Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File:                     dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier:          uHututUZphIjpNuPiH8jo/+3TsxAaFtLo21iWCgHme8=
Subject key identifier:   E6:2B:A3:83:A7:F1:90:76:B3:35:CB:34:0B:81:68:86:EA:BA:01:A9
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer:       /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial:       0199221E5BC918B861167C4C8C3B62B5581E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number:          0AAC
Signing time:             Sun 07 Sep 2025 03:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:38 +0000
Files and hashes:         1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: VFxWEZyy/2/yAimiyoRGB9RnTrfKgMBySPKVJAVibYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:5b:c9:18:b8:61:16:7c:4c:8c:3b:62:b5:58:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
        Validity
            Not Before: Sep  7 03:00:38 2025 GMT
            Not After : Sep  8 03:00:38 2025 GMT
        Subject: CN=e62ba383a7f19076b335cb340b816886eaba01a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:6d:6a:79:2e:d8:58:9e:be:2f:35:69:06:
                    d1:44:a0:73:c1:8e:5e:3e:e0:64:33:55:ec:32:28:
                    d2:9a:15:08:16:89:02:b3:96:54:ef:ef:a4:13:b4:
                    4a:da:ab:e3:22:e9:12:76:7c:7e:92:8e:71:e1:6a:
                    da:83:47:b3:6a:ba:61:ea:e9:87:7f:22:9a:99:0d:
                    a5:32:16:aa:2e:cb:c1:1b:eb:e3:32:cb:20:4c:2c:
                    e4:0e:7e:f0:10:3f:7d:00:35:00:bb:65:c6:a1:0e:
                    85:ae:ed:fe:89:0f:2c:0c:2c:a9:43:8e:a1:7e:6d:
                    f0:0d:56:90:3a:5c:fc:52:a3:ad:cf:c0:dc:83:b8:
                    4e:f2:86:1c:7d:7e:5a:14:1b:7b:b4:b5:4f:3e:19:
                    17:7c:58:f2:df:13:7e:9e:6b:73:5f:b9:6e:97:73:
                    41:75:6d:b1:59:37:8f:0f:58:38:fa:bf:5e:da:86:
                    03:1e:99:3d:fd:d8:74:ac:7c:45:66:68:5d:4c:e4:
                    0b:2e:c5:28:0f:0f:89:ef:c5:c0:e1:8b:3e:1c:2a:
                    d7:87:a1:3b:be:9c:0e:a6:62:fe:ac:1d:e1:ba:7b:
                    d3:29:db:1f:3e:03:57:c6:e2:21:8f:89:85:73:38:
                    e1:20:2d:f5:1c:8f:60:e9:09:67:ea:0a:90:66:79:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:A3:83:A7:F1:90:76:B3:35:CB:34:0B:81:68:86:EA:BA:01:A9
            X509v3 Authority Key Identifier:
                keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:19:13:87:b8:a1:b7:6b:24:ec:42:8c:16:6d:3b:82:c4:e8:
         27:4a:8d:72:5f:d1:c1:91:27:71:fa:0b:3d:37:1c:ea:96:56:
         2c:e7:11:92:2a:e8:bc:15:ec:15:d5:9e:16:fb:59:87:20:45:
         46:c6:fa:33:13:e9:93:26:39:f9:f9:ed:23:95:63:50:88:14:
         4c:28:b6:5a:46:29:98:1c:ad:a0:8f:cb:a3:c8:01:4e:f5:ae:
         ff:2a:24:5b:dd:23:1d:13:91:3c:c8:eb:bd:ce:fe:3c:b1:32:
         9f:a0:0a:10:73:a2:e0:ae:a4:08:dd:22:d0:7b:a2:6a:56:48:
         85:94:20:95:26:f9:d0:34:97:3c:9b:93:84:c5:b3:3c:df:75:
         0a:8b:fb:70:d6:ca:30:92:55:07:7e:a8:2a:81:bf:47:ac:89:
         57:23:73:2d:32:fd:a4:d3:26:6e:70:4f:8c:75:9c:b4:27:44:
         98:16:ed:3d:53:3b:76:4c:ce:42:40:6f:db:4a:68:db:0f:4a:
         13:d0:4e:d9:ce:8f:69:9c:05:0f:8e:e1:f3:66:09:33:88:c3:
         1b:37:a4:e1:d5:8c:5a:7e:11:52:a3:82:1b:3b:ab:21:cc:e3:
         22:70:9d:95:82:0f:10:a2:fc:e2:2d:d9:e1:0f:89:bc:e1:34:
         07:68:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client