Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          Lf7UuBXfonR58QTF8uLNSfff3P+e9vgFhl0tbQQnQ0M=
Subject key identifier:   16:B2:94:B9:56:26:78:0F:B4:13:41:00:7A:18:33:65:BD:BC:B6:7B
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       019923A003806F06E1186125F2E4071664FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          1302
Signing time:             Sun 07 Sep 2025 10:01:52 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:52 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:52 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: wHaSRp68MASC9nP8W5ajBH3bjo5vw/JGgkFJZfhOgsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:03:80:6f:06:e1:18:61:25:f2:e4:07:16:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Sep  7 10:01:52 2025 GMT
            Not After : Sep  8 10:01:52 2025 GMT
        Subject: CN=16b294b95626780fb41341007a183365bdbcb67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:d8:2e:31:0a:8a:45:73:00:f5:b2:53:07:
                    fc:74:3a:87:b1:88:fc:08:3a:1b:9c:c9:eb:3a:4a:
                    3a:ce:66:c8:f5:75:78:fa:49:8f:89:f9:2e:5c:de:
                    85:bf:08:00:74:c6:11:23:7f:81:75:02:70:33:38:
                    b9:94:36:c8:f8:3d:9b:25:26:cd:14:19:a0:27:e2:
                    d6:38:d8:59:56:fe:ed:22:6d:8f:4a:3b:ae:fc:5e:
                    23:e4:59:00:0f:6e:ed:e8:65:72:de:fa:1f:a6:39:
                    00:31:04:62:81:b6:c4:a1:56:ca:48:70:77:ba:05:
                    02:83:2d:d4:1e:d8:cf:b0:d8:f5:6d:10:a9:2b:86:
                    0a:07:f7:02:e9:fb:05:76:22:fd:49:19:51:58:f1:
                    a5:e6:3d:17:32:22:e4:f0:44:34:b9:a9:c2:92:fe:
                    7b:66:d4:49:fc:6d:56:35:27:10:dc:3f:ea:c2:e9:
                    8f:01:3b:ee:45:8a:81:60:f6:3a:d4:8f:69:63:9e:
                    23:b2:5c:2f:65:15:25:47:e8:41:2e:01:73:7d:19:
                    44:70:48:58:b0:03:67:71:11:69:16:1c:c3:ab:c9:
                    73:69:9a:6d:a9:7b:51:94:73:ff:03:af:f7:fc:8f:
                    4b:52:84:85:14:20:e6:3a:a0:1f:3a:13:c2:60:42:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B2:94:B9:56:26:78:0F:B4:13:41:00:7A:18:33:65:BD:BC:B6:7B
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:24:4d:63:bb:9a:1a:67:e6:62:9e:92:8e:2d:13:21:78:d7:
         f4:a6:99:48:77:e3:cc:6a:c9:ad:0d:10:de:cd:e9:58:19:15:
         25:83:88:11:e6:4b:6e:d8:ac:9b:66:83:80:31:68:69:63:f9:
         c4:f0:0f:0b:ae:0a:2b:b8:4e:97:fb:a8:63:6e:c6:a8:15:9d:
         39:d9:36:11:67:d5:34:01:ee:8b:94:a0:fc:b1:99:42:d3:f1:
         14:c2:04:ea:d1:a8:b1:bf:eb:89:6f:59:21:a0:1e:6f:ae:c9:
         e0:de:a4:01:f7:ff:12:13:f4:4a:af:da:1e:f7:77:e3:61:b8:
         95:19:3a:e0:25:fd:e5:c3:57:4a:7e:c0:9b:4d:72:41:9a:28:
         55:99:39:df:25:af:be:49:5f:54:3a:45:ae:e6:0c:1d:f2:65:
         a5:50:0e:34:94:48:18:92:f5:cf:6a:71:ab:9c:07:16:c4:77:
         ed:f2:96:c1:58:ca:16:4e:32:1c:d4:82:c2:19:3e:06:6f:3b:
         81:65:8e:c5:fb:fb:df:e0:75:28:0a:19:26:3d:79:01:8f:6d:
         0a:8d:47:06:f2:8a:66:66:7e:56:a8:49:79:fd:e7:e5:b5:25:
         ac:2e:82:79:23:1c:f7:90:b7:12:59:22:34:2d:ad:e6:ba:48:
         c2:83:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client