Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          zoL570PrQQPUGT+IXGIW3cxnqp0nfNefDwKxQtjY3KQ=
Subject key identifier:   32:61:EF:71:42:01:75:43:14:3C:AC:DF:A2:02:23:29:E6:05:E3:B1
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       019921B23A02627A5FA4AA3485FB521CE8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0A73
Signing time:             Sun 07 Sep 2025 01:02:32 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:32 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:32 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: Z/+SbQ972auUmt8vKnd0F2pI1mzICXQ4YvDvOpUZkdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:3a:02:62:7a:5f:a4:aa:34:85:fb:52:1c:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Sep  7 01:02:32 2025 GMT
            Not After : Sep  8 01:02:32 2025 GMT
        Subject: CN=3261ef7142017543143cacdfa2022329e605e3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:6f:c9:3f:cc:53:91:72:06:65:86:1e:3e:
                    7c:75:c9:dd:e3:50:8c:fd:56:bb:c6:32:af:cf:cd:
                    fd:a9:96:f6:24:86:5f:5e:88:06:83:c7:bd:0c:32:
                    4c:0c:a9:50:a8:ce:74:48:60:4f:e0:e0:bd:f5:9d:
                    81:bb:dd:82:cf:c3:d8:0a:6d:28:5f:52:32:aa:ea:
                    9f:75:78:e9:17:57:72:e8:e2:ef:91:0e:10:2b:2b:
                    e9:06:e6:63:e8:64:7d:f6:99:6c:6d:f1:c1:79:45:
                    76:e3:f7:91:5d:3a:ca:5b:41:a7:bd:09:dd:91:6b:
                    18:c2:4f:10:bc:a4:78:33:6c:7c:42:07:ff:ea:16:
                    c0:0a:fb:c8:f9:7b:c3:db:1b:7a:89:44:f6:14:f0:
                    93:72:a7:a9:24:d6:70:1b:a1:09:04:3b:68:4c:ef:
                    6c:01:66:83:aa:bc:d8:f8:7f:71:03:7f:c2:95:2e:
                    e3:83:e9:c0:ec:ad:0c:12:9a:f4:7b:e9:60:0a:a1:
                    df:16:89:3f:07:ed:78:66:74:4a:15:eb:6d:6c:ff:
                    ea:08:f0:35:c0:ff:a4:66:3d:c8:03:26:a7:39:68:
                    a4:ab:f8:ed:47:f4:7e:28:3c:e1:a0:49:51:e2:1e:
                    fb:51:57:3c:b6:20:97:12:85:39:e8:11:8c:7f:31:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:EF:71:42:01:75:43:14:3C:AC:DF:A2:02:23:29:E6:05:E3:B1
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:99:21:17:16:a2:2e:da:59:ba:09:bf:cc:ce:1c:bb:cf:
         8c:51:4e:cc:d6:f4:6c:d7:9e:a2:4e:05:ae:85:14:72:ea:b0:
         03:8a:32:6a:ad:02:de:b4:7d:79:2f:2d:0b:2b:51:7c:61:94:
         f0:bb:44:ea:99:51:a8:1c:22:72:33:75:ab:0e:a3:b9:b3:bf:
         30:46:79:c2:e4:28:5a:72:09:e3:bc:51:29:9b:da:6d:84:66:
         6e:4f:97:b7:02:c0:82:fc:21:d1:14:00:b1:46:88:c2:f0:c4:
         db:d0:e8:64:47:ed:bd:5d:a5:0d:c8:dc:a7:d5:b8:05:5e:06:
         c9:b5:71:f2:95:8b:d3:c0:f5:f4:8d:5f:7d:21:34:f9:3b:4e:
         fc:fd:cc:fb:bb:ae:da:dc:85:01:c2:8b:da:2d:22:d6:ed:dc:
         44:16:24:36:a4:22:9a:51:a9:54:bd:41:32:f3:0e:f7:d6:c1:
         c0:ef:4b:18:01:b7:d1:c7:ee:24:e0:5e:57:a4:2b:20:36:e2:
         62:d3:6a:e9:ab:55:f9:2e:cc:fa:30:2b:53:83:55:da:58:6b:
         c5:cb:59:3c:46:7e:ce:f4:ac:8f:90:d1:b8:a2:3b:ec:7f:c6:
         e2:70:b0:a1:3e:87:ef:c3:b3:12:84:c9:61:36:dc:5d:55:04:
         96:a4:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:04 2025 by rpki-client