Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File:                     Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier:          A+W2PFTGGt8o0UJr8ruQQr5Hr3UaT2W/96OIGCAoV34=
Subject key identifier:   05:B2:7B:B2:17:6B:A4:90:95:98:89:5B:AC:D8:48:35:0E:14:DE:D3
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer:       /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial:       019872D0032C59CB23B1654340DFAF4F066B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number:          161F
Signing time:             Mon 04 Aug 2025 02:01:31 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:31 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:31 +0000
Files and hashes:         1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: P1ZOm9bnQz+3ZF/75mH8O6fGfLl0D2QBgxwu+DXh3DA=)
                          2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:03:2c:59:cb:23:b1:65:43:40:df:af:4f:06:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
        Validity
            Not Before: Aug  4 02:01:31 2025 GMT
            Not After : Aug  5 02:01:31 2025 GMT
        Subject: CN=05b27bb2176ba4909598895bacd848350e14ded3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:20:b1:90:52:03:1d:9c:10:dc:dc:a3:61:
                    aa:be:1f:40:d1:ff:46:18:d0:17:ce:63:22:ed:4e:
                    2b:0e:93:fe:13:18:fc:71:40:18:f5:13:67:03:4d:
                    4d:61:07:b1:2d:d9:27:00:37:be:81:43:c8:dc:9a:
                    e3:69:ce:00:98:16:dd:70:b9:83:e1:e5:a2:12:32:
                    89:00:ec:f4:0e:b5:1e:f3:38:c0:3f:bf:89:2c:e2:
                    96:2a:dc:99:bd:81:97:39:ea:00:c8:c3:b3:35:f8:
                    28:22:b7:b4:e8:0b:a2:d1:38:86:6d:bc:b1:c8:29:
                    55:c6:69:26:6c:69:7c:de:ca:08:ac:f6:b1:3f:80:
                    fd:f4:4b:d5:00:55:99:81:56:dc:95:c1:2a:1a:35:
                    0f:7d:cf:01:d5:f5:9f:95:27:b7:ab:d4:85:f0:f8:
                    dc:e4:db:f7:59:e2:87:c7:53:0a:dd:71:cf:06:d1:
                    49:3f:bf:39:85:21:4f:e4:5e:72:d6:55:47:e1:85:
                    84:72:27:5e:7e:84:8c:1c:e1:e7:9f:54:5c:9b:f4:
                    d7:e6:04:2b:82:78:33:00:df:b3:53:87:38:c7:5c:
                    26:b1:7b:d7:bf:ca:7b:ce:6e:86:2d:a7:4d:c2:2d:
                    f1:47:dd:bf:e2:48:e6:04:ff:ff:0c:f1:79:53:d9:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B2:7B:B2:17:6B:A4:90:95:98:89:5B:AC:D8:48:35:0E:14:DE:D3
            X509v3 Authority Key Identifier:
                keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:db:20:78:76:8b:1c:3e:87:13:86:3b:6b:87:89:c3:56:
         29:f1:61:c7:22:a5:a6:cf:f1:bb:6b:dd:a8:2d:1f:f8:44:55:
         82:a1:fd:bd:9c:28:d6:8b:72:58:aa:4d:10:a3:e0:1f:03:f9:
         bf:1c:6d:03:3a:1f:20:3f:ee:6f:6b:77:03:93:1c:8b:1b:d0:
         c5:a8:ea:ed:c7:e6:e3:36:fb:bd:9e:5a:41:f0:65:6d:f3:d7:
         9b:f2:d5:d2:ad:b2:95:b3:93:f7:66:f0:13:69:d4:fa:11:37:
         83:ea:27:65:16:5d:c7:a9:05:47:61:3c:d5:ac:c7:cd:87:c2:
         72:9e:d6:ed:e0:cf:fc:d5:0d:7f:c3:94:63:ff:79:69:4f:a1:
         db:25:f6:1c:19:7e:5c:85:c7:b4:b7:fb:37:72:30:6d:8b:42:
         15:ee:d6:1e:cc:67:5e:fe:29:7f:90:cd:d0:12:c6:a0:5a:8d:
         0b:66:71:42:99:1c:a9:3f:12:a2:6b:ed:8b:fd:21:44:3b:95:
         02:4a:2c:55:f6:69:f0:48:0b:83:20:23:83:10:d1:e6:43:19:
         de:04:41:fb:85:3c:ff:fb:7b:c3:e3:48:64:2c:42:cd:09:b8:
         a2:9d:8b:ad:f4:d1:fb:a4:79:c2:22:99:9e:f8:4b:70:dc:c6:
         dc:e6:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:50 2025 by rpki-client