Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File:                     1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier:          /cn2LbbPANL+QADCF0vE38D0i6jCOAQD3MufbaJdZbY=
Subject key identifier:   EA:E4:6A:BC:68:F4:16:03:8F:D5:4F:60:DE:7D:08:06:EA:7A:30:DC
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer:       /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial:       019849668127FF4B44A97E8F441A084D45C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number:          0930
Signing time:             Sun 27 Jul 2025 01:01:51 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:51 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:51 +0000
Files and hashes:         1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: DBqFwC3hGgHI/EFI7LbqbjScx2LiUg6kVR4gIlHPtZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:81:27:ff:4b:44:a9:7e:8f:44:1a:08:4d:45:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
        Validity
            Not Before: Jul 27 01:01:51 2025 GMT
            Not After : Jul 28 01:01:51 2025 GMT
        Subject: CN=eae46abc68f416038fd54f60de7d0806ea7a30dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:65:72:a9:21:55:1b:0e:0e:e5:b7:ac:a7:
                    48:64:5b:3c:f9:4b:20:f2:01:f8:0c:31:48:03:05:
                    0d:c9:77:d5:6a:98:dc:5f:50:6d:62:62:39:8a:8b:
                    a7:43:5f:42:4d:05:b6:f2:e7:99:fa:bb:d0:8a:75:
                    7a:26:c7:62:ab:9d:6a:71:df:f7:f0:6d:8b:e6:8a:
                    bb:51:9a:71:b8:9e:f9:42:71:4a:20:9b:c1:ef:3d:
                    96:14:ce:9a:5d:dd:90:9d:6b:9d:cd:2d:7b:a2:24:
                    7a:55:25:c8:99:0f:77:83:7c:4f:f8:d2:c6:75:e5:
                    9d:82:61:0d:f2:30:7c:85:b0:f6:6b:a2:06:e0:47:
                    ae:e0:cc:bf:c1:b6:cd:94:3d:b5:96:45:2d:c2:1b:
                    d4:0c:62:ac:ea:91:da:10:4c:17:6a:1f:2a:00:1c:
                    b3:c0:8d:96:23:4a:c7:9d:0f:42:dc:40:03:e9:c2:
                    1c:18:32:6d:dc:2a:a3:db:09:60:14:a2:07:f2:83:
                    1e:21:3a:88:72:b8:78:8e:af:ff:26:91:18:29:a7:
                    4b:a2:74:81:8b:75:17:da:90:a2:e4:5f:03:27:0f:
                    28:e4:54:1a:d3:f6:7a:7b:f2:d1:fb:21:36:72:ea:
                    d2:54:37:69:8f:d3:bb:cb:7f:28:cc:0f:af:25:1c:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E4:6A:BC:68:F4:16:03:8F:D5:4F:60:DE:7D:08:06:EA:7A:30:DC
            X509v3 Authority Key Identifier:
                keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:f8:6c:c0:36:b3:9c:51:85:f3:22:3b:c1:ec:f1:6c:dc:
         07:e2:7e:11:af:12:6b:e3:b8:51:4a:fd:41:60:66:13:1c:7c:
         96:2a:5c:e3:aa:15:9a:8f:ee:f8:a3:f9:db:04:8b:63:18:ad:
         39:2b:1d:86:1b:d9:8a:bd:ef:e0:d1:95:51:f3:a5:91:4b:62:
         70:b9:26:f6:e1:33:86:11:56:2e:17:ee:39:a7:f9:f0:fd:06:
         6d:91:3f:ae:76:d1:62:ed:de:96:2c:7b:54:f9:2d:60:80:6c:
         48:1e:dc:aa:6e:b0:f9:ca:06:15:67:42:1c:6d:46:37:e1:88:
         7e:e3:97:ea:d6:f9:ab:a1:f2:fc:d7:7b:43:d1:f9:23:36:65:
         fe:87:e2:40:df:b8:c9:eb:c4:aa:d8:9a:35:f7:f5:fd:87:b6:
         fb:e8:c4:70:60:a7:0a:5d:d1:d1:27:be:27:6e:d4:b6:cd:30:
         67:06:06:bc:06:a0:5c:00:b9:79:2c:aa:0a:39:d4:d5:cb:30:
         3a:3f:94:e2:d3:01:1c:c0:9d:3a:ae:53:47:0d:31:c6:10:20:
         1f:d6:db:ef:cc:b5:08:5e:b6:b1:d5:36:40:5c:00:75:c6:68:
         3d:07:e9:c7:4f:50:af:ec:bd:36:9b:5b:4b:a2:63:5e:c7:94:
         66:17:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:31 2025 by rpki-client