Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
File:                     adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json)
Hash identifier:          HrMCMlmFxhnIFKlwQpqY9PhH/065l2WwLum971cKKtI=
Subject key identifier:   12:2B:9D:38:ED:3E:9D:74:D0:C1:0A:30:00:E7:61:EC:96:1E:94:77
Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29
Certificate issuer:       /CN=69d47017b515ee214b28420edbedb3015c16ee29
Certificate serial:       019921B06DED5448703B8CAFC9F69E27396E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 01:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:34 +0000
Files and hashes:         1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: wWszG50PBSG5HpuEgIFTJ8lYjjP9k/3UHY9dG/r363g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:6d:ed:54:48:70:3b:8c:af:c9:f6:9e:27:39:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29
        Validity
            Not Before: Sep  7 01:00:34 2025 GMT
            Not After : Sep  8 01:00:34 2025 GMT
        Subject: CN=122b9d38ed3e9d74d0c10a3000e761ec961e9477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:6d:ae:b7:30:fd:54:99:36:60:05:5b:b6:
                    39:8f:9b:2b:0a:5f:cc:75:c9:d8:f4:4d:52:ea:0c:
                    7c:2f:bb:62:5e:66:bd:05:1f:ca:52:3e:cd:30:ec:
                    7b:1c:40:dc:90:58:6f:0d:ec:f3:b7:c3:a7:d2:20:
                    dd:4c:f5:8f:cd:e0:a9:60:7a:85:f6:2d:97:ef:cf:
                    13:2e:f4:d9:8d:c7:f6:69:6b:8a:6a:13:6f:79:ff:
                    8a:ab:1d:a5:aa:c6:f7:1a:45:68:2f:15:b1:cd:64:
                    fd:42:6c:35:17:cb:24:9f:8d:10:67:d6:89:8e:7c:
                    6b:dd:1e:d9:ff:a6:4a:a1:7e:e7:97:ce:73:a0:b8:
                    fe:7b:84:66:aa:77:1c:64:31:da:24:d5:d3:db:34:
                    94:2a:ed:d6:d8:ac:58:d8:4e:19:90:49:de:e6:ef:
                    52:76:09:77:48:ea:80:64:5a:a3:e8:e2:c5:e2:43:
                    7d:3a:ff:bc:c2:cc:92:4a:52:49:a2:ea:59:09:27:
                    03:ff:38:b1:89:24:3d:51:db:75:98:49:5c:07:e5:
                    15:85:a3:13:56:a8:93:a1:a1:e2:85:1d:ba:9c:a8:
                    a0:a5:97:e4:04:d4:3d:7f:2b:9b:9c:20:2a:00:e7:
                    b1:c0:33:c4:da:0a:81:59:68:a9:c1:c1:3a:9d:d5:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2B:9D:38:ED:3E:9D:74:D0:C1:0A:30:00:E7:61:EC:96:1E:94:77
            X509v3 Authority Key Identifier:
                keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:1a:8f:c6:a2:ad:0d:f1:b9:e5:14:08:1d:b4:09:02:f5:
         93:0b:a8:ec:59:f7:85:95:4b:6b:d3:99:19:2f:cf:d8:7a:2c:
         59:70:93:95:29:71:ba:4b:4d:db:b6:3f:5a:e6:a7:a1:20:14:
         82:77:50:be:7d:9a:ef:e2:0a:a1:9b:d6:9f:0e:a1:d0:b6:44:
         5d:ba:31:08:26:0c:fc:78:9d:81:cc:1b:77:c8:80:25:22:85:
         16:41:81:07:37:83:c9:aa:2f:d2:d2:24:b7:2e:49:2b:d9:dd:
         db:2e:57:1b:6d:94:da:7a:cc:ae:95:84:e4:3b:8b:5c:fc:f4:
         07:01:93:f1:52:33:aa:91:01:c3:14:1c:ff:81:97:ee:35:3d:
         1e:05:76:92:f0:64:ed:06:b2:d7:a5:31:06:8b:c8:7e:9d:15:
         7f:d1:01:4f:ca:82:ba:e6:e3:5d:54:c7:f3:a6:7f:8d:65:1f:
         cf:de:db:4f:af:96:64:39:44:7b:1c:2c:e9:32:cb:e9:c5:72:
         eb:b6:ba:dc:a3:6f:e9:43:b1:23:1e:5a:78:c0:ef:ee:17:11:
         6b:b9:55:30:81:13:91:58:e4:99:bf:ed:48:86:81:a1:fd:38:
         e6:fc:7c:c8:b5:2d:29:48:fc:32:e6:6f:07:d7:3c:48:ed:dd:
         6b:68:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:34 2025 by rpki-client