Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File:                     nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier:          ZFIdJldMK/ofPe75qw3TP7XF40L8Qnqrjnl/CIS1a6U=
Subject key identifier:   16:16:A3:1E:B5:B0:BF:14:5D:F9:33:6D:CD:2A:65:92:89:66:40:86
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer:       /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial:       019847769B8A8D97AA45F6031106178CA986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number:          0617
Signing time:             Sat 26 Jul 2025 16:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:12 +0000
Files and hashes:         1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: l68kc1Vy+ryUX5H6eLYETj+XoU10FiuVT3jt47uo2u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:9b:8a:8d:97:aa:45:f6:03:11:06:17:8c:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
        Validity
            Not Before: Jul 26 16:00:12 2025 GMT
            Not After : Jul 27 16:00:12 2025 GMT
        Subject: CN=1616a31eb5b0bf145df9336dcd2a659289664086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:d1:9c:2a:61:84:41:fc:ee:31:87:47:3a:
                    c3:f5:1e:9d:2b:02:2b:6a:be:fc:d9:df:67:bd:38:
                    96:db:2b:30:f9:68:0a:e6:97:cc:30:e1:8c:fe:b5:
                    c6:41:c4:f0:24:5b:24:5b:cb:fd:c8:18:23:e6:99:
                    3b:08:de:b4:bf:87:eb:0c:50:a8:f6:53:c1:0c:6c:
                    25:5d:27:1f:42:7d:da:53:3e:3c:9b:44:97:63:8b:
                    35:35:b8:be:5a:d5:bb:34:17:f0:e3:98:5c:0e:0e:
                    60:15:14:61:d3:52:23:51:ea:79:2b:c3:87:83:e9:
                    b3:25:c7:8b:f0:dd:cf:fa:fb:ec:97:de:ff:17:23:
                    ef:da:cd:dc:6c:3a:bb:88:93:75:47:d1:f0:bc:ee:
                    2e:9a:d5:25:7c:30:03:62:c2:60:f1:38:77:46:5c:
                    8c:33:e2:cb:dd:f7:40:66:ce:ca:94:46:6c:b0:b9:
                    9e:22:73:f6:c3:a2:27:38:e7:47:e7:24:3e:de:eb:
                    94:51:79:62:94:48:65:5a:b0:86:2b:1d:de:2d:96:
                    06:24:24:94:77:42:fe:2b:41:8d:99:ae:d4:7d:cf:
                    a5:4f:67:27:c1:2c:26:80:f8:ba:49:56:d5:50:6e:
                    d2:30:13:58:cf:fd:89:cd:25:49:3a:3c:5e:9b:67:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:A3:1E:B5:B0:BF:14:5D:F9:33:6D:CD:2A:65:92:89:66:40:86
            X509v3 Authority Key Identifier:
                keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:d0:05:5b:56:ad:30:58:46:47:09:1a:27:f2:a3:32:09:
         45:0d:a7:32:99:86:8a:8b:ba:bb:8c:85:59:57:ba:2d:0f:5b:
         a1:ab:96:46:23:31:ac:d8:8b:8c:15:6c:40:69:df:ed:62:36:
         7e:93:a0:26:bd:a1:05:14:2b:6b:7b:f6:67:11:02:33:50:06:
         af:c7:ed:26:1e:9e:28:1d:17:fc:3b:0c:62:fa:48:9d:22:d5:
         0c:1d:e7:d4:72:5e:e6:d9:1a:c1:fb:b9:0b:f5:db:ca:7b:f8:
         b1:6e:26:89:f8:72:8d:bf:33:a5:44:50:a2:bb:63:61:b1:49:
         21:2e:c0:5b:41:c4:bf:1f:84:e9:a0:03:7b:9a:95:30:4d:e9:
         e7:b4:e3:ad:4a:ae:35:5c:9f:50:21:83:8c:24:a4:c2:19:3d:
         b3:5f:06:fb:76:eb:09:a8:9d:6f:a8:45:73:33:c9:71:c0:2f:
         43:f7:56:92:59:6f:dc:e0:29:e6:eb:57:6b:8c:ac:e6:58:a6:
         d1:dd:c2:81:94:61:3d:b8:56:a5:f4:c8:83:59:73:08:f7:6e:
         35:b8:aa:ba:b2:78:30:79:e1:36:f3:78:f8:24:d0:fb:5b:2b:
         4c:6f:40:9a:2b:54:cc:58:e4:53:4e:b8:b7:cc:98:f9:0d:76:
         9e:19:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:23:13 2025 by rpki-client