Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File:                     x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier:          9CdV/RnrGsYVJqINBXvPFaIN8JqcHvU5vRK2I1+0p/4=
Subject key identifier:   73:47:2A:0C:A9:14:49:F7:BF:BD:6A:C5:1F:DD:7F:67:20:A1:80:A9
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer:       /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial:       0198D5BB9D7DACEB23D0A2CDD1F78C1D4EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number:          12B6
Signing time:             Sat 23 Aug 2025 07:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:39 +0000
Files and hashes:         1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: PmnI8qqk5FhMqOma4IdlcmkUE+h9d/+kPXDrXHn7Nik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:9d:7d:ac:eb:23:d0:a2:cd:d1:f7:8c:1d:4e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
        Validity
            Not Before: Aug 23 07:01:39 2025 GMT
            Not After : Aug 24 07:01:39 2025 GMT
        Subject: CN=73472a0ca91449f7bfbd6ac51fdd7f6720a180a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:98:62:1c:9c:bf:74:d9:57:b8:8f:e8:9e:
                    44:fc:03:2c:4a:97:6e:34:15:6e:61:d8:fb:43:35:
                    03:47:b4:aa:6e:5f:93:db:ee:55:87:7d:da:06:c2:
                    80:bc:74:ee:ca:20:2a:f1:53:d8:13:2e:4a:42:74:
                    82:93:bb:b1:27:92:5a:12:85:13:3b:3d:7e:31:47:
                    88:26:69:62:f2:fc:57:6a:0a:f9:f0:19:cb:c8:27:
                    1b:9f:93:14:cc:60:dd:7e:dc:fe:97:c2:d2:24:13:
                    3b:c9:2d:50:1e:b4:b4:2d:49:25:fb:15:d4:8f:8a:
                    c5:6f:68:64:7d:39:53:34:dd:51:1d:75:ba:97:85:
                    cd:7d:8b:71:94:b2:0c:26:66:46:fd:94:fa:0f:84:
                    d4:c6:ec:1d:2b:dd:45:3d:ba:eb:34:09:7b:55:8f:
                    f6:87:9f:42:01:5a:8a:69:b4:14:83:de:d7:f6:3e:
                    5e:fe:e6:18:c4:29:dd:ec:2e:26:71:af:46:89:79:
                    3b:df:62:64:7b:f9:be:e0:d6:fb:87:9b:26:84:86:
                    d7:22:14:92:e1:7e:72:12:fc:bb:8f:04:80:15:b8:
                    ae:fd:f6:89:ca:1e:b0:b5:cc:18:40:24:4d:8b:6c:
                    16:a5:54:82:9f:7b:8d:47:80:b1:72:21:26:8c:13:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:47:2A:0C:A9:14:49:F7:BF:BD:6A:C5:1F:DD:7F:67:20:A1:80:A9
            X509v3 Authority Key Identifier:
                keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:72:27:c3:30:cb:31:9d:70:bd:c5:e1:54:fe:bf:53:44:
         3b:56:0c:e6:63:12:91:ee:3c:88:ce:1a:77:c9:ee:9a:68:a5:
         b9:a5:79:7f:51:f9:31:df:e4:24:69:a4:d6:a4:2a:e8:2f:54:
         60:c3:1a:77:44:43:4e:d2:ef:aa:d1:b8:67:8d:ad:c3:da:5a:
         5f:5f:c0:48:81:80:c4:b5:22:78:92:c6:95:fb:a7:5f:e1:b7:
         b2:84:fe:49:e8:54:b0:e8:7e:b6:01:62:d8:71:6c:89:66:c1:
         4b:05:70:77:dd:c8:72:85:8f:25:63:49:eb:0e:87:ed:50:09:
         1c:18:4b:70:18:14:f2:6b:17:49:2c:52:f9:90:77:f2:cd:77:
         bc:f1:44:71:e3:f7:36:53:0e:25:fa:69:42:26:cc:e8:44:46:
         6e:ce:0d:6c:5e:31:76:d5:12:8e:90:1d:21:8b:fc:d7:62:a3:
         46:49:11:10:c6:f9:f3:e4:38:d6:b0:6a:b1:a4:0c:1b:d3:09:
         42:a3:11:09:ec:e1:40:51:18:fa:0a:7a:f2:47:18:5e:1a:8f:
         d9:70:af:4d:f1:90:53:24:6b:b0:19:ef:13:74:71:8a:74:17:
         bf:11:83:82:1c:e5:e5:b2:88:1e:a5:53:de:b3:a9:4a:0c:49:
         b1:0a:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:03 2025 by rpki-client