Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File:                     cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier:          Y54ihXgjqLHx1PzKP7XAc/uejaGGXmi7wMlVWpKbaL4=
Subject key identifier:   A6:3F:C5:1F:52:B9:22:75:CD:87:5F:3C:81:D6:E0:7B:12:2F:06:AA
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer:       /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial:       0198D4DFE5731E03B890E36A167722D3BC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number:          06BD
Signing time:             Sat 23 Aug 2025 03:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:39 +0000
Files and hashes:         1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: Yedj95WbOgCgIv4Ks0M53J7xDqrV8S0R8Zdy3Awx0sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:e5:73:1e:03:b8:90:e3:6a:16:77:22:d3:bc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
        Validity
            Not Before: Aug 23 03:01:39 2025 GMT
            Not After : Aug 24 03:01:39 2025 GMT
        Subject: CN=a63fc51f52b92275cd875f3c81d6e07b122f06aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:e1:9e:e6:f9:28:0b:fb:5b:d6:8d:ee:f4:
                    f6:bc:63:a6:17:ed:92:1a:68:8b:66:0d:b2:0e:5f:
                    20:ae:1e:d1:9f:c8:2b:a3:e8:3c:24:da:2c:2b:f2:
                    37:30:12:62:ac:dd:07:7d:b8:7e:6f:09:a2:3e:96:
                    93:06:75:f3:ad:71:b7:84:75:9d:bc:3b:e5:c2:b3:
                    3f:be:96:21:12:92:65:6a:ce:20:49:35:03:10:6f:
                    4a:22:39:81:0d:73:73:6e:dd:62:e7:dd:e6:f8:f1:
                    2b:05:79:db:43:1e:2d:52:62:07:a4:98:46:71:40:
                    72:84:e8:84:c4:d0:d5:5b:17:61:6d:d3:86:c7:b2:
                    2d:36:a3:8b:55:e7:32:65:97:80:b5:27:73:0f:9a:
                    f2:a2:3c:5f:a1:9d:b9:65:f1:89:29:55:22:38:6e:
                    27:19:f5:09:0c:18:81:42:2d:84:1b:b4:be:91:9a:
                    1a:69:50:20:40:0c:f5:60:b6:2e:4a:08:15:31:8d:
                    a4:56:3e:9d:d3:cf:6b:6a:a6:85:43:ba:fa:be:7a:
                    a4:ce:ff:a1:5c:39:e3:e2:b2:10:9c:e1:be:2a:37:
                    d4:70:ba:ee:63:5c:44:c2:63:54:1f:d6:0f:9b:56:
                    be:85:20:75:2a:cb:8a:18:5d:66:97:eb:4e:d4:d4:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:C5:1F:52:B9:22:75:CD:87:5F:3C:81:D6:E0:7B:12:2F:06:AA
            X509v3 Authority Key Identifier:
                keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:78:5b:b5:f4:7e:00:df:1a:b5:2c:c4:a3:d3:3e:e9:44:94:
         24:e6:41:53:bb:23:5b:a4:fc:49:b3:ed:7c:91:e2:cc:dd:0d:
         39:8b:7a:54:c6:1f:ba:50:0c:50:b3:9b:ce:ef:2e:f2:20:18:
         09:c7:17:db:c3:45:30:3a:7f:a0:73:62:cc:f5:74:31:ba:54:
         bb:8f:a7:e6:82:c2:7e:d5:c8:11:fd:df:b0:60:35:cd:af:85:
         f7:ee:cf:5e:ac:e0:1e:3c:ab:cd:9e:86:1d:67:79:81:ea:45:
         2b:7c:bb:a0:b7:4e:a6:72:54:ec:2f:b4:ec:ea:0d:fb:c9:e1:
         4c:9a:44:66:68:8b:c2:7e:b5:4d:21:be:8f:fc:04:41:f9:e8:
         6d:e0:5c:d9:93:79:41:6f:b2:2c:38:04:3e:6c:56:a9:41:2e:
         2c:03:99:d5:64:0c:1e:16:f3:d0:9b:33:a1:4e:fe:80:0d:d9:
         7b:8f:3f:55:0f:14:54:40:90:c8:f4:de:85:97:f1:a2:b7:35:
         cb:4c:ed:84:0d:1a:c9:8e:ad:e7:c0:55:fc:b4:f4:ca:be:99:
         83:3b:28:8c:f9:e9:19:78:2d:4b:b1:ad:65:fc:d1:2b:b2:96:
         86:08:87:ed:ad:b6:83:e0:24:c7:e2:63:bd:87:fd:3e:ef:72:
         72:6c:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:01 2025 by rpki-client