Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File:                     sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier:          9y0joFy4YoZfNBhR3rT3V1k3z2IIGT0q0CVjk2+1GjY=
Subject key identifier:   56:B5:74:73:8C:B0:07:4A:6B:A0:D3:F4:4F:86:01:7E:D4:B8:F4:F9
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer:       /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial:       0198496630FEB03FC0ACCB2BA8278A27AF9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 01:01:30 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:30 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:30 +0000
Files and hashes:         1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: pDusce894BbawTOrYZYFOPy7pypoIkSyGIZbS2u8lV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:30:fe:b0:3f:c0:ac:cb:2b:a8:27:8a:27:af:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
        Validity
            Not Before: Jul 27 01:01:30 2025 GMT
            Not After : Jul 28 01:01:30 2025 GMT
        Subject: CN=56b574738cb0074a6ba0d3f44f86017ed4b8f4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:26:82:fe:4a:05:7c:d2:a5:2f:80:b7:e0:
                    63:6b:15:ee:ff:25:03:f1:19:9b:e3:47:d1:6b:03:
                    a3:71:97:38:df:9b:b5:da:6d:ef:92:e7:f3:4f:ad:
                    34:a3:fc:24:93:f8:4e:d1:db:55:fb:a7:4b:17:61:
                    41:f5:6d:6d:89:b0:9e:c5:d4:06:03:00:fa:9d:c2:
                    2c:14:45:a8:02:0d:24:fc:5e:14:cf:e4:eb:35:08:
                    fa:46:bb:f4:d2:e2:36:04:10:e5:6b:34:96:90:6f:
                    44:6d:c0:55:14:da:91:54:29:be:e6:ab:03:7c:ed:
                    8c:b6:d9:89:a4:1b:ef:72:e0:b5:b2:8f:3b:03:2b:
                    ae:81:3e:13:a8:4a:a9:08:25:8d:d5:d9:75:76:5c:
                    40:cd:f7:08:64:65:af:36:a9:cd:58:6f:26:a8:0d:
                    e2:d5:c2:76:53:db:34:b1:ff:ad:16:f6:6a:2a:cf:
                    82:17:29:30:16:8f:41:92:51:98:7f:43:98:fc:6f:
                    e7:16:ce:56:9c:65:01:0e:30:5a:44:be:ad:c1:bb:
                    24:f1:be:05:7f:bc:7e:db:ad:3e:0e:b7:27:67:6f:
                    ab:01:c2:b8:cd:f4:ec:db:0c:3a:9d:e0:a2:b6:37:
                    71:32:b4:e8:7f:de:4b:79:3a:c2:d7:48:1d:80:4d:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B5:74:73:8C:B0:07:4A:6B:A0:D3:F4:4F:86:01:7E:D4:B8:F4:F9
            X509v3 Authority Key Identifier:
                keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:3f:c1:75:5b:8d:75:f5:95:8c:14:9e:0b:ce:b1:c4:06:
         9a:54:44:c4:e4:1d:06:ac:69:a7:c8:8b:6d:8b:86:d6:1e:8a:
         23:37:d2:1b:4a:9c:48:be:5a:ce:80:21:0e:6a:61:0c:fd:7e:
         f3:9e:22:2f:0a:8c:d7:c1:e8:a1:76:a7:b4:c7:bc:26:9a:b3:
         a7:12:4b:35:14:19:5b:4f:2e:80:a0:a9:5e:16:f9:d7:10:6b:
         5d:d0:7f:ad:3f:73:8f:2b:62:7b:30:04:86:d4:92:ec:5f:7d:
         5b:77:1f:b1:0f:20:14:50:38:fd:87:d8:23:0f:30:ef:a7:88:
         3b:df:6a:ba:0d:93:51:ff:62:75:eb:ff:f9:d6:71:bd:23:f0:
         c7:e4:34:85:8f:3a:22:15:e4:91:a6:16:96:9a:67:c7:ab:4a:
         b3:c0:13:60:f3:6f:b8:e0:b0:2f:4f:c7:c6:84:65:f0:3d:45:
         3e:7f:ca:a7:ee:e7:88:1c:d6:89:dd:dc:78:f0:48:dd:15:6e:
         04:9f:36:2f:af:29:a6:11:f0:e6:ed:62:5f:bd:35:5d:4e:57:
         9f:65:7e:13:36:82:07:42:b9:1e:ad:3f:2b:0b:90:f1:21:9a:
         b2:08:80:48:ee:0a:c6:68:4c:79:e5:72:42:92:09:ab:6f:a2:
         59:1a:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:23 2025 by rpki-client