Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          zfKH3MZ8ubDl/FtZh5DgOSnwKDLtlFdo7duGzDvzDJE=
Subject key identifier:   D8:3B:4E:9B:4A:A1:2D:70:CF:C4:61:0C:C5:A5:C1:B8:C9:88:A9:D6
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       0198D4E07DC631B9C852B9C9E83556010551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 03:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:18 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: hS+d25uFvnWc7Lt1XZzV2YZEm19tdrPC7ECegKcxkoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:7d:c6:31:b9:c8:52:b9:c9:e8:35:56:01:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: Aug 23 03:02:18 2025 GMT
            Not After : Aug 24 03:02:18 2025 GMT
        Subject: CN=d83b4e9b4aa12d70cfc4610cc5a5c1b8c988a9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:50:c0:bc:68:38:34:fc:9b:e1:45:5b:45:
                    0d:cc:73:ef:39:4c:91:ef:38:18:83:23:49:71:c9:
                    0e:34:38:80:f7:d5:ce:f7:a8:f2:9f:fc:2d:08:04:
                    aa:21:7e:c3:82:16:56:bd:58:60:31:b1:7b:53:71:
                    b4:19:45:67:43:56:06:dc:bf:16:23:19:5e:48:28:
                    fc:95:d5:b9:38:5e:61:6e:af:93:f6:db:38:72:9b:
                    8b:96:b5:d2:75:e9:c0:d8:11:3a:01:1c:ee:0b:f0:
                    18:09:42:d4:ea:7a:f4:a2:2c:d7:b2:ee:c7:62:15:
                    cf:e8:3a:1b:26:62:3d:b6:d5:52:02:e8:e0:02:1e:
                    02:65:ac:c4:01:bc:85:16:53:37:4e:98:16:76:b4:
                    78:95:49:dc:aa:f5:f3:6d:8e:32:90:8d:1b:ca:f2:
                    30:16:a7:f4:08:f7:4c:53:ea:00:6c:81:2c:a9:ac:
                    90:4f:e9:27:3b:84:6c:4d:d0:54:23:91:28:67:e2:
                    71:5e:4c:8f:c1:59:25:c5:ab:bf:f7:bb:4f:e0:a9:
                    67:ed:7b:e9:41:05:19:2c:07:bd:6d:d2:50:88:07:
                    f4:48:bd:d5:e0:8d:3b:e7:6d:39:24:65:b4:45:f7:
                    af:ef:c9:55:c6:b8:c8:9b:82:4a:38:f0:52:94:86:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3B:4E:9B:4A:A1:2D:70:CF:C4:61:0C:C5:A5:C1:B8:C9:88:A9:D6
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:5c:25:3a:6d:dc:87:16:34:9c:c1:cd:40:ad:43:ae:37:
         73:b0:7e:bd:ae:c4:15:62:5b:ee:67:35:a1:a7:3c:03:0f:63:
         9a:fe:34:b0:e3:b1:71:53:48:8b:cc:c2:a1:44:3b:ce:41:c6:
         d6:70:2d:d0:66:ff:5c:fc:18:8b:83:fe:ac:35:76:0b:a5:af:
         b2:d4:19:2e:4f:79:e2:d6:fa:0a:85:f8:74:1a:04:a5:46:be:
         2e:f0:cd:40:e7:10:15:01:5b:2f:f1:ca:97:92:5e:68:59:08:
         d2:d1:a0:24:68:5e:ec:27:16:fb:ee:e1:2a:18:08:e0:f9:6f:
         f0:aa:23:42:29:68:d7:b8:6f:8c:2d:97:cb:0c:95:3c:47:57:
         4c:93:a3:fd:37:09:3b:42:bc:f3:b4:9a:45:ea:98:1f:24:74:
         23:16:63:c9:dd:39:bb:bb:64:e7:c4:b5:2b:12:69:fd:b7:3b:
         81:96:f7:25:91:c2:24:c0:e1:db:e6:2b:24:25:22:9a:c7:f7:
         2f:e2:63:32:40:93:35:cb:ab:16:99:e4:df:a0:ef:33:8b:95:
         ee:89:b8:7f:85:4e:93:0a:a7:95:77:b3:15:29:fe:69:11:88:
         6b:bb:73:ec:92:26:cf:a8:fd:e7:84:c7:c1:f8:f7:73:c2:ff:
         4a:cc:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:31 2025 by rpki-client