Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File:                     i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier:          yqDOqlV2WE4WZ/EP8RigMzdac1toEzfN/YBTlNyvOS8=
Subject key identifier:   93:C6:0D:5A:3F:D2:00:D0:F7:4D:C8:AB:31:8F:FD:5A:45:B7:0A:63
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer:       /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial:       0198499C289BEDDEE8BF523F0D11EB4136D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number:          EB
Signing time:             Sun 27 Jul 2025 02:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:27 +0000
Files and hashes:         1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: 5Orj8SQUgkb8E5VgtpTlpLkfpICO5ZzrB6380J7nftc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:28:9b:ed:de:e8:bf:52:3f:0d:11:eb:41:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
        Validity
            Not Before: Jul 27 02:00:27 2025 GMT
            Not After : Jul 28 02:00:27 2025 GMT
        Subject: CN=93c60d5a3fd200d0f74dc8ab318ffd5a45b70a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:2c:ca:a2:64:e4:78:c1:c6:20:8e:0d:a7:
                    e0:51:17:ca:95:f1:4e:27:4e:96:b5:41:b7:37:86:
                    ad:a3:3b:4e:bc:25:31:23:e9:79:4d:41:e6:31:6f:
                    c0:fa:8b:cd:b8:da:95:81:c1:82:a2:2d:37:a4:65:
                    b6:12:30:3e:0d:98:55:17:b3:55:a8:6c:f6:96:40:
                    43:00:72:70:e0:cd:14:7c:0e:87:01:19:1d:7d:93:
                    82:9f:8d:ef:5f:0d:d3:f1:9f:92:1e:63:1e:f7:57:
                    8e:be:f2:ac:e4:cc:11:d6:77:63:db:44:16:75:4f:
                    49:6b:1a:7f:14:45:54:9b:bf:99:f1:b9:33:0e:63:
                    21:49:f7:e0:1b:25:64:94:86:9c:8e:47:42:68:2f:
                    fd:14:12:aa:b7:8a:21:2b:2c:85:bf:ac:fe:e9:d6:
                    c6:2a:ea:69:ff:78:d7:e2:a9:cc:ad:22:f7:1d:53:
                    1a:87:df:a7:36:50:92:12:eb:cb:69:24:50:23:ac:
                    88:02:14:8f:bd:b2:fc:71:4e:5e:ea:98:78:a1:80:
                    89:31:75:5b:f2:db:48:ad:4c:d5:01:a2:9f:43:01:
                    90:05:07:6d:d5:ba:86:13:7b:3e:51:d9:6e:b9:d4:
                    a9:88:c2:0d:ee:e9:02:77:6b:c7:a4:3c:c5:39:2f:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:0D:5A:3F:D2:00:D0:F7:4D:C8:AB:31:8F:FD:5A:45:B7:0A:63
            X509v3 Authority Key Identifier:
                keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:d4:bc:56:e4:b6:b5:84:15:4d:6d:06:5c:02:cb:ab:c9:
         33:bd:ef:83:ec:42:23:e4:65:d4:f3:e3:8a:ed:53:6f:9a:4f:
         c1:ba:8c:69:13:8a:8c:f0:fd:eb:32:d0:a5:83:6e:eb:d9:54:
         6a:f4:28:65:fd:4e:17:15:91:7d:46:1e:aa:88:1e:8c:bb:10:
         56:57:67:47:5f:ed:1e:ba:12:fb:d2:1d:e1:41:0c:94:97:71:
         b8:3b:81:23:dc:c9:83:1c:c2:e1:83:be:3d:3b:ac:c9:19:f6:
         fe:99:1d:f1:57:87:99:f3:3f:dd:1d:00:b9:85:ee:64:3a:56:
         7c:5a:4c:02:2a:3b:e4:95:bd:ac:cb:cb:a3:3a:00:cf:e9:d9:
         7c:24:5f:d3:ad:62:31:e9:e7:f8:26:5c:28:99:f7:47:af:8c:
         c2:b0:df:3a:16:71:9d:a9:ec:ce:92:03:9b:a5:ab:f6:98:7c:
         5d:10:4a:d8:c4:fe:96:89:99:fc:f8:6c:f2:0b:0c:3a:a2:01:
         e2:1a:43:02:64:e3:16:21:a7:ca:68:09:6b:25:33:81:85:b0:
         d9:f2:9b:08:7c:65:86:fd:1c:a7:5b:ee:e4:c9:24:d0:d3:e1:
         45:2b:80:71:44:c9:23:00:b0:8c:ee:21:99:4f:30:62:e0:64:
         1a:9c:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:20 2025 by rpki-client