Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          6Ixr27hq5XSTeAgL+foSD/mYeTY02YJ1KchXodl+ORw=
Subject key identifier:   CE:79:C7:29:74:08:96:90:35:7D:E6:41:37:54:0F:84:77:22:8F:86
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       01987418E40CF8301E806416122784C9254E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 08:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:44 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: 7gkDHVm1IfC7uJjjjrs/1ZhAT6KN+5SoAgXj4wpMRiw=)
                          2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:e4:0c:f8:30:1e:80:64:16:12:27:84:c9:25:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Aug  4 08:00:44 2025 GMT
            Not After : Aug  5 08:00:44 2025 GMT
        Subject: CN=ce79c72974089690357de64137540f8477228f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:aa:56:94:7a:d8:b9:78:18:f8:73:62:dc:
                    13:c0:10:5b:12:96:56:46:df:03:c3:f8:2a:37:b2:
                    9b:3e:4e:ac:26:5e:10:84:39:a4:9e:77:ea:e6:58:
                    0c:d9:59:5d:ff:50:92:2c:ef:19:a1:96:be:6c:b0:
                    f1:99:50:33:9b:67:b0:b7:c7:0e:99:8c:5d:8d:cb:
                    21:10:28:9d:ce:db:33:13:5a:47:c2:5f:23:f6:81:
                    fb:fa:cd:55:9b:bf:9c:ee:61:fe:f2:71:3b:06:72:
                    a5:af:97:a5:26:fe:fe:cf:8d:aa:98:e7:e8:29:78:
                    53:fe:56:63:fd:b5:0b:b8:33:7b:b4:82:b0:6d:1e:
                    b9:f7:78:60:fb:93:6b:17:13:f6:a3:a2:bd:c5:1f:
                    3b:5a:2c:de:f4:49:0d:54:ad:8a:53:2d:f7:97:18:
                    26:e4:df:dc:c8:a5:2b:57:f0:3e:b5:87:b8:c1:7d:
                    74:d2:2d:c6:38:b9:24:b8:0e:cb:d7:b7:b5:e4:f9:
                    5d:67:b1:a6:af:96:17:e5:e4:71:cf:3e:ab:6a:d3:
                    9b:a6:4f:62:8b:0b:ab:90:b5:78:d7:7c:39:59:fc:
                    82:7d:00:e3:a3:84:97:b4:52:62:49:6f:80:a0:17:
                    11:39:23:73:63:89:94:52:3c:b5:fb:e9:46:a0:72:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:C7:29:74:08:96:90:35:7D:E6:41:37:54:0F:84:77:22:8F:86
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:f8:c2:4f:fe:8d:56:c1:68:7b:85:f8:f4:e4:e2:78:ae:
         a8:66:63:1f:ba:b8:f2:9b:71:be:d5:d7:6b:ab:47:13:df:89:
         a7:bc:77:40:5f:bb:79:55:0a:29:33:c0:e8:0c:67:1d:26:9b:
         48:10:4e:48:50:a1:bc:5a:b5:d1:14:ed:eb:a4:0d:e0:f8:9f:
         66:64:79:59:69:61:4f:2c:da:fb:b5:21:9e:5a:a7:61:a7:1a:
         36:3b:68:69:ca:8b:15:52:98:7d:d9:c2:af:cb:b7:90:18:95:
         23:18:b1:f7:4d:d9:bd:df:9f:ef:15:be:2b:fc:72:9a:c6:ba:
         ee:db:91:f9:a8:72:fc:e3:3c:ed:ae:9d:85:54:c8:b1:20:da:
         d7:7c:a7:69:ad:a6:0d:77:76:b7:ec:49:3f:3b:0e:21:1c:d3:
         d2:51:08:f0:28:bd:0b:2e:fb:f2:ef:f0:cc:9d:e5:f3:3e:7a:
         9d:91:08:7e:19:5b:1b:66:e8:2c:78:b6:f8:b7:6d:54:85:32:
         c7:70:9f:70:b6:9b:81:b4:ec:c8:db:b2:e4:f4:f2:aa:ae:35:
         13:4c:9b:03:b7:17:f5:b0:b9:ac:ac:4a:f4:87:7f:73:4e:5d:
         a1:b4:ff:cd:58:f4:1f:36:f6:ea:22:73:6b:d8:cc:34:dc:73:
         5c:ef:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:21 2025 by rpki-client