Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          sFMl0m2QZlfQyLaIuGbl9tsevJS5ROLaexY3VhNzYs8=
Subject key identifier:   06:02:A2:87:63:9A:9D:72:CF:B7:AB:4B:23:90:92:B4:DC:45:9C:53
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       0198D4E08F60CE6B4DB56E01328656766746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          1644
Signing time:             Sat 23 Aug 2025 03:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:23 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:23 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: AXMQw0HjRmvfguAlKJMG44//Vv+uaHisiL6tBnN41Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8f:60:ce:6b:4d:b5:6e:01:32:86:56:76:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: Aug 23 03:02:23 2025 GMT
            Not After : Aug 24 03:02:23 2025 GMT
        Subject: CN=0602a287639a9d72cfb7ab4b239092b4dc459c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:b8:cf:e5:3c:0b:d5:7c:3e:6f:88:5d:d3:
                    1e:09:97:4c:38:ec:e4:12:a9:bc:8a:0f:d9:37:98:
                    58:bb:36:86:77:12:eb:c1:52:1d:dc:bf:9e:81:73:
                    b6:0b:91:53:2c:5a:35:9d:4f:ca:42:76:72:db:f6:
                    07:c3:7a:02:4a:d3:97:d7:34:3a:b1:35:7b:45:55:
                    49:d9:f1:41:0b:73:a3:ac:91:71:ea:80:b4:66:c2:
                    cf:62:96:c7:a4:0b:fb:ef:de:4d:7b:65:5b:63:b3:
                    42:27:a7:15:3e:d3:89:a6:bc:16:9e:83:84:b0:47:
                    1b:f4:09:5a:1d:82:99:45:59:8b:fd:d6:09:44:db:
                    f6:30:5c:e6:f4:f0:ad:c1:92:5f:79:59:d9:52:4a:
                    25:42:99:06:f0:23:72:d5:66:5a:94:8b:01:a2:91:
                    10:ec:3b:c8:34:13:74:88:e7:cc:5d:ee:16:54:81:
                    76:71:35:fb:57:72:6c:ff:3f:93:fb:71:41:32:2e:
                    33:5c:34:2d:af:76:fb:cf:71:5c:f9:b8:29:2d:5e:
                    f8:67:29:92:f5:30:58:d5:63:d1:53:d2:a4:72:ff:
                    f9:c9:ef:f8:a1:06:a4:50:8a:75:8e:b0:6d:7c:a7:
                    4d:2e:b7:68:cf:88:fd:43:33:d0:a2:2c:51:57:82:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:A2:87:63:9A:9D:72:CF:B7:AB:4B:23:90:92:B4:DC:45:9C:53
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:36:a4:67:69:c0:46:d8:f9:52:06:d9:d7:41:45:1b:4b:eb:
         f3:ba:7e:0a:55:89:e0:8b:f1:3e:a2:39:4e:f4:ff:34:61:0d:
         6b:04:7c:1f:23:86:3a:e0:30:96:5f:4e:d5:29:97:d5:de:3e:
         f3:e6:51:ed:81:63:40:75:66:a6:5d:74:dc:7a:8f:b7:72:2a:
         09:a0:8b:a6:0e:5f:49:14:55:94:f5:89:40:a9:ee:b3:b1:e9:
         da:95:e1:3f:02:d7:69:a0:e9:55:00:e0:18:f5:7c:40:83:1c:
         20:0c:89:3e:a0:b1:c3:63:38:41:8e:3c:5c:da:6c:a9:19:dc:
         bb:3c:55:c2:eb:1e:92:8b:4a:50:92:cb:07:14:a2:9b:5b:ae:
         3a:c8:c8:9f:e3:4d:1d:03:13:38:62:e1:1d:bb:f2:dd:14:4f:
         b3:56:10:45:fa:e3:e9:73:c0:dd:b3:64:28:f6:83:21:a7:16:
         d0:cc:32:15:4b:44:d8:58:09:c5:b9:8c:31:9b:4e:58:07:ea:
         98:46:a1:dc:b3:2d:91:7a:d7:41:11:5a:97:60:6f:51:6d:d2:
         f5:29:9f:61:97:d8:18:04:79:9a:f6:db:1e:79:00:88:72:a9:
         7a:72:ce:af:6f:b1:56:43:f2:c1:1f:3b:05:e3:45:e0:5d:5b:
         82:ed:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:32 2025 by rpki-client