Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File:                     Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier:          67Dx3QUimuzeTnlTTmy+yuLnN6AKJFuXCdJWpuoB7Fg=
Subject key identifier:   BD:CF:DF:36:71:59:9F:F7:61:32:47:D7:9E:C2:C7:27:C4:93:4A:8C
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer:       /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial:       0198D706049EE4DB22EA3DC9EC9EF8429710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number:          06F9
Signing time:             Sat 23 Aug 2025 13:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:32 +0000
Files and hashes:         1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: h9ZeJr/rvdhZrWY1+7QXgyynDmzBvQUOGHdLRKCwzxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:04:9e:e4:db:22:ea:3d:c9:ec:9e:f8:42:97:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
        Validity
            Not Before: Aug 23 13:02:32 2025 GMT
            Not After : Aug 24 13:02:32 2025 GMT
        Subject: CN=bdcfdf3671599ff7613247d79ec2c727c4934a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:cd:83:94:23:58:48:c0:44:9b:ea:55:ca:
                    52:2b:5c:3c:88:9f:ed:ac:1e:ef:aa:98:77:51:1c:
                    a7:7d:05:53:37:78:b8:47:1a:df:67:b9:2a:c8:1d:
                    b3:30:d3:d1:ad:3f:bf:4f:70:b4:da:f7:98:bd:36:
                    21:a3:15:82:6f:3d:5c:7b:c7:9f:ec:91:6b:1f:58:
                    c3:2a:3b:31:df:e6:9c:e5:36:a8:f0:3c:f5:85:41:
                    07:3c:cc:ac:2e:7c:f7:cf:07:c6:32:f6:c2:60:6e:
                    a9:8b:a3:d1:ee:b9:83:8c:16:bf:45:21:e6:c6:e9:
                    ab:46:d2:28:03:fc:94:6d:4a:1c:59:1d:ec:11:07:
                    50:d9:5b:64:e2:a2:5e:ed:a9:1e:27:17:6e:4c:f3:
                    9a:08:b4:1b:33:c6:ef:1b:a2:c2:c1:e3:bc:d5:c8:
                    eb:7e:5b:44:14:b4:b8:b7:b2:89:cf:d5:51:18:e7:
                    f9:be:93:26:be:24:63:54:ec:a2:20:81:f1:2a:91:
                    1b:77:7d:f7:86:bf:b2:77:93:a6:c6:c9:dd:9c:91:
                    3f:70:bc:1d:3d:5b:83:e5:49:ce:60:1c:18:65:d7:
                    4c:7f:a9:f8:97:df:bc:9a:bb:e4:81:b7:4d:cc:b5:
                    1f:59:e3:fd:2e:40:9b:83:72:ff:66:02:d6:9b:3f:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CF:DF:36:71:59:9F:F7:61:32:47:D7:9E:C2:C7:27:C4:93:4A:8C
            X509v3 Authority Key Identifier:
                keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:b7:c4:68:93:59:b1:68:93:d7:1d:b9:eb:69:ce:6d:cc:
         da:11:70:f9:a8:77:64:04:48:fd:1e:78:8a:51:b0:3a:61:bd:
         50:6f:98:eb:cb:4b:8d:ed:0e:9f:42:ef:ff:b9:8a:ae:b5:88:
         9e:69:7a:2c:49:41:66:4d:d5:ed:ab:e8:8e:72:15:2b:fd:a2:
         7c:ac:3b:1e:fa:b1:ba:af:c5:61:61:bc:92:1d:35:6a:61:c2:
         eb:dc:64:e9:64:87:45:29:b2:fa:2c:29:d3:c9:e9:23:50:d7:
         78:8f:4b:4a:83:96:ae:3f:ae:df:2e:d5:42:a0:f3:63:f3:e2:
         bb:e2:1b:08:61:4f:86:8e:7c:b0:cf:3e:95:f3:bd:c4:1f:e3:
         03:6f:b6:60:23:09:33:4e:3a:09:93:20:da:e8:de:da:fb:1a:
         63:d2:c6:84:99:66:46:84:32:ab:fa:85:49:70:ff:a7:fd:77:
         dd:7b:74:b0:53:75:24:be:01:35:15:87:50:64:8a:17:f5:81:
         13:d2:cb:e8:32:37:79:32:75:a9:f3:ee:52:bc:51:20:4e:13:
         be:b6:53:4c:82:33:83:47:01:ec:b2:d4:9a:12:83:2b:d3:83:
         7b:c5:24:c1:34:08:b7:d8:84:8f:99:1b:8d:a1:87:ab:60:4e:
         88:ac:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:34 2025 by rpki-client