Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          hHGyH6mXtJv4TR4+/5skUdAdp6A95cJDlfGd+JRCVNo=
Subject key identifier:   92:BD:01:30:21:46:CE:03:58:7B:28:F8:85:31:7B:14:46:74:83:34
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       0198D70602485223495E42D46A846783F3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          1019
Signing time:             Sat 23 Aug 2025 13:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:31 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: bRRghd9TI0i+mx5orBctwKgyTQ/UGmxOyedhGa0OLTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:02:48:52:23:49:5e:42:d4:6a:84:67:83:f3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Aug 23 13:02:31 2025 GMT
            Not After : Aug 24 13:02:31 2025 GMT
        Subject: CN=92bd01302146ce03587b28f885317b1446748334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:9a:c5:3d:2a:3d:50:ca:93:25:07:24:23:
                    91:62:e9:68:2d:dd:99:7b:a5:56:d3:10:5f:c2:fc:
                    95:cc:46:40:fa:a4:e2:53:08:b6:5d:4d:b8:f6:40:
                    e2:b8:8e:90:78:c9:89:ca:7a:46:7c:bb:03:dd:3b:
                    44:b4:8c:83:23:06:3d:20:fc:90:6c:4f:0e:d2:c8:
                    1e:c0:1b:0e:71:ff:77:11:7c:1e:ab:5b:5e:dd:99:
                    79:03:c4:f4:71:65:64:2b:0e:5d:bc:7f:86:09:1d:
                    db:fe:9b:2a:a6:2b:d0:af:79:2a:b2:67:d9:bb:a4:
                    35:aa:e5:80:e8:6b:0e:64:be:2f:b9:e2:79:6d:d7:
                    80:74:24:7c:07:7f:a3:7a:50:04:43:2e:df:57:8b:
                    50:72:00:50:37:c2:1b:95:aa:f2:8a:81:1f:63:12:
                    65:c6:e7:4b:da:00:bd:43:99:ec:8b:13:c3:79:12:
                    8c:d4:dd:83:66:78:81:69:4b:78:e2:f2:86:ab:19:
                    57:4b:7b:14:65:38:85:db:b3:1d:37:a0:24:2b:b6:
                    16:83:bc:5f:dd:9a:06:be:3b:41:88:f1:ce:85:c0:
                    5f:9f:55:03:88:a8:b8:2e:ae:67:56:a6:fd:42:6e:
                    f1:48:f4:64:f9:35:ea:6f:66:0e:98:eb:e8:69:31:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:01:30:21:46:CE:03:58:7B:28:F8:85:31:7B:14:46:74:83:34
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:5c:07:81:11:54:c4:55:31:82:3b:d6:02:d0:f3:71:18:
         9c:1a:de:77:67:93:62:bb:82:37:4d:9a:00:8d:27:5a:26:b7:
         69:46:b9:41:e1:a7:9e:00:53:e4:20:7b:41:cb:42:39:69:d4:
         2c:31:90:82:08:eb:35:c9:85:64:0c:73:a4:d5:85:5a:99:ef:
         42:40:de:7a:67:c6:55:3c:03:77:04:a7:34:f2:b1:93:63:94:
         d3:90:f5:c4:e5:e2:d9:dd:0f:9c:db:81:2d:95:47:16:8d:bb:
         64:40:bb:2e:b3:b0:96:2a:e6:1a:3d:ba:c1:07:ca:10:a0:15:
         31:45:ef:7f:49:55:20:bb:f6:76:90:b6:7d:01:09:3d:c8:8a:
         2d:b5:fd:5c:0a:e9:e4:65:5b:d6:49:36:f8:30:28:a8:b8:ce:
         2e:da:da:61:c6:b5:66:92:e4:1b:be:e5:50:6f:36:29:66:d1:
         d7:03:7c:ce:9a:18:ef:05:a4:c5:29:72:d4:00:36:9f:fd:63:
         68:3d:a9:1a:05:3f:54:52:f6:e2:d1:84:8d:ec:aa:dc:fb:d8:
         31:b9:8f:41:93:66:d2:d0:30:a3:23:05:56:d4:58:51:3f:7c:
         91:28:29:03:48:68:3b:94:a7:8a:c4:af:8d:6b:16:c6:80:05:
         f4:db:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:12 2025 by rpki-client