Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          1f2uHhmVJ4d33VqfjPOfOmvgfCqUunTDW2DYf7puoTk=
Subject key identifier:   65:68:A0:17:22:78:BF:97:14:6E:07:3E:AE:66:ED:F9:BC:A9:BC:FE
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       019916BF745559078E18469FD99D8408A04D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          1667
Signing time:             Thu 04 Sep 2025 22:01:09 +0000
Manifest this update:     Thu 04 Sep 2025 22:01:09 +0000
Manifest next update:     Fri 05 Sep 2025 22:01:09 +0000
Files and hashes:         1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: 3fFDhvCbqqMT/4+jU9M++AqlnST9/bfS3aPfEFIJtCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:74:55:59:07:8e:18:46:9f:d9:9d:84:08:a0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: Sep  4 22:01:09 2025 GMT
            Not After : Sep  5 22:01:09 2025 GMT
        Subject: CN=6568a0172278bf97146e073eae66edf9bca9bcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:8b:0b:30:35:a2:f2:d0:cb:cb:6a:37:5b:
                    af:6d:cc:b2:ed:00:8c:e9:e1:26:b5:03:b2:34:86:
                    c9:2d:10:15:d2:e9:1a:51:6c:b8:f1:71:b7:a5:69:
                    44:4b:20:ec:f9:81:e1:6a:c9:34:80:77:1a:dd:47:
                    d1:06:4c:a3:9b:22:76:c9:08:e7:6b:c3:de:c4:5d:
                    1f:79:cf:41:15:dc:56:52:e4:94:fd:af:b9:ec:0b:
                    39:7d:bc:a2:cc:38:94:ef:7c:d3:e8:8c:7a:48:86:
                    08:82:0d:e8:42:e2:7e:d4:3d:0a:f8:11:7d:36:3d:
                    37:b8:6e:91:db:e1:3d:55:31:5d:96:14:4c:31:80:
                    98:b7:50:4b:b7:4b:da:29:84:52:1f:8e:6b:18:5b:
                    77:8f:76:c0:f7:26:a0:f8:95:24:01:26:69:2d:5b:
                    74:9b:6d:47:e1:30:2c:25:ce:9a:22:6a:12:0b:ad:
                    12:bf:9c:8e:12:e6:41:4e:56:16:b7:09:9c:67:42:
                    2e:ba:02:2e:5f:1e:02:46:9e:50:38:8b:99:e3:c9:
                    f0:6c:67:45:14:3b:46:85:67:a6:e3:df:6a:41:39:
                    7c:6c:22:35:dd:99:7e:1d:ef:6b:6b:ec:5c:d6:3a:
                    79:66:15:6c:32:56:36:9b:4f:7d:b9:21:dc:0b:f7:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:A0:17:22:78:BF:97:14:6E:07:3E:AE:66:ED:F9:BC:A9:BC:FE
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:b0:ae:f7:c5:cf:91:a5:6e:4a:c0:8d:2c:8b:4c:14:d6:
         20:6f:c9:4f:47:1a:70:ac:52:bf:53:91:5a:d5:90:bb:db:df:
         f3:7e:97:73:b8:30:46:79:5e:ad:ab:a4:43:06:8a:c1:60:0a:
         fe:36:e7:59:93:33:45:e4:68:24:53:97:7e:f0:20:55:ca:3b:
         d2:d4:d4:4d:cc:8f:6c:ef:4b:22:57:67:7f:e1:2e:4d:a4:dc:
         9c:3a:25:05:56:13:26:6f:df:fc:d8:af:82:e4:41:71:0c:b2:
         71:19:52:41:0d:87:55:2e:53:62:2f:e4:a9:1a:c0:2a:3f:fe:
         64:bb:0e:b1:b1:9a:54:7f:f1:62:1d:3a:96:48:c4:44:9e:7f:
         07:2a:fd:7f:b3:4a:c8:f0:e2:e9:b1:71:c7:4b:1a:86:4d:31:
         cf:53:79:df:42:d9:75:c3:a5:fd:68:64:4a:15:dd:e9:84:b6:
         e2:59:2a:d1:e7:1a:58:12:3b:72:c4:61:ba:1a:cc:3e:44:fc:
         7f:db:01:c5:8f:f0:75:89:42:be:3e:52:06:6a:80:76:32:93:
         01:cc:8e:9c:2e:a0:65:71:61:f3:a4:c1:e8:32:e5:8b:34:7e:
         03:7c:73:c0:74:8c:08:0b:05:34:91:bc:a6:a1:b3:75:fa:68:
         ac:2d:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:37 2025 by rpki-client