Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
File:                     b0hdoepm0fZhammw0CuaK8Gk_9M.mft (raw, json)
Hash identifier:          V1OXmOFXxPjfweaYpIxJjg6sip0eX+DwMCLxfIU5iPY=
Subject key identifier:   39:C0:FB:FA:62:49:CA:29:FF:E9:9C:96:8E:19:DE:B4:75:78:15:2A
Authority key identifier: 6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3
Certificate issuer:       /CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
Certificate serial:       019827B50451DC0A4BFBF9AF1EEF352D97D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
Manifest number:          24
Signing time:             Sun 20 Jul 2025 12:00:31 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:31 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:31 +0000
Files and hashes:         1: b0hdoepm0fZhammw0CuaK8Gk_9M.crl (hash: 4RYj1Ayr0Z0aJKk2vkLre5JOxFQ1fY6/g0miYiTpXDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:04:51:dc:0a:4b:fb:f9:af:1e:ef:35:2d:97:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
        Validity
            Not Before: Jul 20 12:00:31 2025 GMT
            Not After : Jul 21 12:00:31 2025 GMT
        Subject: CN=39c0fbfa6249ca29ffe99c968e19deb47578152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:a2:62:f9:36:78:65:b3:b7:00:1f:8d:b2:
                    48:c8:69:c8:7d:06:df:65:17:27:07:79:ed:57:38:
                    c2:84:1e:b3:aa:8e:67:d6:5d:5f:32:0a:64:13:b0:
                    4a:c3:83:a4:f6:aa:c8:b1:40:0f:8b:1c:7b:3f:5f:
                    23:eb:9b:86:52:b7:bf:30:6f:df:7a:77:5b:82:fa:
                    77:27:70:69:c7:82:f0:3c:4b:6e:b9:68:25:34:08:
                    87:56:7b:58:c5:df:a3:69:97:cd:38:04:72:f0:28:
                    4d:25:04:41:81:81:9f:91:32:f6:2d:c0:b4:0b:31:
                    15:b4:1e:1d:10:4d:9a:58:da:35:31:2c:0d:3b:1b:
                    b6:46:11:59:f9:e7:d1:51:44:e4:86:1d:0c:28:12:
                    e5:72:ce:d5:83:51:c0:ff:a5:16:ca:52:80:3f:21:
                    11:ea:f9:af:b9:aa:d6:33:49:4a:c4:4f:f7:ee:d2:
                    7b:8e:d8:fa:3d:00:b5:98:ad:c1:6d:74:65:26:e7:
                    39:4a:c5:6d:ad:0e:81:9a:62:a9:92:a2:9b:85:e1:
                    96:2c:e3:69:46:e6:59:ad:c8:9f:6e:0d:f6:86:01:
                    05:dc:d3:45:bf:c3:bf:3c:84:e2:dc:3b:09:33:6f:
                    98:78:8c:af:11:85:62:3f:45:fd:7f:16:ef:f5:63:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C0:FB:FA:62:49:CA:29:FF:E9:9C:96:8E:19:DE:B4:75:78:15:2A
            X509v3 Authority Key Identifier:
                keyid:6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:60:52:4a:b2:73:38:05:8a:ef:bc:34:ca:63:8b:ba:39:
         cf:9a:9a:17:50:8e:31:77:cf:dd:47:e8:a2:ad:f0:8a:21:9b:
         74:c9:81:c4:8c:ec:de:ca:0b:6c:a2:be:7a:89:b1:2b:5d:14:
         95:ef:8f:f2:82:e0:e6:14:9b:25:6c:39:11:b3:2c:f5:a6:0c:
         2d:ba:cc:27:89:fa:73:c9:78:44:0a:1b:03:a7:31:b9:33:8c:
         cb:f6:3b:e4:2e:21:8c:74:e6:b4:2f:24:36:07:49:35:57:4e:
         12:5d:0a:91:31:4d:3b:02:96:de:1f:00:fe:b6:1d:f3:e2:16:
         8c:8a:6a:6e:3c:f6:26:b4:cd:da:58:27:80:fa:80:8f:14:c0:
         85:a5:1c:71:36:28:ab:b1:bd:1e:6b:10:cd:34:6d:e0:8d:ec:
         6a:fd:96:5f:13:a3:03:0a:2e:71:4b:0c:ee:03:7b:31:32:f2:
         38:fb:e4:42:79:3b:8d:fa:61:61:e0:1a:00:4d:7a:5a:d4:40:
         3a:de:a7:f8:98:2b:35:36:d1:19:9a:b9:ec:de:ea:07:4e:a8:
         77:25:7d:d6:02:a9:a7:29:04:73:b9:dd:11:3d:c9:16:c7:74:
         ef:8b:a3:2e:4d:67:4c:52:a4:32:69:fb:21:5e:96:18:73:39:
         91:3b:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:54:51 2025 by rpki-client