Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File:                     danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier:          d4y0x9DeDl9XVzlsG73DPeehpM2FEznMBamEM8BWLWs=
Subject key identifier:   6B:AD:6B:DF:70:08:6D:43:0C:1D:E2:10:F3:16:98:21:D9:CC:07:F7
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer:       /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial:       019849650A7E001769D85A3D4534E55FE206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number:          02D2
Signing time:             Sun 27 Jul 2025 01:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:15 +0000
Files and hashes:         1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: 7QVkrO5sIb+34ZKh7T/jYCi8xLNseaYX9XfN0yQn80E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:0a:7e:00:17:69:d8:5a:3d:45:34:e5:5f:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
        Validity
            Not Before: Jul 27 01:00:15 2025 GMT
            Not After : Jul 28 01:00:15 2025 GMT
        Subject: CN=6bad6bdf70086d430c1de210f3169821d9cc07f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:70:cb:b0:29:36:a2:46:63:6e:2e:b4:54:
                    02:88:eb:19:84:e1:00:76:8d:2b:a9:31:8a:2d:dd:
                    f3:bb:f1:e3:83:7d:5a:1d:fd:7c:e5:38:44:76:eb:
                    2a:3e:2c:de:86:8e:22:20:44:eb:d4:4a:3a:13:7f:
                    19:65:f4:89:06:4d:88:6c:dd:a2:7e:11:d2:44:cc:
                    db:95:4f:58:fd:aa:43:51:1d:53:fd:d7:85:12:1e:
                    7a:4d:ca:23:5b:32:c6:1e:3b:7a:20:b4:06:b4:47:
                    2e:3d:09:10:ca:cb:aa:74:a1:f8:f5:a4:34:02:ff:
                    ce:96:af:73:55:c8:23:3e:d1:32:72:eb:a2:db:5f:
                    1f:15:51:76:16:41:07:c0:43:03:08:c1:0a:80:01:
                    c0:f2:7c:9b:61:65:8f:1e:80:7a:d0:df:65:cb:f9:
                    16:f0:18:91:ab:38:87:6d:a0:a0:ba:e1:1b:f8:f6:
                    11:3b:e1:61:7a:d9:78:e5:fd:52:36:a5:f7:27:3a:
                    a7:7e:89:bd:38:dc:bf:98:58:7d:bd:33:82:c8:37:
                    8d:25:ba:98:6f:c5:92:4f:46:d7:93:c5:d1:8a:73:
                    02:0e:7a:0c:35:61:c6:4c:a3:f1:dc:47:74:5e:6a:
                    e7:9d:53:a2:33:38:84:e3:34:84:b3:5e:3d:a1:c0:
                    01:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AD:6B:DF:70:08:6D:43:0C:1D:E2:10:F3:16:98:21:D9:CC:07:F7
            X509v3 Authority Key Identifier:
                keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:5a:63:d6:26:18:c5:aa:7f:73:bb:c5:fd:47:31:f5:fd:
         59:7a:4b:c2:58:03:ef:76:1f:ca:37:9e:cf:48:61:6c:3c:9a:
         2d:fe:ec:e9:a6:60:9b:65:48:22:41:29:cf:45:8d:f2:1c:b6:
         4b:83:bd:21:9f:c4:57:0c:c3:93:f2:01:a4:a3:26:53:e7:ea:
         8b:37:91:4a:2d:2c:50:12:92:7f:6f:71:2d:ff:69:25:4d:ef:
         d1:05:7e:70:06:a6:35:13:15:aa:5b:43:4d:1c:50:64:a7:ad:
         39:84:78:75:70:2a:2c:fd:f8:a0:f0:05:62:e1:09:a4:86:29:
         95:e4:51:40:e4:d7:d3:33:a3:13:2f:77:dd:ce:76:67:20:b5:
         74:67:14:2e:28:4b:39:b4:5c:10:56:c6:ae:0c:b2:06:a5:9b:
         64:52:22:1c:de:9c:2f:93:00:48:8f:11:e7:d8:bc:8e:97:a2:
         54:77:0a:23:3a:cb:85:45:fd:9d:54:f6:e3:2e:97:ac:d1:12:
         a4:49:04:08:a7:2d:3b:30:5a:19:96:69:da:c2:2c:c5:8c:c0:
         e2:06:fb:bb:8d:ff:8c:75:87:a4:71:4f:61:e2:0b:c0:69:19:
         15:6a:12:2f:2d:1c:36:36:c7:4f:de:7f:b3:3a:dd:d5:a3:bf:
         2d:2c:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:20:31 2025 by rpki-client