Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          Vi8DOlDvj/lEnd98VIJoIn7zIBREW48YEG71aDW07Wg=
Subject key identifier:   B8:1F:65:95:DE:D5:75:2E:50:D5:AD:A5:8C:4B:21:FB:1A:14:04:66
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       0199228D0D12645C516C4D0CBAEDBEA233DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          0B78
Signing time:             Sun 07 Sep 2025 05:01:33 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:33 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:33 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: CaVCTD2Jb1QmaIizYMVEuCcseU/BQVgyz3lP92dqZXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:0d:12:64:5c:51:6c:4d:0c:ba:ed:be:a2:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Sep  7 05:01:33 2025 GMT
            Not After : Sep  8 05:01:33 2025 GMT
        Subject: CN=b81f6595ded5752e50d5ada58c4b21fb1a140466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:0f:ca:23:b5:1f:bb:01:19:d3:10:ab:1b:
                    f7:ce:20:6a:ba:28:c8:3f:9f:cd:ad:7c:b3:30:75:
                    33:d0:3f:c3:d7:8e:15:4b:e3:17:64:af:36:a8:76:
                    06:9f:0f:50:fb:fb:72:27:d0:8b:e8:15:10:1d:91:
                    61:ff:da:4d:be:31:ac:6b:fe:72:53:53:34:ac:92:
                    71:93:ed:a7:f9:18:1e:e0:24:b1:b5:5b:53:79:85:
                    8e:54:1d:2b:70:94:61:13:36:ae:fd:23:6d:7c:03:
                    bd:13:8d:7c:0e:0f:bb:4b:80:f9:af:5c:39:80:f3:
                    1a:ab:68:de:fc:c1:53:be:6e:54:14:7d:c1:e4:2e:
                    aa:d8:ae:30:f1:a2:a6:83:f2:c4:f6:ee:3b:6b:d5:
                    0a:0a:4a:aa:1f:8c:97:93:e7:69:8c:85:f2:b8:e5:
                    8c:be:1f:bc:43:0a:d7:57:a1:ad:47:15:8c:da:67:
                    6f:d6:f2:61:b5:de:23:6e:43:48:7b:0e:89:36:f6:
                    a5:ea:4a:a8:c9:b2:29:28:cb:86:14:69:ac:4b:0f:
                    d2:e5:82:b1:04:f9:f1:ed:58:d6:5c:1d:2b:fc:60:
                    10:a5:ba:15:62:5f:3c:ce:46:18:50:85:01:3f:af:
                    c2:cd:fe:f7:1d:90:eb:c2:ad:64:a2:14:0f:6c:ad:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:65:95:DE:D5:75:2E:50:D5:AD:A5:8C:4B:21:FB:1A:14:04:66
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:86:42:e9:29:1a:b5:a8:16:74:09:3a:5c:ab:59:7e:c5:be:
         61:81:5c:82:9e:52:85:97:42:f0:c2:db:4b:83:3a:a6:b4:24:
         d0:92:d7:ff:2c:83:75:23:a2:f7:c7:e7:31:72:e8:50:76:06:
         60:7b:28:52:59:de:65:f5:ee:61:10:52:98:87:91:31:16:ac:
         59:5f:25:7b:fa:18:4c:13:4d:cd:ae:33:59:a7:29:9c:d3:c6:
         2b:25:78:d6:dd:68:5f:59:bf:b4:d1:ae:f7:05:c4:1a:e1:da:
         ca:ba:40:db:1e:4a:3e:aa:92:e3:30:13:3b:50:0c:13:fd:60:
         00:eb:dd:76:bc:70:5a:0f:30:2f:bb:67:d1:2c:56:bc:f5:b9:
         38:97:07:ce:bb:b4:60:b5:83:d9:84:42:ca:24:13:51:26:a6:
         a6:0c:8a:fb:4e:cc:23:c1:00:d0:e2:a9:39:34:52:da:72:ac:
         a0:01:3a:9a:2f:5d:e4:4b:cd:ff:48:46:54:9d:9a:cc:ea:64:
         c0:c9:ba:6c:9d:ad:70:45:39:f2:e2:d0:f7:b5:81:76:9e:99:
         7e:0d:c1:2f:85:46:4d:51:66:14:ba:3f:71:a4:f5:34:c8:18:
         85:06:4b:0f:59:c8:47:d1:3a:3e:40:da:f0:46:97:68:f7:82:
         b9:a3:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client