Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File:                     x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier:          pbsh08tY+buKTtRvjJSz8Fya0GaYKlSyknbSgNx4dtI=
Subject key identifier:   04:94:B9:BA:3C:5E:54:84:DF:80:3C:4A:BE:31:9D:03:22:6F:55:30
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer:       /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial:       019882434BAF9EDE3492A2267D47FB454F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number:          161A
Signing time:             Thu 07 Aug 2025 02:01:44 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:44 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:44 +0000
Files and hashes:         1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: 129Rd8JoWHVkL6+dHCsRzqrD30/SuVbAePcCRYkLr10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:43:4b:af:9e:de:34:92:a2:26:7d:47:fb:45:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
        Validity
            Not Before: Aug  7 02:01:44 2025 GMT
            Not After : Aug  8 02:01:44 2025 GMT
        Subject: CN=0494b9ba3c5e5484df803c4abe319d03226f5530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:f2:83:39:93:c3:f9:e6:2d:05:57:ea:bc:
                    55:fc:90:9e:e2:5b:66:d6:28:5d:42:e3:55:4b:20:
                    98:2a:55:4b:d5:14:7d:6b:8f:8d:f1:7d:ee:bf:52:
                    2c:4e:a6:32:3b:cb:79:f3:9d:4c:94:b7:ce:3a:71:
                    3c:c1:f5:2a:1e:32:e2:69:b0:29:f0:61:ec:3e:76:
                    77:b3:5e:45:aa:f6:ee:18:60:11:90:df:d1:4a:18:
                    50:3d:b5:52:3c:7e:f9:51:a0:3c:3b:ca:84:d4:fc:
                    11:2c:13:e0:18:8b:0c:2f:b4:21:a5:bf:8f:58:89:
                    e4:e3:f5:c9:0a:98:a8:1b:62:35:83:ac:46:a6:18:
                    b1:c8:15:6a:00:54:5f:b6:2f:63:8e:27:cf:87:be:
                    7f:8b:ba:37:d2:60:0d:60:9b:76:04:13:9d:a0:b3:
                    54:b4:4e:52:10:aa:7c:8d:54:77:c2:fb:dd:ef:f4:
                    31:f9:65:20:56:ea:b3:f0:d1:a4:85:a5:c6:cf:94:
                    63:38:c0:af:3d:ad:1e:b1:3a:eb:95:ad:4c:c3:3d:
                    2e:f2:45:30:b2:99:22:dc:02:53:41:3c:de:93:73:
                    bc:6e:c3:a3:80:9e:1d:4a:e0:83:57:42:64:5b:0e:
                    8d:30:78:4c:2d:16:bc:29:07:06:d1:b7:15:cc:6d:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:94:B9:BA:3C:5E:54:84:DF:80:3C:4A:BE:31:9D:03:22:6F:55:30
            X509v3 Authority Key Identifier:
                keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:83:cf:48:54:55:80:0e:76:65:28:d7:dd:da:bc:1e:4f:
         08:73:93:ea:98:eb:c6:48:11:4e:5e:5f:4e:19:f2:da:5b:47:
         5b:3e:87:2e:f0:00:d7:7b:b6:74:32:23:b4:db:37:23:b3:a3:
         3d:7c:db:5b:ee:e3:c3:de:fb:ba:2e:1e:c3:b5:01:ca:d3:05:
         83:09:ba:79:70:49:10:6e:76:c3:a5:c9:73:91:a6:e6:08:fd:
         b3:18:44:63:43:66:9f:4b:e6:53:61:35:c9:43:56:dd:03:c1:
         5e:b7:83:37:fc:34:f0:41:a9:3c:bd:08:78:48:f3:3a:9b:8f:
         63:9d:ce:ed:0c:3c:b4:2a:79:c1:df:f6:37:6c:b8:9a:76:34:
         cd:a0:4a:70:5b:22:8d:e3:36:ba:76:10:24:02:ac:84:12:82:
         1a:65:69:25:10:3a:01:f5:25:a2:17:30:da:3d:4d:e4:23:ae:
         18:44:21:1e:11:13:fe:8b:98:1a:a0:95:54:ae:ed:26:51:45:
         5c:7a:2e:6b:cb:0c:2c:a6:26:da:cb:1a:8b:cf:50:71:95:75:
         ad:1b:72:c3:3b:07:e5:ba:a1:49:1b:7b:3c:84:60:24:2b:d9:
         ab:30:c8:4e:c0:32:21:a1:24:c1:60:4b:97:a2:11:3e:0f:fb:
         0e:11:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQ0uvnt40kqImfUf7RU8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4
NGM0MWEwHhcNMjUwODA3MDIwMTQ0WhcNMjUwODA4MDIwMTQ0WjAzMTEwLwYDVQQD
EygwNDk0YjliYTNjNWU1NDg0ZGY4MDNjNGFiZTMxOWQwMzIyNmY1NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkbygzmTw/nmLQVX6rxV/JCe4ltm
1ihdQuNVSyCYKlVL1RR9a4+N8X3uv1IsTqYyO8t5851MlLfOOnE8wfUqHjLiabAp
8GHsPnZ3s15FqvbuGGARkN/RShhQPbVSPH75UaA8O8qE1PwRLBPgGIsML7Qhpb+P
WInk4/XJCpioG2I1g6xGphixyBVqAFRfti9jjifPh75/i7o30mANYJt2BBOdoLNU
tE5SEKp8jVR3wvvd7/Qx+WUgVuqz8NGkhaXGz5RjOMCvPa0esTrrla1Mwz0u8kUw
spki3AJTQTzek3O8bsOjgJ4dSuCDV0JkWw6NMHhMLRa8KQcG0bcVzG3PzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASUubo8XlSE34A8Sr4xnQMib1UwMB8GA1UdIwQY
MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt
ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5
LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ36Dz0hU
VYAOdmUo193avB5PCHOT6pjrxkgRTl5fThny2ltHWz6HLvAA13u2dDIjtNs3I7Oj
PXzbW+7jw977ui4ew7UBytMFgwm6eXBJEG52w6XJc5Gm5gj9sxhEY0Nmn0vmU2E1
yUNW3QPBXreDN/w08EGpPL0IeEjzOpuPY53O7Qw8tCp5wd/2N2y4mnY0zaBKcFsi
jeM2unYQJAKshBKCGmVpJRA6AfUlohcw2j1N5COuGEQhHhET/ouYGqCVVK7tJlFF
XHoua8sMLKYm2ssai89QcZV1rRtywzsH5bqhSRt7PIRgJCvZqzDITsAyIaEkwWBL
l6IRPg/7DhEY/w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:29 2025 by rpki-client