Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
File:                     Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft (raw, json)
Hash identifier:          x0JjnC+6YNHrabCYH7pb5bZgGNWGB9/CC+T7M4C4dGg=
Subject key identifier:   6E:0D:85:98:6E:8A:E1:9E:F2:F0:69:C0:FD:8B:E7:17:20:40:45:CB
Authority key identifier: 5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
Certificate issuer:       /CN=5efa30ee358e250e1cc66b468193a565d824d448
Certificate serial:       01984C9D6D92ABDECA15A1ADB15FB47371A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
Manifest number:          0201
Signing time:             Sun 27 Jul 2025 16:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 16:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 16:00:42 +0000
Files and hashes:         1: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl (hash: Rg0+T8tAqlm1r3LP/ahhNkDUHEgmf0r8XHZ/9T2I6wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:9d:6d:92:ab:de:ca:15:a1:ad:b1:5f:b4:73:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efa30ee358e250e1cc66b468193a565d824d448
        Validity
            Not Before: Jul 27 16:00:42 2025 GMT
            Not After : Jul 28 16:00:42 2025 GMT
        Subject: CN=6e0d85986e8ae19ef2f069c0fd8be717204045cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:58:d3:0a:a3:0c:50:e3:7c:34:26:2c:f5:
                    90:bd:71:cd:c6:af:34:d2:32:f3:5a:5a:e5:a3:b0:
                    3f:33:45:29:d9:e9:4b:e9:46:3e:2a:8c:1c:cb:95:
                    d4:59:29:7e:f9:9d:c5:0b:b2:48:bb:9e:7a:2d:e0:
                    8d:14:d8:44:bd:a1:1d:e6:65:46:e5:6c:38:2c:c5:
                    39:c5:74:e3:e5:bf:5d:8e:22:d0:fc:1c:04:9c:51:
                    d4:5a:eb:b9:da:a2:9e:4b:3e:fa:05:ce:6d:d4:76:
                    fc:4a:18:13:64:14:6f:3e:a9:90:0e:06:0d:9f:8f:
                    30:29:ae:a7:a5:91:7e:e2:7e:d9:63:fb:8f:21:16:
                    01:05:09:cb:77:dc:a9:32:ab:e3:8d:c1:46:d4:ad:
                    f9:e8:ef:ee:05:11:86:cb:d2:1f:0a:f9:2d:22:59:
                    52:72:e5:81:70:f7:ef:43:a3:38:35:9e:9c:3d:01:
                    82:be:dc:c7:b2:f2:74:c8:13:70:3d:3a:cf:b0:80:
                    1e:f2:7e:5b:63:25:21:ba:79:d6:3e:85:b8:62:b4:
                    d2:3b:7c:de:2f:7f:07:c0:7b:39:52:be:b0:53:2b:
                    47:64:d9:d7:9f:16:a1:d9:2e:f1:a8:51:a9:1c:5c:
                    e0:40:ff:fa:0b:a7:f4:ae:b9:2f:75:f6:59:a6:0a:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:85:98:6E:8A:E1:9E:F2:F0:69:C0:FD:8B:E7:17:20:40:45:CB
            X509v3 Authority Key Identifier:
                keyid:5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:a3:14:c6:58:f5:8a:c7:fa:23:41:86:32:42:26:b4:c6:
         aa:a5:4b:06:96:e5:4d:c7:81:3c:eb:5b:ff:e7:05:be:dc:de:
         5b:3b:96:50:41:86:7a:5b:7c:29:b6:f1:bc:2f:8f:08:37:f1:
         41:b9:23:55:37:be:31:9e:f3:4d:f3:df:b2:70:80:88:59:a6:
         b1:89:d6:f0:be:0a:81:bc:0c:60:f8:96:3a:c1:5f:87:b4:6c:
         b3:ee:50:df:d9:86:5d:26:4a:9f:fa:d5:fa:4f:6e:07:7b:55:
         c8:21:76:88:95:22:95:61:d2:c6:6e:ee:4c:26:fe:19:7f:be:
         1d:84:44:1a:8d:79:fc:87:13:87:71:10:03:03:39:76:3b:39:
         e4:e8:aa:6f:a8:79:7d:03:a9:1e:d5:b4:fe:8d:2e:2d:1e:0c:
         70:b2:e8:1a:80:b8:fa:d3:ec:19:95:6d:77:53:91:c8:1c:d9:
         11:19:70:a6:c2:e4:2e:bc:c0:9b:83:c7:b7:d7:13:b4:37:64:
         44:4d:cc:35:65:07:c2:ec:82:ff:69:3e:77:f1:32:79:1f:88:
         99:03:db:3c:da:a8:96:20:ca:33:17:bb:8a:15:d8:7b:2e:9c:
         63:1b:f8:ae:19:20:06:90:a5:56:74:6e:c1:ea:e0:1b:a6:9e:
         de:2e:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:02:09 2025 by rpki-client