Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          SvYVFJupsykr044i4HXtfGyH5zLAkR8662Pc50Pglh8=
Subject key identifier:   F1:2C:BB:BA:A2:83:0A:A6:5A:C9:97:05:D2:AC:24:1E:09:40:74:08
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       019923A0C19033FF2F044B48258D2F622589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          1178
Signing time:             Sun 07 Sep 2025 10:02:41 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:41 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:41 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: SvKM6XjQ9K1bkitT8cOwEvZHKuqXIyMoxuByfk1S7gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:c1:90:33:ff:2f:04:4b:48:25:8d:2f:62:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Sep  7 10:02:41 2025 GMT
            Not After : Sep  8 10:02:41 2025 GMT
        Subject: CN=f12cbbbaa2830aa65ac99705d2ac241e09407408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:78:d9:c0:77:0b:03:a7:0a:bc:0f:07:ed:
                    35:fe:0f:d5:82:1c:1d:6c:22:c3:8c:f7:e5:d4:49:
                    55:db:dc:17:69:b6:3f:b5:f6:56:d2:d7:17:99:8f:
                    fe:82:56:82:84:b5:93:60:d6:7b:99:b9:74:b7:d5:
                    13:73:09:e8:59:d8:93:da:23:c1:c7:40:2b:9f:b1:
                    c8:bf:c6:d0:ca:65:01:c7:41:af:3f:6f:39:40:5f:
                    6f:6a:f7:85:af:dc:42:ea:4f:83:6a:d0:78:ea:d7:
                    33:71:86:41:01:b6:ee:55:18:38:fc:a6:44:81:53:
                    33:bc:6e:d2:dc:38:c8:92:cc:53:88:7e:76:7b:8c:
                    aa:89:53:fc:30:a5:71:14:bf:57:42:3c:61:be:c8:
                    99:ab:f0:52:78:39:f7:2f:12:6e:29:a5:b8:9d:07:
                    95:77:55:5f:6f:6f:39:91:4b:e8:bc:72:a3:ca:01:
                    01:1a:7d:34:18:0f:fa:4c:c2:e4:27:8b:85:26:13:
                    eb:e1:35:6d:a8:db:82:73:1c:a8:83:1f:9c:d7:fc:
                    55:57:d6:c4:89:bc:e8:6b:fe:8e:d2:2c:b5:7f:43:
                    29:81:84:b9:c3:96:e6:81:82:64:a2:d4:ce:83:6c:
                    57:eb:5d:59:60:80:2a:d2:65:bd:42:6f:02:df:60:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:BB:BA:A2:83:0A:A6:5A:C9:97:05:D2:AC:24:1E:09:40:74:08
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:0a:a0:87:00:23:7a:76:f5:42:12:9c:c4:52:8d:91:4a:
         4a:48:5d:7c:00:21:e9:12:4f:84:38:26:21:81:0e:60:32:a5:
         f1:6b:ac:4c:6c:9a:8d:93:22:b5:6d:1f:da:d6:44:6e:fb:0f:
         d9:f0:38:60:be:cf:54:97:69:0e:b6:90:38:da:53:f2:55:c7:
         56:b7:17:53:6b:1e:7f:c0:37:ba:b7:d4:b8:e4:c6:a1:1e:df:
         ba:97:2f:54:70:0f:e0:54:3d:ba:23:10:bf:2d:09:df:b6:d6:
         60:61:7f:84:87:37:91:73:97:f9:b5:f5:49:c9:9c:52:43:d7:
         4a:50:f3:a1:3d:d3:36:1a:71:25:a2:ff:b3:2f:7e:f2:38:30:
         ee:44:e6:77:90:2d:17:11:bc:48:2c:82:d5:6d:b3:16:1b:ae:
         be:f5:d6:a2:ca:6c:89:49:a7:59:99:4f:0c:ab:6d:b4:03:b7:
         11:3c:44:87:9e:88:8e:e9:59:84:3b:47:93:c5:45:10:57:b9:
         dc:20:fc:40:44:54:3c:78:57:49:48:e0:f7:1c:8f:08:60:d8:
         f9:d8:78:ec:e2:e4:44:fe:73:31:6e:c9:b5:56:b8:dd:e6:5d:
         cb:ec:5e:3d:66:cf:5a:54:cc:e3:5d:ad:0f:85:2e:a6:28:36:
         4f:e2:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:56 2025 by rpki-client