Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File:                     m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier:          LKQ0Qv0txeeY6ClkKW22sMBIEZuPCiVHrMgkvidrYGI=
Subject key identifier:   E4:79:C0:91:65:A8:04:7C:65:B2:D2:37:96:7F:7C:24:BF:C5:B9:4D
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer:       /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial:       019881D56BC9B4D83BC886C3515039176550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 00:01:44 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:44 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:44 +0000
Files and hashes:         1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: sPlrGGtZXzPP+l+bzLHPq0qR6lo/07xEds1BRcqI6ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:6b:c9:b4:d8:3b:c8:86:c3:51:50:39:17:65:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
        Validity
            Not Before: Aug  7 00:01:44 2025 GMT
            Not After : Aug  8 00:01:44 2025 GMT
        Subject: CN=e479c09165a8047c65b2d237967f7c24bfc5b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6c:14:26:d2:ec:06:81:0f:08:08:fa:84:3a:
                    26:4c:10:78:99:53:55:3e:54:5f:38:ee:f3:85:9e:
                    69:91:3d:b9:fb:84:33:b0:d0:80:fb:a2:5e:84:01:
                    24:e1:35:58:84:a7:22:6d:87:ec:7a:0a:e6:09:e9:
                    51:14:f1:98:30:80:e1:e6:52:62:97:47:8c:4e:54:
                    e1:bb:cc:f6:92:2c:66:b8:84:25:e2:31:1a:2f:a3:
                    f7:ee:3d:df:f5:98:39:af:60:0f:c4:57:95:af:17:
                    0f:3f:68:11:f9:54:6d:ba:63:8e:00:e7:f6:64:43:
                    95:5e:87:b8:e1:e0:2c:b4:fa:d0:f8:35:5f:0d:84:
                    5f:23:ee:c2:b4:f1:25:6b:e1:7f:e8:12:d6:3a:a3:
                    f5:02:4f:de:f3:d4:80:32:f2:1f:8c:43:3a:99:1f:
                    b5:08:80:c0:44:34:2c:0f:82:dc:ba:07:00:7d:66:
                    12:26:bd:78:e1:4c:29:e9:81:8c:f6:41:d4:d5:8f:
                    7e:09:53:64:89:e6:dc:99:24:2f:68:ed:2f:aa:4e:
                    ac:1c:13:fc:da:bc:06:b3:58:81:1d:2c:fb:0e:f6:
                    91:6f:69:50:38:c2:4a:49:38:8f:dd:73:09:ef:eb:
                    0a:54:3a:82:98:07:7d:ae:cd:6a:db:78:c0:19:7f:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:C0:91:65:A8:04:7C:65:B2:D2:37:96:7F:7C:24:BF:C5:B9:4D
            X509v3 Authority Key Identifier:
                keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:c6:17:47:9e:df:0f:d2:aa:a6:6d:00:c8:28:c2:f1:9a:
         b7:6f:1b:1a:c2:40:99:29:11:f4:ae:37:55:b3:f6:84:bc:de:
         0d:8b:0a:c0:76:d1:5f:c2:bc:1f:e7:0f:22:ea:0f:00:6c:07:
         02:d8:b2:3a:6f:2d:5c:de:f5:19:e9:17:c2:e7:93:0e:25:66:
         43:93:8b:1a:d7:47:6e:f6:3d:c2:a0:2c:c6:08:c3:c6:aa:f5:
         7a:60:49:37:2c:b3:66:59:44:6a:64:16:eb:5e:3a:56:19:e8:
         a1:0f:e1:a5:e3:32:f0:c3:06:5a:53:83:4b:8e:5c:4e:f8:36:
         f5:09:d5:db:09:35:1a:4f:53:67:46:89:04:05:af:a1:8b:81:
         5c:f4:97:cc:31:7a:4d:f6:04:ff:32:e0:62:83:ce:e5:eb:34:
         71:6d:7d:0e:ce:fb:3c:f0:a7:f3:85:ab:0f:54:f7:1f:c3:76:
         98:fd:aa:9f:4a:24:6f:be:71:de:fa:55:bc:b1:31:70:b4:0c:
         b5:b6:6a:ab:4b:29:7c:40:5f:20:af:1e:a5:56:13:04:14:51:
         41:81:26:93:dc:ad:14:ad:78:b0:b6:28:e5:4d:3e:89:2c:66:
         03:ed:64:9c:da:fe:c5:49:0e:e8:15:8d:11:e3:5c:8c:4a:76:
         fc:f4:e0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:47 2025 by rpki-client