Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File:                     bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier:          7sEjrl5ZVGB/K2y1ylnFUm2sn4mmkMAj0LkTAlTrVVQ=
Subject key identifier:   76:8C:22:5F:25:84:47:E9:96:6C:9D:9F:C3:AD:5F:53:A7:51:7F:F5
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer:       /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial:       019872CF27E454115367843C37FD7F0F3AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 02:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:35 +0000
Files and hashes:         1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: 72ZQvCiMwM6t2Fl68j3Ld4AdOyd6NEVFtwczXv2bdho=)
                          2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:27:e4:54:11:53:67:84:3c:37:fd:7f:0f:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
        Validity
            Not Before: Aug  4 02:00:35 2025 GMT
            Not After : Aug  5 02:00:35 2025 GMT
        Subject: CN=768c225f258447e9966c9d9fc3ad5f53a7517ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:60:db:24:c1:29:52:35:67:ac:1c:19:f8:
                    9a:f4:5e:f8:6f:62:f7:c5:65:a3:fb:d5:fd:fc:27:
                    68:1a:54:d3:f3:c8:07:1f:97:94:08:23:6a:e4:d2:
                    88:43:5a:75:ed:76:91:fc:95:50:07:c4:2e:05:21:
                    f6:ad:4f:b3:57:a6:b3:a0:ac:50:0f:81:ec:82:76:
                    df:d2:8c:86:5a:56:8d:ea:32:d2:ac:5f:5d:6d:92:
                    f8:b7:0a:c7:36:76:35:b2:eb:7a:c5:ba:e0:83:ed:
                    46:8d:d0:a8:c1:35:0c:c3:57:0e:f0:04:1f:31:32:
                    58:ba:a5:fa:8e:62:08:7b:44:c4:4e:df:d7:3d:76:
                    60:58:aa:b1:12:ad:cb:f7:5b:1b:2e:41:dc:6a:b4:
                    cf:ab:fe:f3:8c:7d:bd:8f:db:c7:3c:d8:c2:1b:2f:
                    4a:95:b4:56:ae:e0:0e:e5:33:4e:28:ab:8e:81:e6:
                    63:90:05:4c:b4:a5:f5:61:6b:a4:40:9c:f2:0c:5c:
                    d1:46:f7:f6:e1:ba:7a:bf:d1:64:8a:ab:4e:34:f7:
                    92:7c:66:bc:27:6f:cc:5c:c1:98:ca:06:e0:4f:03:
                    7d:25:48:fb:fc:2c:26:ee:38:53:2c:bb:f3:cf:61:
                    04:6a:0b:18:00:33:76:70:4d:48:bb:ba:ba:33:04:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:22:5F:25:84:47:E9:96:6C:9D:9F:C3:AD:5F:53:A7:51:7F:F5
            X509v3 Authority Key Identifier:
                keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:cf:ca:6b:34:91:67:c9:4c:03:98:53:08:ca:7a:09:1b:
         a4:90:a1:05:1a:5c:e8:2e:d7:62:7e:cf:29:ff:c9:ba:c3:6e:
         92:d9:6e:55:ec:68:f4:7f:03:4f:fa:73:f3:6b:05:f3:99:84:
         d4:df:e3:3c:95:bb:c8:a9:4e:1b:c5:43:18:86:b6:32:10:62:
         0f:44:7d:6a:cb:5c:3f:d3:bb:f6:93:f7:ed:4a:b6:01:80:92:
         2a:70:6a:1f:bb:fc:b8:ac:1e:c2:e1:db:e9:de:d3:d2:c1:c9:
         56:b0:12:14:a8:20:d9:5b:90:6b:ea:a7:3f:16:d2:26:78:99:
         f4:37:1b:6a:97:65:40:f4:6d:72:04:74:c8:3d:f7:0a:10:26:
         53:0c:2f:2a:ed:36:89:6d:2f:e1:28:77:4a:4d:0d:19:23:25:
         e1:9c:71:de:9f:a7:ff:4c:3c:e3:31:76:67:b5:08:27:8f:04:
         25:9c:45:e3:59:4b:38:66:3f:d2:5a:3f:8d:81:b2:43:e7:e7:
         66:de:c5:7c:55:6a:3f:b2:d1:6e:37:9b:97:b1:58:88:c8:99:
         28:fa:f5:df:73:6f:52:48:0a:ab:3d:fe:19:35:ca:2a:ee:05:
         38:41:87:d0:dd:83:77:0b:c0:fd:23:b4:74:3c:15:d5:c3:45:
         0f:1e:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:10 2025 by rpki-client