Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
File:                     b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json)
Hash identifier:          vk334bbrOQsFLRGSsnrv/fm8gUsllekkg+XE7ohLVCo=
Subject key identifier:   B0:6D:C6:04:66:6D:4D:26:C5:7C:42:04:B3:CE:9B:F5:7C:2A:DB:6D
Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Certificate issuer:       /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Certificate serial:       0198D4E0BF2F8935EDDEBD9D47FAED83E440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
Manifest number:          0CC8
Signing time:             Sat 23 Aug 2025 03:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:35 +0000
Files and hashes:         1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: 2bsR5Epfuk/6ayRMBEAJDuyExsjSd/szlgtxTIbK47k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:bf:2f:89:35:ed:de:bd:9d:47:fa:ed:83:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
        Validity
            Not Before: Aug 23 03:02:35 2025 GMT
            Not After : Aug 24 03:02:35 2025 GMT
        Subject: CN=b06dc604666d4d26c57c4204b3ce9bf57c2adb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:98:82:10:60:ae:4c:bd:62:00:f3:78:fe:
                    f8:10:2f:c8:ab:a1:b1:ca:dd:3c:e3:45:7d:0a:02:
                    b9:6f:c5:ca:07:d4:a3:23:e0:85:57:ee:fc:1d:2e:
                    f5:a7:1c:25:5f:f5:1c:f8:b1:a5:1b:4d:d4:cc:54:
                    22:e7:30:28:0a:b6:fd:ee:34:76:ea:bb:b7:13:89:
                    d4:f8:ef:24:a0:0b:07:d9:20:91:dd:78:3c:ce:1d:
                    f9:3f:3a:b6:02:59:93:ba:85:08:96:da:f7:69:73:
                    9e:bf:b4:88:d0:f2:66:23:22:c6:c4:dd:6f:55:23:
                    b5:30:4a:cf:e8:f0:f6:7b:70:a1:97:06:40:43:78:
                    3c:70:97:4a:e2:e0:c7:6b:bc:3e:89:e0:e3:ad:a6:
                    f2:21:97:6a:09:ac:f8:af:ab:55:7a:07:8e:af:6f:
                    05:52:ad:ee:40:43:06:74:0d:a0:c5:57:98:b4:7a:
                    54:55:97:18:52:f7:38:31:7c:cc:3c:6b:62:a9:f6:
                    8a:cf:cd:ab:f7:02:d2:3b:7d:ee:0b:3f:46:96:81:
                    ee:99:6f:bd:c1:28:9d:be:d2:e6:c8:ec:54:d0:68:
                    5d:09:7a:09:b1:02:e9:ec:7e:c6:07:eb:42:de:bd:
                    cf:68:93:b8:51:2e:21:56:6a:5a:96:fe:7a:4e:61:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6D:C6:04:66:6D:4D:26:C5:7C:42:04:B3:CE:9B:F5:7C:2A:DB:6D
            X509v3 Authority Key Identifier:
                keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:15:7d:c6:06:8e:70:38:66:7b:c9:fc:bb:d0:f9:35:71:
         22:6d:63:0f:47:86:fd:cc:c8:bd:2b:39:ad:a1:8d:c8:d8:67:
         dc:71:b3:cc:9f:5f:08:13:29:88:80:fc:4a:44:c1:50:b4:9b:
         4e:9d:0d:bc:5d:f5:7a:13:68:2a:27:4d:7b:db:81:dd:3e:0c:
         bf:81:c1:38:6c:c9:24:5c:da:26:6c:81:ce:87:cf:bf:ed:33:
         66:53:cc:93:4f:e8:d5:4f:7c:60:67:d3:86:21:70:d7:76:a5:
         44:19:26:9c:68:56:9f:d9:d3:da:d6:12:82:c3:09:69:27:c6:
         52:5b:0f:a9:fd:24:72:21:69:a4:e2:23:4b:0d:2a:13:a2:db:
         cb:49:eb:eb:1b:d9:64:be:78:f0:85:7b:c0:c9:fc:13:a4:ea:
         5f:25:f0:4b:f6:5f:47:12:f3:c6:67:c7:c0:36:e2:b3:0c:50:
         1e:26:01:5c:b2:4d:32:82:b1:0e:a8:01:d9:90:77:e8:0f:e5:
         c1:57:8d:b8:70:57:52:98:f7:6f:99:f9:17:13:eb:c0:62:a3:
         02:88:51:1c:db:26:d9:0e:f5:12:96:87:cf:73:83:ea:a2:44:
         21:f2:ae:d1:39:e1:c1:86:57:56:54:7f:79:4d:e2:b9:27:12:
         49:38:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:50 2025 by rpki-client