:5b:7d:99:15:82:c3:90:52:ba:
                    d2:16:58:b1:e0:3f:a0:47:35:5e:d2:5c:82:46:4b:
                    ea:3d:b3:ae:85:8e:0c:59:ff:78:a1:17:60:6d:02:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:3A:36:B5:AC:EA:F6:23:5C:6B:CB:DD:E7:55:9B:88:4F:4A:59
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:82:d9:43:b5:35:44:c2:6c:5b:f2:67:f7:2c:30:28:97:44:
         48:6e:11:6a:c2:1e:85:f9:4b:40:4e:5a:04:97:89:08:74:f0:
         20:c8:c2:68:77:ce:f8:b2:b3:1d:33:84:54:95:ba:9e:1a:c0:
         cf:73:ef:d5:36:de:6e:46:02:e0:3d:0f:ea:9a:9d:b6:11:8c:
         55:a0:50:f8:22:92:24:06:b6:e5:e8:21:7a:17:f5:cb:06:b3:
         0c:33:2c:91:33:f4:ae:bf:04:f8:74:1d:0a:3e:70:e4:c9:11:
         df:a6:71:36:90:fb:27:24:30:a1:7c:48:27:2d:0a:d1:e3:06:
         4c:e3:e8:29:dd:f8:8d:8e:da:0d:71:81:c5:15:38:6b:6e:61:
         bc:b5:d9:4d:e2:07:7d:78:84:82:f3:8e:88:7d:ba:29:60:20:
         b1:af:b0:92:fa:05:b4:52:92:a2:ca:09:ef:79:59:ee:4d:2b:
         b1:f6:b6:31:5e:5f:c5:27:da:79:9a:23:26:44:d4:eb:32:72:
         19:e6:79:85:ed:8b:fb:01:85:3a:6b:64:ca:e0:b3:8e:4a:df:
         6e:4c:18:37:5d:72:0c:9c:57:e8:90:fb:c1:b2:61:24:27:17:
         b5:7d:6a:6d:22:bc:51:49:70:bd:d4:2f:b7:f6:c2:54:32:71:
         53:08:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:05 2025 by rpki-client