Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          mX08K+PwtSWC8qnwojV+e7bwHGZ09p9xgFqSUPKGXcE=
Subject key identifier:   F1:A3:43:A8:52:E2:C2:FD:8B:39:49:5E:C6:29:78:71:F1:0F:E2:72
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       01985120790FA9D6D2DEFA1D6EBAA94F0333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          04F7
Signing time:             Mon 28 Jul 2025 13:02:19 +0000
Manifest this update:     Mon 28 Jul 2025 13:02:19 +0000
Manifest next update:     Tue 29 Jul 2025 13:02:19 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: judhuVOFqxV68xMUT4kpcIa7yzrIFO8sRLBCz9/Y/7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 13:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:20:79:0f:a9:d6:d2:de:fa:1d:6e:ba:a9:4f:03:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Jul 28 13:02:19 2025 GMT
            Not After : Jul 29 13:02:19 2025 GMT
        Subject: CN=f1a343a852e2c2fd8b39495ec6297871f10fe272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:e8:6d:f6:2f:58:e1:33:f4:9d:c8:da:11:
                    bc:07:77:e2:4c:86:eb:dd:9e:4a:1f:54:6a:fb:d0:
                    57:6f:14:2e:52:72:81:92:3b:d5:19:11:d1:bc:2a:
                    c2:7d:3a:ae:67:03:95:b9:c3:3c:1f:53:01:5a:fb:
                    9b:03:59:b8:2d:92:00:b6:2f:b6:a0:f8:d2:91:0b:
                    da:12:4c:66:02:23:09:f4:b8:fb:34:ef:20:a1:1c:
                    5f:3a:e1:62:b8:a3:50:9c:f0:72:20:5b:83:22:96:
                    3e:47:cc:25:6a:de:20:c9:05:a9:72:80:22:19:25:
                    6d:24:f9:ec:13:20:40:0a:01:cb:c1:c5:98:90:7e:
                    4e:8c:20:f5:b9:3c:d3:52:80:ee:06:5e:93:07:02:
                    bc:d8:70:b8:44:21:03:91:3b:39:e9:b3:af:b1:bb:
                    89:35:10:3d:32:db:f2:f7:7f:36:13:7e:5a:47:d8:
                    86:ac:2c:8f:db:d5:07:89:d7:97:99:31:a4:9e:eb:
                    9a:2d:98:cf:55:2e:43:7a:d0:2d:b2:58:6c:d6:b3:
                    2f:5c:5e:79:36:83:0c:66:93:05:a5:04:dc:03:3b:
                    fa:53:af:40:4f:82:b0:9b:6a:17:73:b6:c9:dd:2b:
                    f4:25:40:aa:39:66:80:6f:14:28:2f:5e:4e:d5:e6:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:43:A8:52:E2:C2:FD:8B:39:49:5E:C6:29:78:71:F1:0F:E2:72
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:38:71:36:d2:a6:8b:ec:67:a1:a8:c4:4f:31:c6:fd:6a:5e:
         2e:37:df:45:d6:91:39:a5:8b:64:ee:c9:12:f8:b9:80:54:01:
         d9:b9:3d:1e:05:39:27:96:b8:1e:89:03:41:2f:a3:40:5a:14:
         41:d8:a7:2b:04:cd:0c:8b:fd:01:fc:5c:d7:d4:91:f9:0a:52:
         50:0b:57:4f:b5:46:54:47:01:76:d3:1c:e1:96:a4:ec:fd:78:
         b9:c1:79:26:57:aa:74:24:6b:b4:56:b2:39:4a:22:71:b6:aa:
         13:74:09:d8:41:92:38:f8:b1:ce:e0:9b:09:54:a5:71:62:a1:
         86:a6:8f:6f:cb:a6:a0:f8:0a:cf:a0:ea:09:e8:87:d3:8e:38:
         b1:44:c0:e6:bd:11:1d:b3:fd:37:e0:24:53:bb:5e:42:f3:04:
         7a:08:e5:f5:ef:0b:fb:a5:74:39:5e:db:63:19:43:44:5b:3c:
         87:43:43:78:8d:d9:fc:ee:4f:19:3f:27:ca:43:6e:03:ae:cb:
         4d:e7:9c:63:8a:eb:5d:d3:05:da:31:f3:c7:b2:42:be:69:80:
         05:98:5a:0d:4c:7f:00:e8:58:80:9b:4d:64:ba:ae:34:0e:1f:
         c8:37:b1:35:81:b3:d2:ab:e5:f6:44:7e:07:9a:38:ec:8a:f0:
         08:7b:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:29:31 2025 by rpki-client