Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File:                     xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier:          tNJIMMKklndFfte4DqfzmN1+uYOTugM1/9tBQgd+qLw=
Subject key identifier:   FB:05:C7:29:E5:C3:38:41:A3:F6:EC:2C:CD:5B:D6:82:5B:CA:7A:81
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer:       /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial:       01984A4103B12004250FFC20259FB55CCAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number:          03FE
Signing time:             Sun 27 Jul 2025 05:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:31 +0000
Files and hashes:         1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: 60V4/ynIlfSSpC5Wo2VgrQj6EP+CJJJfZ1uSgSl65Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:03:b1:20:04:25:0f:fc:20:25:9f:b5:5c:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
        Validity
            Not Before: Jul 27 05:00:31 2025 GMT
            Not After : Jul 28 05:00:31 2025 GMT
        Subject: CN=fb05c729e5c33841a3f6ec2ccd5bd6825bca7a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:8c:21:0a:88:db:ed:68:3a:4c:2d:c2:d3:
                    ba:9d:92:63:e6:63:62:a6:2c:1e:3d:ab:4d:d7:70:
                    c5:15:bd:d9:c0:71:0d:3d:3b:a7:b7:aa:c1:f5:8a:
                    04:26:80:8a:8e:84:d4:fe:fc:3d:4d:b1:e8:a3:84:
                    3b:7e:7a:7b:ee:48:67:a4:7f:7d:ba:5e:52:13:ee:
                    fd:cf:bb:39:9e:45:ae:e1:1c:f8:3c:ca:5a:c9:75:
                    e6:ec:36:4a:78:12:18:57:e7:cf:f1:92:ec:56:7d:
                    63:e8:7d:0a:1d:40:37:15:f8:f6:d8:f9:79:6c:a9:
                    4f:88:d7:68:e2:90:62:6e:38:4e:7f:7c:7d:25:9b:
                    c5:88:c9:be:33:cc:e2:01:d4:28:8b:f6:38:55:ff:
                    e1:43:47:ec:7a:61:3b:cb:9f:35:bd:15:ab:31:14:
                    d0:9a:20:9e:cf:a5:c6:43:a7:4c:a4:69:95:74:dd:
                    2a:97:e6:18:b3:f9:3e:3a:25:fe:86:89:44:19:9d:
                    0a:2b:05:ea:10:34:c5:ce:e5:49:88:25:b3:81:25:
                    12:cd:01:6e:6c:ad:eb:50:37:56:35:5e:9d:d4:a2:
                    2d:f6:d5:b1:c9:78:88:dd:d5:5d:18:16:18:bf:8d:
                    22:22:b2:96:76:96:68:c5:56:1c:72:9e:5e:b1:5f:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:C7:29:E5:C3:38:41:A3:F6:EC:2C:CD:5B:D6:82:5B:CA:7A:81
            X509v3 Authority Key Identifier:
                keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:c3:d0:72:67:3b:81:9a:b4:24:4a:b9:c9:16:dc:61:a9:
         4e:1a:19:c7:44:e5:01:87:41:fb:ce:57:1e:d0:3a:d2:56:51:
         49:98:9d:7c:43:a1:c2:c2:fe:ff:59:86:ae:cc:60:3c:04:57:
         9b:3c:17:14:32:7c:e7:32:c0:1c:62:6a:67:7f:09:8b:d0:19:
         22:74:3a:89:15:30:71:00:46:c3:6d:61:be:45:c6:3c:b1:c2:
         11:cc:82:19:5b:4e:38:85:73:60:83:32:9f:a7:93:56:30:a2:
         27:cb:4c:8a:49:c8:7e:f2:a0:31:ba:4e:66:dc:27:87:1e:db:
         1b:39:98:67:21:e7:d5:46:37:9e:de:4b:50:8f:8e:0a:15:21:
         6b:40:f3:16:5f:dd:ac:e8:b8:3a:f6:2c:10:3a:47:24:06:3c:
         8d:78:67:0e:f0:d5:dc:28:6e:f0:8b:5d:a4:bc:96:bb:f3:7e:
         84:1b:5d:4e:13:c1:e3:55:49:bc:69:dc:90:9a:9e:2e:cc:6b:
         fb:59:2e:fb:7e:50:95:ec:2e:9f:2c:9b:bd:47:22:66:9f:1c:
         3f:57:37:56:d8:ef:df:5c:9c:ea:62:5e:99:9d:82:a7:34:1b:
         2f:67:64:5e:8a:ba:00:41:0f:6a:12:d3:57:e8:cd:ca:28:1b:
         99:48:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:23 2025 by rpki-client