Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File:                     crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier:          UnvWr6bkDH7+7e8igI5fKvZTF1KEHpTK9HspNUDq1BU=
Subject key identifier:   C1:9C:75:A6:78:A9:10:58:47:FB:56:5B:95:21:39:1E:1B:76:D2:AC
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer:       /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial:       019848C023CC1A33A5825608C514299CE4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number:          08EF
Signing time:             Sat 26 Jul 2025 22:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:08 +0000
Files and hashes:         1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: qWQEOdO5aQSBBOgEqZK3yK1nX+2LK5XIxasuN3ZChvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:23:cc:1a:33:a5:82:56:08:c5:14:29:9c:e4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
        Validity
            Not Before: Jul 26 22:00:08 2025 GMT
            Not After : Jul 27 22:00:08 2025 GMT
        Subject: CN=c19c75a678a9105847fb565b9521391e1b76d2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:42:d0:3d:35:c8:b7:a2:31:05:c6:98:f7:
                    a3:6d:a8:1e:df:1d:1b:ba:cc:14:06:33:5e:4d:c9:
                    dc:f2:a8:a5:26:98:78:64:eb:11:65:05:b0:46:74:
                    53:c7:5b:3e:02:58:6b:d5:92:8c:29:58:15:5a:db:
                    74:13:8b:70:12:fa:ab:67:e6:5c:37:b1:02:6d:55:
                    5d:17:e9:ca:5a:c0:3f:6d:09:3d:ae:01:29:ae:7e:
                    eb:89:c5:e9:23:38:24:68:97:e4:ba:36:dc:07:15:
                    cf:96:4c:27:1e:7d:8e:9f:ab:99:4d:df:5d:91:ed:
                    5b:7a:53:9f:f7:db:9f:be:1d:6b:39:a2:b0:b0:10:
                    e2:27:81:18:29:bd:78:2a:c7:e8:14:8e:24:ad:18:
                    a3:d4:f4:91:3d:a6:96:98:e5:86:6e:78:19:98:15:
                    08:32:2c:7b:98:fa:b9:fd:a0:5c:c3:5d:7b:9f:40:
                    d7:6d:3c:71:c3:b0:70:06:e1:a4:60:75:36:3b:2d:
                    34:cb:f9:09:02:38:c1:0f:a2:e3:48:58:86:de:0d:
                    03:8c:7c:bd:d5:e5:5a:6a:22:60:e1:bc:88:f9:95:
                    56:cb:49:fa:42:f8:58:70:e1:f5:7c:ee:ed:1d:ad:
                    28:ad:ee:d8:7f:69:ce:76:59:8b:21:6f:b9:85:25:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9C:75:A6:78:A9:10:58:47:FB:56:5B:95:21:39:1E:1B:76:D2:AC
            X509v3 Authority Key Identifier:
                keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:01:0f:95:6d:41:4f:1f:c1:53:d9:9a:1d:54:8c:35:17:0c:
         31:ab:b6:24:e7:2f:a1:9c:bb:9d:f8:2d:2a:b1:f5:e8:4b:c5:
         38:0b:55:8c:11:77:f0:82:80:30:1d:fd:ad:c8:8d:bf:a0:e6:
         51:76:31:02:3d:66:d7:6e:85:81:5d:d0:d8:3e:5b:70:4d:37:
         17:31:1f:57:2a:8b:af:0d:d4:00:7e:7d:b0:db:05:70:ad:c9:
         7b:f3:60:5b:14:a0:ea:da:79:b3:ff:e8:cd:45:6a:01:fe:0a:
         f6:e3:e7:21:bd:e7:d8:ab:a4:c5:d8:f0:b0:e5:27:76:0e:32:
         c0:8f:8c:91:1a:d2:f6:9c:bb:65:35:cb:d0:e4:b3:c4:41:55:
         60:1d:77:22:3f:28:8d:cb:5a:1a:57:0f:ba:94:9f:fc:95:f7:
         fc:37:68:1c:ac:65:aa:cd:84:2d:8a:5f:e0:cc:ab:14:df:42:
         8c:96:37:fb:7c:cd:bd:f2:40:53:75:1f:fe:f9:31:ea:83:5c:
         e5:ad:30:1c:84:fa:e4:dc:36:82:a6:4b:76:a2:75:c4:09:a9:
         e5:74:09:c5:62:60:8b:a8:42:56:0c:19:3e:52:9f:bf:1e:1c:
         a8:c4:6f:1d:b3:60:bf:aa:b7:53:1c:1c:ac:71:d7:86:2f:7b:
         41:14:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:37 2025 by rpki-client