Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          mhNdF66DelKiUmW4Tg9bKbSE/p+SOrjwE6KB+zlHdJk=
Subject key identifier:   B5:15:70:88:F7:A8:D3:12:9A:81:8C:05:E1:FE:B7:91:DC:D4:F0:16
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       0198D65F2EFB3FD4DFA9FBA18393628223EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0C73
Signing time:             Sat 23 Aug 2025 10:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:18 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: GOPTzH3gbwJIl9Ktlhivlu2Y7YttuBGq8utnJRjOfEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:2e:fb:3f:d4:df:a9:fb:a1:83:93:62:82:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: Aug 23 10:00:18 2025 GMT
            Not After : Aug 24 10:00:18 2025 GMT
        Subject: CN=b5157088f7a8d3129a818c05e1feb791dcd4f016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:f9:87:3c:73:25:22:b5:9e:e2:3b:e8:13:
                    c3:95:01:58:e3:21:0c:c6:45:7c:f3:0c:79:f3:b7:
                    c4:d9:a0:4d:9f:be:ce:d7:0f:4d:45:f6:73:c5:69:
                    fe:09:7a:74:b8:74:2b:cd:5a:56:81:3c:5e:79:d6:
                    b0:1f:70:77:02:76:29:13:8d:87:1e:92:78:c5:f5:
                    e6:e9:4a:9c:cb:e8:a5:d7:cb:25:2b:32:ff:99:36:
                    1d:22:85:4e:d1:76:21:b7:b0:90:e7:e0:35:6a:3b:
                    db:50:dd:57:03:2e:06:b5:f3:b4:71:ef:da:84:6c:
                    a7:e2:5f:ed:34:42:01:a7:8a:e0:d2:8a:69:c3:fd:
                    31:5c:d7:11:47:bb:00:83:6b:4e:c4:2d:4a:50:bb:
                    56:9a:b4:8f:f8:61:1a:af:22:cc:79:28:30:cc:0b:
                    38:f0:42:88:16:cb:20:d6:4c:55:b5:39:d4:a3:d6:
                    0f:c5:17:01:e6:4c:a7:51:4e:02:22:c8:79:02:10:
                    e7:75:12:a4:fa:c2:9b:9c:ae:2b:33:cd:0e:59:72:
                    46:cb:31:f3:0b:41:72:00:6d:14:bf:a4:cf:f8:9e:
                    18:d3:99:85:d2:ec:8a:b3:59:71:7c:47:ca:61:7c:
                    b1:bb:04:97:c3:1b:47:0a:2a:4d:17:59:e8:67:21:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:70:88:F7:A8:D3:12:9A:81:8C:05:E1:FE:B7:91:DC:D4:F0:16
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:50:0a:f3:10:20:87:81:5e:dc:5e:a0:08:6c:97:1e:fa:
         f4:40:e1:95:7b:b3:cc:e9:32:b7:dd:e5:e3:3c:c2:2b:7b:13:
         5d:1b:18:c3:8b:08:d9:30:84:c7:9c:90:e2:7a:8b:48:3f:31:
         08:9a:6e:79:c9:64:dc:17:57:7c:39:c1:8a:10:87:f2:ab:ec:
         88:26:4a:4b:20:51:9c:26:5b:a9:3a:a7:e5:29:c8:a0:81:c7:
         94:04:1f:20:5f:1e:4d:20:56:a8:b3:91:cd:ce:98:f1:e1:6c:
         ce:48:1d:bd:50:7e:5b:59:16:90:cd:9c:ef:b1:8f:7a:22:23:
         81:5f:e0:d8:cd:9f:9c:fd:83:d4:27:ef:96:05:25:40:8d:4c:
         cd:2e:e3:26:cf:75:48:17:91:28:bb:5f:6c:2a:10:8d:18:fa:
         60:c1:42:0f:ab:cf:dd:69:02:bc:5e:8c:ea:37:e2:61:f8:1b:
         41:52:bd:a2:e2:45:c0:b9:78:83:ff:c2:60:6a:fa:7d:ae:fc:
         8b:f7:56:55:c6:44:ea:a4:84:c8:29:9c:18:18:93:06:1d:26:
         1d:64:9f:50:72:98:c5:7c:07:25:2a:49:8f:57:e1:f9:ca:2d:
         c4:0f:29:bf:fe:14:bf:61:9f:f7:b4:68:0d:31:c4:e1:cc:d3:
         f8:63:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:24 2025 by rpki-client