Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File:                     ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier:          8it0UJlxfQhrU+aNg4XeviyH20N0NSQlmvtPZHegNPg=
Subject key identifier:   D8:80:9B:40:AF:4B:B8:62:02:4D:79:CE:B8:D4:E8:12:8A:3A:A6:11
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer:       /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial:       0199221E93E074ED6C43549DFE1CD958EAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number:          062A
Signing time:             Sun 07 Sep 2025 03:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:53 +0000
Files and hashes:         1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: AmfNzQJSGGnh2PTKcexSvQsyjXoyv2CWG8biJO5G5TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:93:e0:74:ed:6c:43:54:9d:fe:1c:d9:58:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
        Validity
            Not Before: Sep  7 03:00:53 2025 GMT
            Not After : Sep  8 03:00:53 2025 GMT
        Subject: CN=d8809b40af4bb862024d79ceb8d4e8128a3aa611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:47:e7:b4:a1:54:b5:8c:bd:35:22:fe:6f:
                    5e:e5:71:69:a8:dd:a6:9e:6e:1c:ff:55:20:92:7e:
                    ba:16:77:fc:9c:58:8b:40:d7:27:41:dd:ab:2a:5a:
                    d2:c2:bf:21:58:86:cc:cd:7b:29:b3:1d:bc:17:30:
                    19:bb:65:3f:41:db:25:ec:93:3e:ad:14:01:f1:ac:
                    a8:60:2e:47:c7:79:9d:41:63:bb:54:1f:73:90:a3:
                    ab:1b:6d:de:3f:1a:9c:87:65:eb:2e:cb:5d:db:28:
                    c1:c7:50:48:94:8c:e0:75:17:bb:6e:a6:c3:3a:7b:
                    d3:a6:79:75:c8:93:b5:8f:0f:93:64:39:ba:24:96:
                    02:1f:1b:78:3c:ef:9f:5a:a4:af:38:e5:d4:4b:7a:
                    7a:a1:70:eb:e8:ed:73:d0:1e:44:76:fc:85:60:43:
                    97:74:24:3a:5a:69:c5:00:5d:18:1f:f2:58:30:04:
                    93:4b:23:2b:88:9c:fe:8f:97:66:fa:18:19:ad:ce:
                    5d:06:80:9b:55:36:62:62:8b:fa:2a:0e:53:03:90:
                    d7:eb:8d:2c:76:16:0d:d9:71:7b:58:d9:82:93:c3:
                    d6:ad:6d:e7:f5:1b:f0:2f:4b:7f:3e:65:c6:4d:da:
                    86:88:86:16:ca:d4:99:1e:9e:33:02:bf:91:d1:42:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:9B:40:AF:4B:B8:62:02:4D:79:CE:B8:D4:E8:12:8A:3A:A6:11
            X509v3 Authority Key Identifier:
                keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:9d:2f:34:31:4d:65:40:49:20:71:66:6f:d8:2b:cb:1c:
         79:5a:2a:9d:fb:1f:cb:c7:f7:d8:02:02:8c:43:39:ce:7c:bf:
         7f:8a:8d:f8:9d:08:fc:ca:ab:de:1f:35:06:72:ec:9a:42:37:
         73:0a:84:5e:56:d7:a0:c4:ef:08:0f:77:09:9a:35:48:d7:6a:
         59:0e:db:2f:1d:3e:ab:49:a3:ac:65:a2:96:1c:5a:97:37:85:
         b2:61:3f:21:5c:b6:15:a5:d5:dd:af:a5:ae:df:1a:84:68:04:
         4c:ba:65:45:27:79:46:56:63:92:98:6c:8e:c4:bf:eb:55:6f:
         43:ca:8b:bd:3f:54:29:8a:0b:17:15:39:6f:2f:07:e6:05:f5:
         5b:27:2f:4c:69:4d:84:c7:fe:85:c3:22:8d:2b:24:37:89:f9:
         a0:1c:2b:4b:5e:33:e8:13:b9:9f:5a:eb:fd:a1:35:42:7d:b1:
         03:10:b1:ab:98:c9:a9:60:af:4d:10:c7:57:dd:34:92:5e:38:
         a2:bc:9d:34:49:51:42:9b:e9:f9:ac:ea:3e:d6:f1:05:92:d6:
         70:36:da:89:6b:a0:67:05:9d:6e:34:25:8b:95:93:64:e5:84:
         4c:58:ea:84:06:4e:e3:6e:c6:56:de:bf:a1:ea:43:ed:33:f1:
         ec:a2:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client