Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File:                     _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier:          SlNuginmvAfvVjimmRrEW1CSAolaFM6dOKZBOvVxGdU=
Subject key identifier:   0A:73:C6:27:60:90:7D:E0:5D:83:35:96:34:45:15:D5:14:FB:65:78
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer:       /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial:       01984AAED07193A21F3EAB3EBD1183276513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number:          0D0A
Signing time:             Sun 27 Jul 2025 07:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:27 +0000
Files and hashes:         1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: WzVwtz3QYmmUqQDYXqptB+s+jA+SfSR4dJWlsLqg7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:d0:71:93:a2:1f:3e:ab:3e:bd:11:83:27:65:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
        Validity
            Not Before: Jul 27 07:00:27 2025 GMT
            Not After : Jul 28 07:00:27 2025 GMT
        Subject: CN=0a73c62760907de05d833596344515d514fb6578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:2f:f6:d2:05:fc:f0:fe:c5:fc:c3:4b:61:
                    29:b0:45:ee:04:3f:c0:71:78:0c:4f:03:6a:2e:71:
                    96:bd:57:76:b7:71:16:2a:9d:55:3d:02:72:c7:88:
                    60:a5:51:9c:cd:15:07:40:62:06:2f:1f:d5:65:5a:
                    77:f0:71:0d:b3:a1:04:f5:fc:33:e1:3c:0d:2d:55:
                    c8:90:8c:f3:e5:d7:86:8c:ca:d4:e8:32:c2:31:84:
                    91:d7:82:28:ea:00:de:b1:d1:42:f5:b6:8a:cd:74:
                    34:c2:a2:1f:cc:2f:93:7d:de:92:2a:57:f0:e2:95:
                    d6:b5:90:c6:ed:85:ee:47:b6:77:89:6f:21:a6:25:
                    41:f1:9f:2e:1f:db:79:35:b7:89:d2:9c:da:c6:21:
                    a9:e6:d0:67:38:14:da:55:62:cc:20:a5:84:d2:e7:
                    e7:35:d7:f2:1b:88:ae:ea:6c:24:f3:e3:45:2c:78:
                    42:48:cc:30:8f:f8:5a:66:00:f4:2d:80:93:26:99:
                    65:76:3b:67:07:0a:91:ad:d9:6f:f6:7f:e8:38:9d:
                    b7:56:7c:c9:48:bc:c0:f1:ac:c6:b2:a9:65:a1:1a:
                    ba:12:c0:4c:3f:b5:2c:0b:be:b3:b0:0e:92:88:f5:
                    4f:3b:b8:be:55:52:81:d8:bf:97:b9:1d:c6:a6:ad:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:C6:27:60:90:7D:E0:5D:83:35:96:34:45:15:D5:14:FB:65:78
            X509v3 Authority Key Identifier:
                keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:e7:e0:a9:94:8c:bf:f2:a0:d5:9e:23:53:e1:f3:ae:65:
         39:ae:a2:01:bd:54:b6:16:ef:a9:64:74:94:ba:86:d2:09:18:
         f1:87:b1:24:0b:c6:ae:56:b7:e2:7d:b2:8c:e3:5b:79:05:6a:
         ca:6b:be:9b:92:cc:6f:6d:d0:b1:ff:c1:dc:3d:db:89:55:93:
         90:2b:e2:44:73:8e:f7:98:26:08:bd:2e:21:97:35:9a:a9:e2:
         85:1e:69:f8:dc:e7:be:68:85:72:72:41:77:54:79:fa:fb:52:
         92:18:22:cb:a9:fe:8b:31:e8:35:d9:83:49:15:7c:55:bc:d2:
         60:2a:ba:17:ec:31:1b:36:d2:89:8d:e0:1e:2c:7d:ce:7c:39:
         51:ab:a7:b7:b5:1c:e1:fd:ec:55:b3:90:57:90:a8:d3:9f:46:
         d1:ee:8b:fb:34:cb:3d:aa:05:6f:b2:e3:42:a3:bf:69:82:84:
         5f:6c:d3:1a:a9:86:cc:6d:6d:be:8a:14:e4:73:72:11:80:a2:
         bf:9d:9d:a1:a2:8f:a7:62:af:2f:5f:b4:a5:d0:8e:b7:a5:3c:
         22:25:03:97:09:fe:a4:a5:08:c7:6b:08:44:66:d4:ab:a5:88:
         56:64:46:80:4b:3e:fb:f8:5b:6a:73:41:c6:6a:01:ad:08:5b:
         6f:75:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:16 2025 by rpki-client