Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File:                     t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier:          7E+1rqkRbx6Oa2WWgwO5SayLavN1qBNNNkUwDKW0JP8=
Subject key identifier:   24:D4:88:84:1D:3C:D9:81:B0:92:20:36:95:A0:BF:98:59:7A:C4:73
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer:       /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial:       01984B54BE027C344DCFC099C2C2D259AAEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 10:01:41 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:41 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:41 +0000
Files and hashes:         1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: qPA72Ob2IKKhReXe+3e1dFYZ5Oj0R5ClkWafAvfzBqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:be:02:7c:34:4d:cf:c0:99:c2:c2:d2:59:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
        Validity
            Not Before: Jul 27 10:01:41 2025 GMT
            Not After : Jul 28 10:01:41 2025 GMT
        Subject: CN=24d488841d3cd981b092203695a0bf98597ac473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:ef:e0:d7:eb:6a:c5:d6:76:14:d5:22:5f:
                    ab:c4:cc:7b:08:17:ce:b3:b3:a4:08:ad:74:74:03:
                    a4:27:29:85:4a:b7:27:c6:c7:27:2e:55:4a:94:1d:
                    ea:d2:04:86:20:fd:28:25:d9:7d:12:6a:90:03:18:
                    88:b0:12:6a:82:e9:97:17:6e:2b:04:24:f7:f0:ff:
                    0f:25:c0:cc:da:49:7b:df:7b:1f:aa:44:eb:c4:c4:
                    23:f4:35:6f:ad:db:cd:ed:8e:00:3c:13:d8:44:12:
                    df:2f:e5:49:1c:f7:de:7a:a5:15:22:41:bc:3e:98:
                    f8:7c:89:f5:ec:6d:d5:e0:b0:93:cf:d3:df:c2:59:
                    3d:08:36:18:30:ca:8f:23:97:24:d5:d9:d4:d2:e1:
                    55:06:01:8b:04:71:22:9f:b4:61:51:cc:fc:c9:12:
                    7e:f4:32:f8:f0:98:6c:98:d4:44:4d:5d:0f:2d:5a:
                    9c:90:49:37:36:e4:f0:5d:ee:fb:5e:6b:0c:05:91:
                    08:09:53:44:9f:5f:f9:ef:fe:6f:3b:d6:c7:8e:f7:
                    73:3f:5a:76:c4:04:f9:c2:6e:b4:48:86:69:1e:34:
                    d4:6b:6e:34:f9:28:4f:25:d1:e4:21:59:90:14:e6:
                    b1:79:33:ba:da:f2:b0:de:1b:35:88:16:95:b9:05:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:88:84:1D:3C:D9:81:B0:92:20:36:95:A0:BF:98:59:7A:C4:73
            X509v3 Authority Key Identifier:
                keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:15:11:04:96:76:b0:2c:f4:95:52:8c:a4:c5:0e:a0:0c:
         ca:8e:57:2e:d6:5a:6c:53:c0:f0:63:4c:31:b0:bf:0e:bb:1e:
         96:18:40:e3:96:7a:de:9a:4b:fc:42:a8:5a:05:dd:df:cb:f3:
         fd:65:a8:c6:11:0c:1b:4b:6d:6e:89:3b:3e:97:e4:d1:e7:ad:
         54:7b:e3:ec:f0:d3:39:64:aa:eb:66:b0:a7:e1:d8:a3:19:22:
         92:ac:0e:74:65:eb:49:51:5a:00:da:14:25:40:2b:53:9a:8d:
         ca:f6:58:cd:b4:f3:71:c9:08:83:db:c8:31:52:d9:99:4d:3d:
         fd:c4:fc:24:43:0f:7c:5c:a5:24:7b:a3:2d:c8:93:55:34:f4:
         3e:66:0c:d8:c1:a4:e8:b4:a8:de:5c:c7:16:33:2b:bf:40:5f:
         ce:e1:f2:67:fe:b8:4e:f1:df:e6:1b:73:37:89:1c:94:93:40:
         c0:0f:06:9b:2a:bc:3f:d7:24:f6:40:ca:87:f2:38:dd:49:4e:
         d0:f6:ad:4d:88:e0:05:e4:33:8f:49:b3:88:d3:b2:f6:69:32:
         75:ba:4d:88:31:72:08:26:fd:cd:9b:db:e2:e2:ae:87:ab:26:
         1b:db:48:7e:e8:da:2b:48:21:a7:30:5e:46:80:18:3c:5e:7c:
         60:ac:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:37 2025 by rpki-client