Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File:                     sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier:          WvtakQaZ9uDHYc80ANhgp3gbYCXfdDvOczptGSIBkFU=
Subject key identifier:   6D:5D:36:01:19:4B:E5:A8:91:8B:4E:20:5D:FE:11:36:13:95:3E:F4
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer:       /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial:       019879E3DCC484C50E143D407CD6EBDF58C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 11:00:32 +0000
Manifest this update:     Tue 05 Aug 2025 11:00:32 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:32 +0000
Files and hashes:         1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=)
                          2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: SFPKIr45OWCQ9evKWQyCiuuKYytr6+GVMfRkg5IWrhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e3:dc:c4:84:c5:0e:14:3d:40:7c:d6:eb:df:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
        Validity
            Not Before: Aug  5 11:00:32 2025 GMT
            Not After : Aug  6 11:00:32 2025 GMT
        Subject: CN=6d5d3601194be5a8918b4e205dfe113613953ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:48:e4:9b:de:5f:3e:a8:b6:2b:25:29:52:
                    d4:14:2e:1d:6b:33:2f:97:9b:e1:cd:0b:9b:5d:36:
                    aa:ed:e3:99:ab:cb:a7:c5:4d:dc:4c:a6:e3:cc:6a:
                    14:78:7f:bd:be:00:e9:4c:d8:cd:fb:c1:c3:8a:39:
                    ed:5a:4b:ad:b6:95:c2:bf:f5:35:55:82:46:4c:95:
                    cf:0b:78:4a:b1:d6:c0:37:8b:17:c6:35:12:a5:fa:
                    bd:78:cb:11:eb:76:05:70:42:40:52:a1:e3:b0:18:
                    5b:eb:7f:d5:f1:3c:eb:47:52:ae:60:c2:07:cf:67:
                    d3:76:88:78:41:0a:11:ba:86:04:45:5e:f0:5a:5d:
                    7e:75:94:70:93:b2:ae:77:6e:09:b2:c9:e0:aa:8c:
                    fe:1f:b6:58:2b:ac:db:02:74:91:a5:19:1a:33:38:
                    35:c9:aa:43:55:47:54:83:ce:67:f2:02:4f:3e:76:
                    fd:d8:45:6a:a7:b9:db:17:cb:ac:2a:93:05:df:21:
                    8b:d7:4d:de:fb:68:88:c2:4e:1a:7b:ad:2e:92:cb:
                    6c:69:73:cb:26:83:5e:27:6f:19:d6:df:9d:67:4c:
                    75:fc:03:74:82:72:5c:28:6f:29:1e:24:bc:48:10:
                    a6:7f:07:b2:81:58:d3:30:5b:80:8a:ac:68:45:2c:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:36:01:19:4B:E5:A8:91:8B:4E:20:5D:FE:11:36:13:95:3E:F4
            X509v3 Authority Key Identifier:
                keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:02:95:ea:f2:10:e4:38:8e:8d:a3:90:5c:92:b1:96:8f:
         f9:42:4e:56:ab:0b:81:8f:97:6f:a4:5f:35:c6:bc:97:77:94:
         b9:09:c7:52:27:9f:92:c5:6d:ce:67:05:a7:10:5a:bd:c1:ee:
         f2:b0:1c:8e:dc:c7:76:b8:29:0d:33:97:b2:83:01:cf:e9:c7:
         d9:1b:cf:48:30:f1:7f:19:eb:55:80:4d:86:5d:0a:19:27:3d:
         3a:14:d3:3b:3c:f6:82:9a:ae:45:78:2f:ef:38:e8:d3:7e:3f:
         d7:09:e6:d0:52:e9:ff:7b:17:93:52:d6:2a:15:25:90:9a:22:
         29:83:9e:41:d3:f6:bf:bf:6b:0a:74:0c:b4:6e:9c:8b:3a:ae:
         d7:e9:dd:93:48:0c:1a:11:d1:7d:4d:91:f8:a6:b1:17:a6:3d:
         bb:79:bc:22:59:4d:99:da:01:09:72:a7:05:75:6a:d1:6c:e7:
         fa:80:35:ce:b6:c5:14:0a:d8:64:bf:28:79:d2:03:e3:f1:5a:
         dd:2c:e6:04:85:a0:fe:44:5b:71:b8:6b:cd:db:87:61:5c:5d:
         b8:37:0b:fc:c6:50:fb:15:2b:80:f7:3d:9d:e1:79:90:cc:cd:
         3e:45:a4:49:ac:e3:e5:bf:a4:10:c6:78:86:c3:2b:9b:38:d8:
         72:40:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:12 2025 by rpki-client