Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File:                     rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier:          TcBgKRpQDpdZG90IKnhX79kbnenwhIAXRF067Y5aSfQ=
Subject key identifier:   0E:13:7C:77:10:F5:2B:78:0A:21:57:5B:C1:CC:19:5C:91:58:83:85
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer:       /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial:       0198496680AAA08FBA60826A3552BDE5BB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 01:01:50 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:50 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:50 +0000
Files and hashes:         1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: 949jABDniEvGtQUueBdxWf/xEnp/phGdt27VFc6R0D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:80:aa:a0:8f:ba:60:82:6a:35:52:bd:e5:bb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
        Validity
            Not Before: Jul 27 01:01:50 2025 GMT
            Not After : Jul 28 01:01:50 2025 GMT
        Subject: CN=0e137c7710f52b780a21575bc1cc195c91588385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:cb:a9:15:ef:eb:85:e5:e1:a8:2e:c6:fb:
                    17:5e:d9:88:09:7b:3d:34:74:08:43:d9:cc:6c:04:
                    d3:ec:49:46:06:d6:f3:6e:39:f1:6d:ef:7a:0a:67:
                    c5:80:80:3c:a9:cb:13:9a:a1:3e:d1:ef:63:13:0b:
                    58:39:13:c7:0a:09:e4:c1:b0:14:58:7a:e6:64:55:
                    be:ec:28:70:d9:ab:5f:4d:ac:7e:b2:ed:a6:4e:01:
                    7d:e5:9c:9f:52:f4:e9:c8:4b:d0:33:a5:97:63:bb:
                    33:0c:2c:1b:f9:b2:42:46:cd:23:da:4f:13:9a:1b:
                    32:f2:9b:b9:d1:bd:21:f3:a8:36:3d:95:e4:22:b3:
                    85:fe:cc:92:c0:11:64:18:01:71:31:68:6b:47:93:
                    5d:d3:5e:63:30:8f:c0:1f:78:9a:9c:28:29:6b:fa:
                    91:cb:d8:1d:bc:64:ef:99:1b:13:84:ae:30:2d:c9:
                    35:1d:97:2e:7b:14:a5:fc:a6:ca:fc:9e:f0:ee:bb:
                    d0:36:cb:a5:54:3d:b0:f8:54:76:6c:21:2e:e2:4a:
                    0f:e4:65:c0:1a:cd:82:54:70:db:f1:08:11:8b:0c:
                    e2:a5:31:4d:ed:4d:1c:d0:c4:af:d9:8c:bf:49:12:
                    8c:5e:d8:23:87:55:70:e7:30:6f:5c:53:99:04:46:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:13:7C:77:10:F5:2B:78:0A:21:57:5B:C1:CC:19:5C:91:58:83:85
            X509v3 Authority Key Identifier:
                keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:a0:b1:87:6c:93:85:e6:c1:60:1b:3d:a0:12:45:fc:65:
         bd:34:f6:e9:8c:81:a5:b7:6f:b5:24:67:35:20:ab:c4:99:37:
         14:10:da:e7:08:25:a4:16:03:70:5c:96:a9:26:33:71:3a:ae:
         f2:c6:70:45:a2:f6:09:f6:22:5f:7f:8b:d4:cd:45:04:5a:61:
         9f:63:34:5a:90:28:e4:18:f4:f6:fe:ea:3e:11:99:c2:bd:19:
         b4:b3:2c:0a:16:25:70:02:cc:5d:91:7a:9d:cb:89:c2:e4:b1:
         7a:2e:ee:a2:fe:a9:3f:89:97:dc:7b:8a:33:a3:ef:ed:1c:6d:
         75:72:8b:e0:e2:aa:f1:30:a8:58:97:17:3f:a7:83:21:ee:da:
         1f:49:db:9a:b0:e1:72:45:57:5c:30:8b:aa:16:e9:f0:03:be:
         16:22:81:6d:08:e3:82:60:ee:4d:8e:6c:ab:2e:76:d8:3c:48:
         84:26:17:9d:8f:19:67:1a:72:fc:b7:a2:5d:f7:83:77:65:ba:
         f8:dc:ab:09:cd:79:b6:8e:13:bc:ca:10:72:78:7a:d4:c5:d2:
         53:79:6c:02:26:da:7a:66:25:84:2d:4c:e1:26:8a:9c:83:ef:
         79:f4:2c:5d:48:f2:52:93:a7:25:4c:bf:cb:bf:10:65:42:e6:
         87:37:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:00 2025 by rpki-client