Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File:                     sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier:          7UCX0PmStw1XPc9TNBIpPFpkiSXBT1rK0KcBvJkJueY=
Subject key identifier:   D3:30:71:97:B1:80:CD:14:86:C7:F0:18:91:85:86:F4:06:85:A6:A6
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer:       /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial:       01984776E7030C611E98EB304BA783429019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number:          028C
Signing time:             Sat 26 Jul 2025 16:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:31 +0000
Files and hashes:         1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: /+yWZSvE1OwZxux/dIoIy96mP27LjM5PR6MfrtDImik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e7:03:0c:61:1e:98:eb:30:4b:a7:83:42:90:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
        Validity
            Not Before: Jul 26 16:00:31 2025 GMT
            Not After : Jul 27 16:00:31 2025 GMT
        Subject: CN=d3307197b180cd1486c7f018918586f40685a6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:1c:b6:42:bb:7d:27:d1:53:98:34:a7:8b:
                    36:99:28:14:da:db:8a:98:62:47:19:db:5a:23:e9:
                    64:4c:7e:3e:bc:0e:9f:1a:c7:c5:19:04:a5:14:ad:
                    f8:f1:a4:b2:fc:d9:45:39:da:e1:6e:ee:0c:8e:17:
                    84:74:f9:54:6e:ae:b8:37:80:b4:1e:55:4a:8d:86:
                    02:2f:95:72:b1:65:a1:ee:30:ce:95:6c:88:03:0b:
                    39:29:07:34:ba:91:2f:97:ec:00:f6:d7:ab:3e:64:
                    ef:66:23:03:2b:be:9e:8a:ef:b3:57:3e:73:84:38:
                    91:75:6c:ee:e5:dc:2f:03:41:00:e0:cb:15:7a:8b:
                    04:20:d0:3b:19:2e:7a:97:9e:ac:07:43:f3:71:cf:
                    c0:90:56:2c:1e:9b:4e:47:51:4f:78:9e:84:7c:52:
                    84:69:ef:5e:e2:7a:39:be:72:6a:32:93:b0:c8:b8:
                    81:f3:bc:da:ea:b8:fc:13:31:6b:aa:14:4d:dd:ee:
                    fd:8d:1b:e3:17:00:73:10:9a:47:d2:7f:6b:08:52:
                    21:1c:0f:3f:e0:e2:a8:dc:a6:8b:1f:98:3c:02:d3:
                    4a:0f:97:c7:04:8e:a4:7d:de:c1:04:7e:16:24:9d:
                    71:b3:d8:f7:a2:08:53:66:ce:dd:d5:06:ec:cd:90:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:71:97:B1:80:CD:14:86:C7:F0:18:91:85:86:F4:06:85:A6:A6
            X509v3 Authority Key Identifier:
                keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:b8:f0:06:43:28:c8:a4:81:63:89:22:59:85:39:1b:bf:
         ee:08:65:07:eb:33:a0:a7:e3:ad:03:1d:b2:b4:84:0f:cf:62:
         ac:ea:f9:cd:25:b3:0d:02:27:01:f8:92:54:84:43:62:e9:7d:
         3e:a2:d9:ae:20:05:08:aa:42:cc:e9:25:d7:8e:e1:23:6a:d7:
         0e:d5:7a:6f:53:d0:02:a1:6e:54:28:b0:08:ae:5e:30:1f:c3:
         43:9c:e4:02:c7:5a:83:b6:b8:fc:3c:2f:07:f5:d1:d5:6c:ff:
         bb:63:a7:8d:80:dc:4b:ea:cf:b8:d0:56:41:ff:56:40:57:c8:
         8d:01:93:c2:34:30:85:8a:86:d9:91:05:cf:33:cf:0b:8a:ae:
         c0:9a:b8:45:56:58:87:c8:5c:ca:0a:ce:8d:be:9d:f1:70:3d:
         83:2c:dd:ca:28:08:3a:50:08:3e:f4:ec:c6:b5:de:0c:a1:73:
         ae:fd:60:68:c6:cf:73:ea:b5:8a:77:5f:59:b0:7d:51:fe:8d:
         7c:50:be:25:bb:55:25:bf:12:34:0e:34:ce:1a:ac:a3:54:29:
         b5:4b:2f:a0:b3:d4:96:ef:2f:90:59:22:d6:4b:98:1f:3b:a2:
         6c:c9:2e:cb:4a:44:51:64:54:62:a5:50:6d:fe:ea:51:de:f3:
         a1:81:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:13:57 2025 by rpki-client