Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File:                     pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier:          u/9HZ7H6GWCvaUO10OJKIrYBh1prWN883BqHTNfANuk=
Subject key identifier:   7A:8D:82:67:BB:43:3A:94:AE:E9:A5:C1:0A:D7:00:DA:83:DC:41:E6
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer:       /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial:       01985120CEF1A2BC77E3992F2C499CAF0075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number:          1601
Signing time:             Mon 28 Jul 2025 13:02:41 +0000
Manifest this update:     Mon 28 Jul 2025 13:02:41 +0000
Manifest next update:     Tue 29 Jul 2025 13:02:41 +0000
Files and hashes:         1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: euJLzvUyjgVf/srVgLQc5Y0eYqNboqEbvOyn+EuKkhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:20:ce:f1:a2:bc:77:e3:99:2f:2c:49:9c:af:00:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
        Validity
            Not Before: Jul 28 13:02:41 2025 GMT
            Not After : Jul 29 13:02:41 2025 GMT
        Subject: CN=7a8d8267bb433a94aee9a5c10ad700da83dc41e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:cd:8f:2a:4a:1e:5c:94:55:6c:df:32:0f:
                    fd:ac:f5:af:59:17:f7:77:6b:ec:2e:84:70:06:3f:
                    ec:65:1d:7c:cb:7a:8c:ed:a2:5d:50:da:79:08:88:
                    4a:95:96:e2:d6:65:5c:0b:ba:4e:6a:af:51:d0:7c:
                    cd:a2:97:31:b1:7e:6c:75:3c:13:b2:cd:ca:4b:30:
                    18:be:5d:72:c7:57:ca:4b:eb:54:9a:9e:79:53:6e:
                    11:55:6f:12:f2:4c:0a:a1:d0:3e:91:a9:92:a9:7e:
                    42:e6:85:ea:3c:27:b6:17:8a:35:6e:a3:8c:a5:bc:
                    04:eb:72:73:4e:8f:2a:d0:a2:88:04:57:40:5d:0d:
                    40:d1:f9:81:ca:21:4f:5b:92:c3:18:43:a0:ec:46:
                    b3:78:ec:67:ee:d1:97:6d:a5:1e:bd:55:8b:28:06:
                    2a:b9:7b:c1:ab:52:95:72:a6:8d:50:fc:e4:6c:1e:
                    b0:5f:de:95:95:1e:a2:bf:7b:1f:e3:bf:26:03:a7:
                    9f:e8:ea:85:4d:e4:a5:d2:2c:ec:97:a9:88:b1:6d:
                    ae:ad:2f:2b:bd:df:11:98:4b:a2:9f:4e:46:c5:d3:
                    e2:36:8b:91:23:eb:06:6e:e7:9e:43:fe:46:2c:80:
                    26:e4:5d:d1:b7:1b:9a:cd:84:1f:46:c2:29:9e:f0:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:82:67:BB:43:3A:94:AE:E9:A5:C1:0A:D7:00:DA:83:DC:41:E6
            X509v3 Authority Key Identifier:
                keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:52:4b:ab:ee:d1:96:da:9c:04:08:be:30:d9:51:50:6d:90:
         c1:96:1d:60:8f:c2:de:5b:e3:96:d2:e4:0e:d7:f9:16:1f:c0:
         d5:e8:bb:c5:24:5b:9e:60:97:29:bd:2b:c7:6f:f9:ea:d7:97:
         ce:91:f8:6a:ea:38:4a:90:b8:ee:73:18:89:04:8e:9c:be:a4:
         a4:d3:7e:7b:bf:95:d6:e2:16:ab:70:81:23:0b:08:1c:49:5e:
         2a:a9:c2:4d:23:24:27:8c:c7:ee:ae:9e:7e:28:e9:5b:d6:b9:
         8b:73:cb:90:ed:a2:90:2a:df:26:a3:fa:57:78:c2:58:74:88:
         cd:79:f7:60:2c:b5:38:f1:bd:0a:0f:83:d3:62:a4:a0:cd:7f:
         4f:c4:76:8c:0f:30:8b:87:08:a9:d8:a1:28:82:72:f6:dd:36:
         9f:5b:5b:d8:51:6e:40:bc:30:14:f7:1e:ab:a8:69:25:9c:44:
         e3:3e:66:03:d7:19:ef:0d:f0:8e:90:21:62:2b:1b:ae:d2:88:
         1c:c5:f7:7b:f6:fe:f6:e1:fb:15:37:79:a1:76:0c:8b:c3:7b:
         83:39:83:41:f2:d1:86:ef:89:86:81:b2:e5:06:00:32:8e:27:
         d3:b4:cc:94:bf:dc:02:e2:cc:d6:43:94:10:ee:49:f2:93:99:
         0f:11:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:10:35 2025 by rpki-client