Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File:                     tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier:          Mj0rZYSXOiEPskqOBs9T5Z02Q/vS35JlNc/wIq8IF7w=
Subject key identifier:   50:6E:54:AF:82:88:D4:EA:1A:BB:E9:C5:9A:30:D1:FC:B1:33:98:02
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer:       /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial:       01984AE600D42B6B30DE638885B11CF43BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number:          035C
Signing time:             Sun 27 Jul 2025 08:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:44 +0000
Files and hashes:         1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: 72wv75ffjsmuivm+WWh5q1Hzf31+cIFs7Q9aDrEHehY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e6:00:d4:2b:6b:30:de:63:88:85:b1:1c:f4:3b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
        Validity
            Not Before: Jul 27 08:00:44 2025 GMT
            Not After : Jul 28 08:00:44 2025 GMT
        Subject: CN=506e54af8288d4ea1abbe9c59a30d1fcb1339802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:42:84:3f:58:0d:17:a1:ab:ee:7e:f1:52:
                    de:5b:7b:9b:b3:7d:a2:49:2a:e7:59:03:1c:a7:7b:
                    19:38:9e:27:15:43:72:85:d2:b3:a0:80:19:b7:6c:
                    c1:9b:b4:69:93:d4:15:69:79:32:ef:ac:b0:6e:45:
                    e3:98:a0:cb:c4:cb:cf:d8:19:88:cd:ea:b3:07:6b:
                    5a:71:21:26:55:63:b1:33:57:99:2b:0a:2b:79:14:
                    38:4d:f1:58:9e:83:e1:ac:4c:79:44:6b:8c:a6:59:
                    1b:95:7e:ae:59:3f:1e:18:fe:c8:b7:76:91:94:3f:
                    2c:28:77:29:55:f1:19:fd:46:8d:f0:e2:d2:f3:c6:
                    30:a9:46:1d:7a:dc:8a:12:69:08:40:ee:39:f3:66:
                    10:a5:3c:5b:6e:8d:75:d9:17:81:b4:67:38:4d:51:
                    68:83:db:6d:5f:4d:d6:4b:ba:21:53:f9:4b:2a:c5:
                    88:ea:bf:09:6b:4f:c6:2d:f9:ba:28:a5:f8:ad:99:
                    50:d5:26:f1:de:53:9f:14:8e:78:d1:8a:84:9a:e5:
                    a6:78:36:8f:dc:48:f0:63:53:55:51:cd:54:7c:f6:
                    08:86:c5:d7:9c:eb:0f:7c:cd:f7:4c:bf:ae:68:f0:
                    fc:13:77:f1:33:b9:7b:b9:33:e2:b7:24:48:17:0d:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:54:AF:82:88:D4:EA:1A:BB:E9:C5:9A:30:D1:FC:B1:33:98:02
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:69:13:43:9a:c8:8c:7d:fb:7d:3b:0a:ed:37:91:cc:00:3a:
         5a:86:d0:e7:a7:41:ac:b1:71:93:5b:ab:86:6e:20:37:3b:87:
         ea:82:39:ee:06:2e:b1:4f:ff:5f:1a:d6:70:c0:80:48:49:5e:
         c4:5f:aa:ad:40:71:7b:a2:f2:35:2d:df:fd:df:e8:bb:fc:64:
         ae:66:a5:ad:60:68:db:22:9a:d1:0d:98:ff:c5:ac:57:5f:0b:
         d5:69:7a:a9:29:d9:97:66:cb:5e:25:0d:f0:26:7f:c7:b4:00:
         c8:5f:62:e1:dd:c1:da:6c:fd:ce:7b:da:e9:3a:b9:56:d1:a0:
         cb:87:1e:bf:78:6c:4d:82:81:f1:d8:ac:6e:16:71:bc:05:47:
         3a:f9:c1:ae:46:9b:24:f4:87:a5:f3:03:93:c8:6c:0e:b0:8a:
         34:f0:d6:10:62:16:60:07:50:f3:9d:91:e0:08:9d:82:60:69:
         8c:c8:1c:5f:f8:99:a3:c2:ba:77:e0:8c:c0:d1:bd:c6:83:7e:
         29:52:1b:b6:d4:e9:84:2e:6a:c1:10:1f:7b:b7:72:39:c9:b7:
         d2:a1:aa:4b:f3:19:df:65:ad:d1:d8:1e:cb:38:f3:b6:64:f7:
         1c:48:90:83:3a:4b:8d:d4:ba:ad:62:86:0c:97:a8:ea:09:bb:
         00:e9:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:47:43 2025 by rpki-client