Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File:                     RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier:          xff80wPZmY+AOH2SVOiW0UIrEBmScgxeNQQQ2mao974=
Subject key identifier:   AD:D1:A8:8D:2C:54:7F:BB:6A:F0:7D:4A:DA:1A:7C:CC:DA:2D:71:8E
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer:       /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial:       019848C09F517663CE524C0BB11E990BA5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number:          0783
Signing time:             Sat 26 Jul 2025 22:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:39 +0000
Files and hashes:         1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: iS3cIbsv9hfjMF+zyKSOv5MYhBaV7b1j7f0y0Bos74g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:9f:51:76:63:ce:52:4c:0b:b1:1e:99:0b:a5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
        Validity
            Not Before: Jul 26 22:00:39 2025 GMT
            Not After : Jul 27 22:00:39 2025 GMT
        Subject: CN=add1a88d2c547fbb6af07d4ada1a7cccda2d718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:97:65:ca:df:10:14:e1:1a:ee:99:e3:6b:
                    ad:d4:15:6f:bd:65:1b:94:03:35:5b:a3:6c:bd:df:
                    85:69:99:44:31:7c:a2:5f:38:43:b2:d7:87:8f:ea:
                    cf:dd:2b:05:87:35:d0:43:dc:1f:cf:f0:32:2a:11:
                    84:a0:9b:6f:04:fa:80:62:d2:68:d0:32:78:c9:f9:
                    ec:ba:03:29:c9:18:9d:39:db:5a:b0:ea:24:7b:af:
                    82:19:da:d5:06:03:09:99:c5:80:00:7d:b7:b4:47:
                    2e:20:c6:f6:54:f3:a4:fd:19:b3:67:37:b9:bf:c9:
                    54:35:ab:7b:32:cd:41:e8:c5:e6:e4:36:fe:dd:bd:
                    8d:19:6e:c3:82:bf:e5:44:59:27:a6:a7:89:b2:0d:
                    d5:ef:f2:fa:9e:4b:d9:d3:4f:09:0a:07:5b:64:cc:
                    3f:44:b6:1d:6d:d1:ba:11:4b:60:a7:14:4c:75:61:
                    dc:4e:d4:99:b2:52:12:e4:5c:86:b5:5a:70:f8:79:
                    3a:25:48:63:23:7d:b9:25:05:60:90:9e:3f:12:61:
                    cd:ca:ea:27:60:47:c8:f6:9b:d3:43:1e:a7:22:a6:
                    c8:41:67:88:da:e2:d5:ae:78:e5:4a:94:6a:e5:ed:
                    8e:dc:b9:54:c0:53:a2:bc:05:df:ad:64:3a:e2:84:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:A8:8D:2C:54:7F:BB:6A:F0:7D:4A:DA:1A:7C:CC:DA:2D:71:8E
            X509v3 Authority Key Identifier:
                keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:b9:e2:1f:b0:ef:f0:64:b9:94:90:95:73:ba:a1:1b:e3:
         0a:48:cf:1c:46:8a:0a:a3:7b:94:77:96:3a:3e:fe:e0:43:aa:
         3a:f3:06:e0:03:f0:67:24:bd:9a:65:2b:5d:7b:aa:a4:d0:20:
         44:45:60:a6:7b:1e:c9:b8:77:6e:f5:dd:b4:af:8c:f8:4b:e1:
         cc:33:b1:9d:b2:19:20:3c:7a:51:57:81:6f:5c:9c:13:1c:10:
         8b:ca:fd:95:a6:9a:be:13:a5:38:f3:ee:35:2a:c9:0d:5c:3b:
         5a:10:43:46:81:eb:cc:e5:48:93:19:ff:73:27:eb:f7:39:94:
         ea:cc:0f:2a:1a:94:60:8f:59:fd:e0:3e:72:39:0b:21:80:6b:
         10:62:22:c0:75:0d:35:37:55:4b:ec:ea:d2:40:92:39:b7:10:
         5f:1e:da:f1:c4:4c:a8:ae:01:0b:60:11:4e:de:63:19:34:94:
         c8:27:1f:43:d4:a0:79:04:c1:bd:9d:ab:55:da:59:f2:e1:c7:
         b6:ed:db:90:36:1b:81:d3:2c:a5:f3:12:73:4e:fb:9b:85:b6:
         64:cc:03:be:9a:d0:d9:1a:4e:1f:5f:f4:fe:eb:e1:ff:9f:39:
         c0:f0:08:6e:4e:82:71:23:77:f9:81:b1:0a:4a:ed:19:51:bc:
         40:68:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:05 2025 by rpki-client