Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File:                     pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier:          tx8yYk4NqFYwgki2TKL3mJsOb/2gRcz3+AlKXu52PvI=
Subject key identifier:   F2:C3:FC:A8:AA:68:EF:74:77:72:D8:42:5A:71:D7:9F:50:B2:2B:B2
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer:       /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial:       019848C05EB036FA677EEB8C744595AF4CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number:          016C
Signing time:             Sat 26 Jul 2025 22:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:23 +0000
Files and hashes:         1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: 8wvEi/a+BdF4RBqyC0Mg29FCzZMSIcxmbIxBE7c9iqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:5e:b0:36:fa:67:7e:eb:8c:74:45:95:af:4c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
        Validity
            Not Before: Jul 26 22:00:23 2025 GMT
            Not After : Jul 27 22:00:23 2025 GMT
        Subject: CN=f2c3fca8aa68ef747772d8425a71d79f50b22bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:b4:9a:70:8b:32:a0:47:71:93:4b:5d:12:
                    9d:89:ce:8c:4b:91:e5:d8:24:b4:20:27:c5:4d:b2:
                    27:13:da:5a:18:c0:16:3f:3e:7d:0e:32:74:65:79:
                    7a:af:9e:9d:6a:07:10:45:c6:39:f9:73:79:bb:98:
                    ca:dc:61:9a:14:00:f4:b0:65:91:67:ca:8f:9c:07:
                    81:d0:1a:f7:b3:5e:22:20:60:af:cc:27:0f:57:32:
                    cd:3b:6b:2d:4d:15:4b:5e:7c:92:c8:84:df:43:96:
                    03:f5:c5:8c:07:a2:b5:1a:fb:1d:da:0f:f0:8c:af:
                    9b:d2:9a:cd:bc:bb:d8:da:bc:4e:1f:e8:07:29:f7:
                    7e:13:50:38:58:55:82:ba:cb:44:5c:99:10:98:ad:
                    68:4a:7c:e8:15:f9:56:e2:aa:71:31:52:77:c0:cd:
                    c6:85:19:e9:14:4c:30:69:91:01:e2:5b:13:25:6f:
                    24:42:0b:83:9a:a7:05:bc:8b:5f:c5:0b:ca:21:ac:
                    81:af:32:7e:02:5e:e3:75:9c:d5:89:e3:a5:f5:98:
                    52:8c:7c:ea:cd:b3:83:0c:85:d2:ce:2e:ad:52:5c:
                    7f:dd:7f:f4:39:b0:ee:56:3b:54:6c:7c:e8:39:d4:
                    f3:f6:a8:52:cc:9e:64:02:11:46:39:76:dc:3d:48:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C3:FC:A8:AA:68:EF:74:77:72:D8:42:5A:71:D7:9F:50:B2:2B:B2
            X509v3 Authority Key Identifier:
                keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:9e:5b:96:d1:e1:30:0a:0a:14:a1:6d:d3:d6:8a:cd:38:
         d2:86:c0:d7:12:f7:f8:3c:da:7c:f8:e1:c9:e6:62:8c:9a:b7:
         be:57:36:bb:8b:d9:f2:80:ec:d6:4b:9d:48:b9:fd:cf:5e:dd:
         95:67:4e:c9:07:57:97:15:17:46:4a:02:20:36:10:2e:cd:f5:
         50:ea:42:ae:93:26:91:b2:42:cf:c5:b8:a5:01:51:c8:6b:e6:
         3a:c6:b0:97:91:9e:ea:72:81:72:ef:a0:46:61:23:8c:0b:e3:
         f0:46:31:23:0d:0d:cf:fe:ed:67:76:85:12:ae:9e:19:bc:c5:
         bf:aa:cb:6c:19:7a:f8:4b:66:4d:3f:40:bd:75:f6:c0:ec:3f:
         a4:b5:a7:ac:a7:0e:af:ec:f1:1d:02:e5:38:b5:42:56:68:33:
         a2:35:61:bb:28:d3:9f:8c:d6:9a:56:90:84:c5:89:5b:12:ee:
         08:59:bb:6c:de:ff:a3:98:d3:c1:ab:09:e0:1a:e5:18:13:87:
         89:97:39:bd:7a:e7:f7:4c:84:c9:79:46:df:26:dc:20:46:7a:
         54:84:26:5c:70:77:bc:91:f9:3d:40:08:96:e3:e5:54:ad:dd:
         57:67:0c:f6:fc:fb:67:36:1e:b8:7a:e2:30:88:6a:4e:27:e7:
         da:12:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:18 2025 by rpki-client