Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          WVewF7x9ZWeHKnAOoefw01Xc984XbLsz9/q5RWxKILI=
Subject key identifier:   AD:D0:21:E0:23:B7:61:02:A4:6B:40:1E:A6:58:84:C5:74:8E:D4:EF
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       0199239FDEE980EE6997025D7A8CF82A129E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          0BF6
Signing time:             Sun 07 Sep 2025 10:01:43 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:43 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:43 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: l+vrucLHII2T0x+7nqam2uY2hzBIYqDeOU4+raeAn5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:de:e9:80:ee:69:97:02:5d:7a:8c:f8:2a:12:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: Sep  7 10:01:43 2025 GMT
            Not After : Sep  8 10:01:43 2025 GMT
        Subject: CN=add021e023b76102a46b401ea65884c5748ed4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:34:9c:4e:23:96:89:e3:e0:48:4c:d5:2a:
                    f2:07:f4:ea:ca:f7:bf:0f:2a:38:97:2f:9f:3e:e5:
                    99:4b:8b:96:0d:60:d2:b5:8f:5c:20:3d:ea:a9:0f:
                    0a:19:57:07:4e:9b:5e:3a:8d:74:41:34:a8:08:fe:
                    14:23:20:11:fa:f4:11:09:48:73:67:5a:39:94:0b:
                    d6:b5:6e:e9:d4:c0:99:c8:4e:3b:eb:6f:92:04:72:
                    f4:6a:86:96:49:07:a6:df:f8:12:2c:fc:89:d6:bb:
                    93:66:3d:d1:73:78:df:a7:5d:69:77:68:e8:4e:1c:
                    75:f2:1f:9d:ab:13:74:b7:83:07:51:50:6a:8a:1c:
                    4f:a8:71:a4:f3:71:19:1d:8b:37:45:0d:69:3a:11:
                    dd:19:c3:87:78:6f:87:2f:a8:a5:e6:3d:72:5b:d1:
                    2b:ba:98:5e:1b:8d:9e:56:db:18:6a:b1:76:91:7e:
                    c0:2f:48:0c:b7:10:0a:9b:4a:68:3d:9a:a5:c0:19:
                    5f:80:c3:00:e7:52:ff:ea:6d:d0:95:cc:64:7a:7e:
                    57:1c:1c:01:c8:16:91:8e:ec:2b:c9:af:18:44:df:
                    8e:22:d0:d6:2d:82:ad:80:16:fc:67:03:3f:eb:6b:
                    c6:c0:8b:3d:c4:9c:42:16:ba:5d:e4:6b:f1:c8:22:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:21:E0:23:B7:61:02:A4:6B:40:1E:A6:58:84:C5:74:8E:D4:EF
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:0e:db:84:ce:79:c6:04:9b:34:a9:94:cb:fc:f4:93:f2:
         da:75:39:d9:72:ba:97:63:09:a1:8b:f0:90:18:6c:cb:4d:04:
         91:46:64:82:40:f3:8f:36:81:c9:d0:26:50:1b:9b:d3:ef:dc:
         f7:14:e8:83:b6:f9:89:2a:be:31:ee:c0:5c:87:0e:53:2a:50:
         c2:a0:6e:6d:c4:17:f2:e9:e1:86:f3:ca:37:76:51:a2:c2:c3:
         35:b9:b7:46:be:d6:67:95:eb:82:c9:32:4a:91:e4:00:b3:3f:
         15:69:b0:3e:cf:2f:05:19:a1:cf:e5:50:e5:e1:bf:f4:90:c0:
         b3:e7:c7:d6:ce:03:c5:54:3e:94:50:15:c6:73:3e:0b:4e:60:
         ba:e9:fa:e1:78:e0:9b:3c:2e:3f:96:aa:84:10:c7:05:5d:31:
         06:b7:4c:09:ac:55:4f:58:79:74:cb:ca:78:f7:78:3c:69:01:
         80:a4:6a:9f:fb:f1:c9:a7:d2:27:de:00:c1:2e:a9:3a:26:86:
         50:99:48:5c:40:b2:c0:0b:86:4c:8a:7e:59:c8:77:25:ea:1e:
         d6:25:1a:58:e6:0a:9a:5c:7e:b4:22:6a:12:e3:7b:57:2f:a8:
         68:84:5e:0c:f2:e1:be:32:28:f8:41:e4:7f:7c:c5:a1:56:1c:
         71:9a:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:38 2025 by rpki-client