Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File:                     c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier:          IjlQhCzIrzuiEves/2E0s/OD2M1XErb5+MP2FvaQk+4=
Subject key identifier:   E4:2E:8E:98:35:6B:6A:E3:BF:F3:B3:F3:A5:6A:8C:C5:ED:BD:E8:C7
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer:       /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial:       0198D65F3DF3EED45A97F24C5EBED7F7BABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number:          06E8
Signing time:             Sat 23 Aug 2025 10:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:22 +0000
Files and hashes:         1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: bgqbGQJJeiKtefIpjCcTjbUVhae9bfH98IvXiB8R/RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:3d:f3:ee:d4:5a:97:f2:4c:5e:be:d7:f7:ba:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
        Validity
            Not Before: Aug 23 10:00:22 2025 GMT
            Not After : Aug 24 10:00:22 2025 GMT
        Subject: CN=e42e8e98356b6ae3bff3b3f3a56a8cc5edbde8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:ba:2f:f5:be:3c:4d:98:a4:94:3b:80:66:
                    51:f0:e4:2c:48:3d:79:d2:ba:69:89:d8:e1:d0:e8:
                    74:cd:58:53:7d:ed:df:82:c2:8c:61:77:1e:f3:6d:
                    5e:1f:c1:7a:df:4c:31:5e:3e:3d:58:72:53:7b:1e:
                    ae:8f:29:20:74:01:b1:72:93:13:6e:c5:52:43:05:
                    33:64:d0:eb:ea:f7:56:8f:14:60:33:41:f0:68:ca:
                    dc:71:d3:ff:ea:4b:6b:b9:a2:5f:8f:07:ba:23:37:
                    46:21:1a:24:2d:1e:65:5c:36:51:75:5f:ac:d0:99:
                    4c:ad:9a:d1:45:45:ee:70:fe:a5:97:3a:91:0a:17:
                    82:cb:04:98:65:98:c6:af:8d:e2:ff:ab:93:65:2a:
                    2c:e8:6d:9b:9b:3f:17:04:8d:7f:a5:20:95:b8:c7:
                    3d:c4:86:fa:16:dc:a2:dd:26:0a:1f:a8:a1:37:42:
                    d4:c9:5e:05:99:24:d1:a6:86:33:b7:8e:04:c7:b5:
                    92:92:42:c6:b3:00:0c:60:6c:df:07:fd:d1:04:36:
                    6f:b8:4d:73:0e:a8:0b:fa:0f:06:f1:b0:ba:ff:65:
                    f1:f1:95:a6:99:94:48:53:fe:39:de:f2:23:40:e0:
                    71:cd:66:7c:65:62:21:95:16:11:ef:1f:56:86:13:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2E:8E:98:35:6B:6A:E3:BF:F3:B3:F3:A5:6A:8C:C5:ED:BD:E8:C7
            X509v3 Authority Key Identifier:
                keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:50:ec:05:bf:80:30:cd:92:88:11:af:d7:fa:8e:bb:3a:
         37:9e:0b:24:a7:96:25:69:b2:57:7f:70:45:e7:7d:cd:2c:e0:
         4a:ed:00:a1:da:82:a6:d0:c4:ce:1f:35:3f:e6:e3:ea:04:86:
         e7:3e:2f:4c:f5:63:50:11:b6:07:a1:9c:7d:4f:56:2e:b1:10:
         82:ac:b7:55:4f:58:f4:2e:77:80:d9:81:79:8b:c4:30:a8:5e:
         4b:69:05:2a:21:41:d7:c8:34:8b:6a:d8:1c:8e:f5:8e:06:73:
         a1:4c:de:ea:cd:3c:1d:40:1b:6c:fe:ed:b8:ce:92:db:50:f9:
         78:a0:e6:ff:0e:8e:1a:da:89:b8:27:83:c0:30:b7:1e:cd:d9:
         ed:fb:bd:76:06:9f:8e:92:63:ad:10:55:1f:e7:2b:a9:d5:c4:
         c0:b0:06:c9:60:c8:46:9a:fb:fe:e7:2b:2f:57:94:76:b0:ae:
         5e:9b:ab:13:ce:fb:3a:17:b9:7e:c8:31:3c:10:21:a1:c0:7c:
         2a:2b:43:93:76:78:f0:55:9c:94:f4:fa:fc:42:55:25:2a:32:
         5b:cb:9b:da:48:28:ec:54:0a:a8:a9:03:82:5f:a1:30:4d:5d:
         93:4d:f3:9d:c6:6c:ec:94:09:6a:12:c8:ee:bd:65:ad:85:75:
         fe:eb:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:48 2025 by rpki-client