Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          Vv4QA6vh7x+1Ywvkfpft2D1CmeMS29QCZU+BZONIwg4=
Subject key identifier:   79:54:DC:FF:EB:1C:5F:0C:34:7A:F2:0E:9E:46:F9:A5:C0:55:71:64
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       0198D69893C5E503900B4BC4800324CFA69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0306
Signing time:             Sat 23 Aug 2025 11:03:00 +0000
Manifest this update:     Sat 23 Aug 2025 11:03:00 +0000
Manifest next update:     Sun 24 Aug 2025 11:03:00 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: tuNI6CrehgD97gYf4x5fAHwMSnh73bBQyMsq5wfgx+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:93:c5:e5:03:90:0b:4b:c4:80:03:24:cf:a6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Aug 23 11:03:00 2025 GMT
            Not After : Aug 24 11:03:00 2025 GMT
        Subject: CN=7954dcffeb1c5f0c347af20e9e46f9a5c0557164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:73:60:b7:e7:7f:1e:63:49:29:3c:8c:29:76:
                    70:11:7c:93:ba:3a:1e:92:06:c1:54:96:b5:5b:2f:
                    3a:51:18:6c:78:ed:2e:53:b6:04:3f:8a:f2:87:30:
                    62:24:e7:17:f3:b5:4a:e2:d9:a9:59:c6:36:ad:34:
                    90:4d:58:33:37:c6:48:12:a5:38:6f:49:ac:49:2b:
                    10:2e:b2:7a:5b:be:e5:0a:e3:33:64:19:f8:0f:3c:
                    30:4c:02:9b:9c:21:d0:5e:ee:3c:78:f0:c6:92:e2:
                    41:74:4f:68:66:ce:f3:fd:5f:d9:0c:a7:3a:ab:22:
                    dc:f0:59:51:6d:0c:da:b7:57:d7:14:c5:40:77:d1:
                    40:88:b6:ff:ae:bf:81:7e:2d:1f:ae:85:66:a4:54:
                    76:61:c0:cd:6a:82:ab:c1:db:d2:9e:d4:fa:08:7f:
                    96:d6:c1:96:f6:1d:34:f6:46:7c:33:c1:a5:e0:9d:
                    7b:5d:94:77:d0:19:f3:bc:40:50:f3:a4:13:6a:ed:
                    8d:52:ce:c4:0a:c0:61:5f:b9:34:4f:18:75:5d:50:
                    ff:97:d0:0a:5f:3c:68:4d:90:96:6d:90:b9:97:32:
                    5c:9b:b3:1a:a0:8d:28:28:65:a0:e0:dc:91:ce:94:
                    ba:d0:16:a4:31:3b:2e:41:7c:84:47:05:d0:d9:da:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:DC:FF:EB:1C:5F:0C:34:7A:F2:0E:9E:46:F9:A5:C0:55:71:64
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:d7:b8:7b:47:98:0a:2f:36:bf:a5:88:92:19:a3:d1:d9:
         af:a4:7e:2c:82:8d:26:4f:97:ad:c1:59:05:54:d8:3c:69:71:
         a2:5b:25:b1:92:5d:50:24:c1:57:bc:54:f6:a3:49:3e:f5:55:
         f2:37:52:ec:dd:14:e0:ec:04:e3:6b:21:8f:2c:d9:54:af:d8:
         68:0d:1c:2f:3d:47:74:41:8a:c0:c6:9d:9f:1b:f5:53:e6:57:
         ad:82:ff:31:6a:be:90:52:62:12:a1:c1:eb:d1:03:5c:6e:72:
         70:22:79:e7:3b:25:e3:da:5f:99:20:a7:1e:ee:be:f7:79:59:
         4c:1a:cd:2e:57:54:c4:fc:5b:ce:78:ee:1b:45:4a:83:38:37:
         bd:21:51:0f:a2:28:a3:08:35:f5:81:89:69:56:32:01:38:45:
         e4:57:28:0e:54:a9:fc:c9:23:df:a0:1a:e5:17:e1:37:2b:5f:
         2e:e7:93:61:29:78:4d:80:2c:1a:f9:f6:4a:8b:89:8c:80:7b:
         ed:cd:b6:0e:b1:bd:f6:fb:23:d3:e7:c5:bf:70:dd:9e:a8:a0:
         b1:da:a7:17:b3:11:af:fe:72:0f:20:9d:3e:44:45:03:49:c2:
         2a:11:1e:02:97:da:1f:89:cf:60:0b:90:38:40:dc:d6:4f:80:
         7f:49:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:24 2025 by rpki-client