Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File:                     dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier:          S5Py+zl5PvGfc3zTMJu6GzbdmUXrqGkxsDPzZH/LqTg=
Subject key identifier:   10:EC:6F:BE:92:04:3B:D5:72:AF:23:93:7C:DA:DB:4C:66:89:61:D0
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer:       /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial:       0198D698898EDA480880734E48F7CE6C3607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number:          04F4
Signing time:             Sat 23 Aug 2025 11:02:57 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:57 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:57 +0000
Files and hashes:         1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: fU4UfM9D2Othwhqyoy3e50GZ49N0EmrleCavm7X5gd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:89:8e:da:48:08:80:73:4e:48:f7:ce:6c:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
        Validity
            Not Before: Aug 23 11:02:57 2025 GMT
            Not After : Aug 24 11:02:57 2025 GMT
        Subject: CN=10ec6fbe92043bd572af23937cdadb4c668961d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:f6:82:fd:b2:df:f6:e3:51:29:27:c8:f0:
                    81:7f:2b:d4:75:c7:9e:09:4f:83:63:e2:2e:49:cd:
                    b1:55:8b:ff:62:cb:06:b3:b1:8c:b4:51:7d:28:83:
                    ee:c0:79:ea:92:59:dc:49:28:08:fb:eb:2b:ce:d8:
                    3b:26:f6:f7:28:90:9f:cf:1f:16:bd:91:6b:e2:f4:
                    76:6c:e7:9c:46:c2:ca:78:09:fd:da:a1:9a:c3:3e:
                    18:25:d0:dc:98:47:63:5d:f3:f0:87:4a:01:9e:53:
                    91:82:e6:60:33:49:33:63:ef:fb:05:28:30:8e:9a:
                    b9:2f:00:fc:f3:d0:39:f7:11:11:8b:b4:c8:af:f8:
                    74:16:d0:c6:fb:83:2e:12:a2:40:54:c5:15:5c:7a:
                    10:16:26:5e:9b:3c:6c:41:1a:cf:21:78:41:65:96:
                    5f:f6:e1:9f:ff:16:d0:54:8b:db:10:05:8c:12:04:
                    61:48:de:c9:35:2f:d5:6d:e3:7c:fa:6b:20:a8:65:
                    0d:91:c2:df:5a:33:f2:3d:81:83:17:4f:df:52:98:
                    8e:ee:9f:01:91:bb:17:23:34:a4:bd:e8:28:89:8b:
                    3c:49:6a:c5:bb:64:e5:d8:43:0e:bd:2d:11:3f:45:
                    1a:95:67:45:d5:99:9c:e5:07:66:2c:24:b1:b4:72:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:6F:BE:92:04:3B:D5:72:AF:23:93:7C:DA:DB:4C:66:89:61:D0
            X509v3 Authority Key Identifier:
                keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:16:18:bb:ee:18:cf:0b:5b:5b:a5:ad:e2:b9:d3:c3:c9:
         08:98:af:ef:2b:af:d6:e6:62:9f:25:d2:ab:b9:84:d9:aa:ea:
         95:43:a2:9c:63:51:47:da:2f:28:16:2b:ae:b6:dd:1e:a5:05:
         e7:3b:a9:94:4e:a2:a1:2a:d8:df:db:d0:d1:62:8d:69:a2:17:
         2a:6c:d4:d0:76:9c:e6:4e:50:1f:9b:85:eb:53:b7:70:ea:af:
         fc:59:51:b1:62:f8:6a:29:ac:3a:16:af:e7:fa:f2:cc:71:03:
         c2:96:cc:b0:25:c6:c4:f7:29:f4:58:7c:c6:02:5c:0f:72:ef:
         56:a2:6e:5b:34:cd:59:7c:e6:e2:6d:bc:c4:dd:87:cb:62:23:
         ca:fa:5e:c7:24:93:df:cf:5e:4e:34:8c:0f:0d:9f:d6:e8:4f:
         82:18:20:86:a0:cf:5b:28:cc:4e:bd:fa:24:a0:f3:f6:72:13:
         bd:9c:c8:91:0d:be:06:1e:a1:46:41:ed:02:54:62:90:a6:da:
         90:14:63:06:ea:83:3c:5f:b1:a4:a0:80:ec:3e:de:03:34:13:
         a3:d4:59:00:7e:6c:d8:84:bd:71:1a:75:be:27:0b:b8:db:4a:
         27:cc:06:6f:3e:35:f3:c6:0d:aa:df:cb:39:d0:30:ad:25:60:
         3c:e2:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:05 2025 by rpki-client