Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          qnopUYmr8qRKjqNHmJMSMZRMVkOqY70nxYkWxe79z1E=
Subject key identifier:   C2:A9:06:C1:22:78:08:0E:82:50:8D:8D:46:56:1C:49:E7:4E:1D:D1
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       0197B6D789D00D7A1820D3408FEC122582F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0271
Signing time:             Sat 28 Jun 2025 14:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:08 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: jzioFxzWtDgD7irg8aDwCUrZLZtdNh/uZpBOpIOVE70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:89:d0:0d:7a:18:20:d3:40:8f:ec:12:25:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Jun 28 14:01:08 2025 GMT
            Not After : Jun 29 14:01:08 2025 GMT
        Subject: CN=c2a906c12278080e82508d8d46561c49e74e1dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:df:14:de:7c:af:1b:9e:52:40:5a:64:38:
                    56:26:ae:da:d9:fb:82:a8:70:65:65:91:4a:f8:08:
                    ee:a0:55:f6:94:7f:73:62:14:41:07:ef:c3:9e:7a:
                    ba:ee:3f:ea:f3:a4:90:ae:fa:c5:85:e4:1f:be:06:
                    42:e9:86:ef:17:f0:fd:6a:6f:37:cb:5b:0a:28:68:
                    1f:df:2d:40:28:27:40:6f:28:af:cf:ea:df:80:78:
                    f5:b4:8a:5a:da:a3:02:15:1d:34:1c:e6:26:30:ac:
                    7a:17:0f:26:10:9d:db:b4:4d:71:0e:7b:bb:07:1d:
                    60:49:96:39:95:37:21:86:6f:2a:aa:b6:31:25:f6:
                    8d:d7:71:77:70:d3:90:e3:52:3a:dd:c3:b8:a2:de:
                    51:8c:ff:06:51:49:ba:16:08:5a:c7:b2:2e:59:27:
                    d8:dd:7b:fe:92:8e:29:4c:4e:5a:c9:77:0f:c8:56:
                    0b:e8:f2:52:3e:29:06:f6:68:3c:d5:6e:70:23:18:
                    ae:c5:8e:ee:6d:ed:8c:67:87:b4:9c:cb:f9:92:b6:
                    af:4c:a9:c6:34:fa:6e:b5:45:54:a7:20:b3:f4:13:
                    29:f6:c9:76:de:f6:a3:10:91:6e:c3:dc:ee:07:e2:
                    14:88:f6:03:a8:a2:fc:a2:62:89:f0:02:59:ed:45:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A9:06:C1:22:78:08:0E:82:50:8D:8D:46:56:1C:49:E7:4E:1D:D1
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:2a:cf:11:a2:28:32:2e:8c:3a:68:4f:04:08:12:b7:af:
         bd:d2:23:15:df:fa:5c:f6:06:09:98:58:2c:03:0a:60:a5:3a:
         51:a0:4d:03:38:c4:58:9d:04:9f:3f:52:e7:48:1a:7d:38:fd:
         5e:9b:d1:6e:92:1a:43:08:b9:b7:e4:29:eb:b2:d6:8d:be:34:
         c3:da:14:a1:cd:d5:13:89:22:d1:7f:2a:ce:17:dc:f8:f5:88:
         9e:e7:e1:45:1e:3f:3f:60:a5:fb:8c:6d:be:82:86:2b:4f:02:
         ac:4e:91:a3:82:0a:39:50:09:5f:37:dc:9a:0c:31:d7:d1:a7:
         20:32:fc:3c:71:69:f6:c5:90:7a:8c:31:99:67:35:aa:65:5f:
         92:77:30:81:ee:98:f1:7c:2a:2e:c3:0e:09:f0:12:c9:3a:6c:
         63:a6:9a:3b:3f:e3:7b:03:b3:b3:cc:6a:dc:d5:bc:78:be:ae:
         75:57:b6:ff:ee:4d:0f:ee:32:cc:07:e0:c5:3f:06:4a:82:ea:
         08:dd:25:b4:c7:3b:a5:7b:e1:74:c0:f3:70:7a:a5:4a:b8:6e:
         44:b5:e2:fa:c1:66:7f:55:64:13:5d:9b:2a:01:38:58:f2:cf:
         93:56:5a:81:56:ca:94:e6:dd:0f:56:73:c0:c6:2c:d5:76:28:
         81:c2:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:57 2025 by rpki-client