Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          X5jkrAuTzxQoIWNr4afSCWCJ1jq/DskYooutZ9jA6Rs=
Subject key identifier:   73:60:C4:DA:F8:38:E4:24:34:CF:26:45:6D:6D:D7:CC:78:E2:65:C4
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       0198D4742BECC48129CFF7D3CF92555C9220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          138A
Signing time:             Sat 23 Aug 2025 01:03:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:59 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: q9hcvxeZG06PVUK0kdDR+cOLWvVPYuVioVm20/NnOMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:2b:ec:c4:81:29:cf:f7:d3:cf:92:55:5c:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Aug 23 01:03:59 2025 GMT
            Not After : Aug 24 01:03:59 2025 GMT
        Subject: CN=7360c4daf838e42434cf26456d6dd7cc78e265c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:3f:3e:77:63:fb:06:9c:1d:14:4b:3b:a6:
                    99:4e:83:10:77:96:1f:f8:37:07:e2:67:f1:1d:f4:
                    0a:e9:7e:20:ef:1b:d6:95:c7:fc:10:0c:b0:40:fe:
                    cc:c1:b2:74:0c:a0:86:18:5d:76:ee:51:91:33:a9:
                    44:e3:3b:19:ab:f0:c0:94:d6:24:4a:69:f8:1c:e7:
                    47:df:85:e8:d6:50:e7:ba:fb:45:70:35:4d:13:cf:
                    fe:21:89:5e:22:5e:1f:82:9b:d2:c7:37:74:79:3c:
                    a6:fd:45:c1:72:89:ee:b5:18:45:cc:62:76:c1:05:
                    94:72:b4:b5:19:61:c3:98:f5:13:27:23:b2:ba:6e:
                    2d:4d:a9:9c:af:09:e6:3c:1e:d0:e6:7d:a6:4b:31:
                    9e:6a:ad:ce:29:e5:8b:86:24:cd:99:00:99:fb:86:
                    2b:95:a4:48:03:73:1d:96:e5:ea:de:74:05:f1:8d:
                    8c:2b:7e:8d:ca:b0:e0:74:6f:5d:bc:75:84:a8:53:
                    7f:7b:bb:75:69:08:9a:10:8e:c2:3e:51:08:08:65:
                    3a:00:70:0b:2f:72:50:a9:54:d2:49:3e:f5:bb:6e:
                    18:e2:d9:e0:8c:56:f5:2f:bc:e2:9a:cf:5d:1d:21:
                    4f:d7:98:f3:5b:3f:78:78:dc:5b:99:c6:3b:b3:05:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:C4:DA:F8:38:E4:24:34:CF:26:45:6D:6D:D7:CC:78:E2:65:C4
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:72:d5:5f:db:5f:43:50:34:0c:a4:0b:7d:a0:90:d7:3f:
         bf:d9:c4:64:e5:34:92:75:d4:7a:ad:b2:de:e8:40:12:d9:07:
         61:10:e4:56:a8:91:0a:6c:12:5e:09:e2:db:5b:e5:a6:ee:d9:
         ce:8c:50:e0:64:54:93:b2:e2:81:a0:6e:96:10:2b:3a:4d:ac:
         d0:0f:f4:7c:36:56:2b:de:f1:be:1f:0b:36:1f:0f:06:41:a2:
         76:de:97:5a:1a:ee:10:e3:01:4f:96:35:a5:3e:01:28:62:22:
         7f:b9:1a:42:e0:8d:8e:41:a6:28:e8:f1:30:59:9c:2c:e1:9f:
         c2:4d:e3:2f:16:6f:59:c9:77:f2:82:6b:55:58:0c:25:84:41:
         71:2b:ac:83:ad:13:59:de:75:75:e1:ca:c2:90:03:90:50:dc:
         5f:1a:32:9a:23:94:8d:fb:ed:2a:07:0c:b1:02:00:ca:da:55:
         16:32:e3:59:93:32:08:c6:12:67:8a:d4:0e:d2:30:1d:a1:59:
         46:9d:f0:78:cb:38:4d:fa:76:d3:8f:53:a0:bf:02:6e:e5:2a:
         47:5a:8b:56:f4:1e:04:c3:57:3b:b6:07:43:17:3a:34:2c:7d:
         cc:b0:de:5b:b2:ee:b1:42:8c:2b:f7:01:bc:19:52:4f:19:11:
         8e:0c:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:03 2025 by rpki-client