Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File:                     AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier:          rpagiyes4DePb7XIFwkuTUfnAQK1CoEHybDq6WldfJY=
Subject key identifier:   94:42:CA:07:13:5A:45:F9:0E:6A:A3:02:3B:D8:6C:46:7C:79:AA:A5
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer:       /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial:       0198D4735B3A4D004693C5BC6142450353F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number:          0D5B
Signing time:             Sat 23 Aug 2025 01:03:06 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:06 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:06 +0000
Files and hashes:         1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: w0W7JVvlOzWc8ChLm6EURXXhKLUPut6/vuFHwUBA9HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:5b:3a:4d:00:46:93:c5:bc:61:42:45:03:53:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
        Validity
            Not Before: Aug 23 01:03:06 2025 GMT
            Not After : Aug 24 01:03:06 2025 GMT
        Subject: CN=9442ca07135a45f90e6aa3023bd86c467c79aaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:9a:b7:20:7f:00:17:ac:f3:62:c3:eb:8a:
                    d8:d3:c4:4d:c2:48:47:dd:7f:b7:26:81:22:a9:bc:
                    05:8e:b5:db:b1:12:90:74:93:4a:ca:6c:f2:01:d9:
                    68:56:f3:1f:2d:19:93:6c:18:84:83:38:d2:b0:10:
                    c7:f3:8c:28:b5:bd:95:84:7d:54:80:ca:80:17:b9:
                    fa:54:af:00:48:cb:d2:12:11:14:0a:d9:f9:d8:d5:
                    6c:35:cf:9e:5b:7e:84:5c:4e:a1:88:b0:6a:3b:1d:
                    b3:13:82:26:0a:5e:0a:b9:02:62:5d:fd:56:7d:bc:
                    b9:3c:00:65:d0:f6:ea:4d:4e:86:6e:50:00:ac:a0:
                    bd:95:05:c5:22:4b:3f:00:26:ca:45:d4:e2:49:da:
                    62:ec:11:58:76:72:51:34:f8:10:d0:61:00:83:86:
                    8e:32:29:19:12:d3:95:13:f9:5d:c8:89:a8:82:10:
                    9f:ba:ad:c4:88:cf:a4:c1:41:e9:6d:21:19:b5:76:
                    9e:c7:cc:c4:6d:36:53:b6:85:54:d0:fc:c3:a2:eb:
                    6e:58:e9:d9:e0:21:03:33:40:ee:4d:6c:db:33:3d:
                    0c:17:51:50:32:7c:04:28:1f:df:5f:99:c0:70:b3:
                    53:01:0a:3e:c7:61:36:02:99:34:88:0b:41:89:04:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:CA:07:13:5A:45:F9:0E:6A:A3:02:3B:D8:6C:46:7C:79:AA:A5
            X509v3 Authority Key Identifier:
                keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:36:6f:4f:a3:cc:75:5d:28:66:ce:be:74:f6:88:30:20:
         18:59:e6:fc:03:a9:15:93:80:0d:03:e0:b3:85:75:b3:32:f2:
         42:1f:42:3d:a3:1c:1c:ec:b6:5e:62:b6:cd:4e:f5:f4:31:49:
         58:c2:64:ea:02:ad:19:72:21:8e:10:26:42:12:bb:bf:9f:9b:
         3b:f2:92:4f:d4:2f:72:de:85:c3:3a:9a:65:87:8d:0a:ed:0f:
         c1:e2:d4:e5:c6:84:a5:b1:27:4a:42:ed:f3:a3:19:25:06:fa:
         43:a0:63:b8:c6:28:5a:a2:90:45:0b:77:38:82:db:79:3c:51:
         55:f0:14:e5:74:61:5e:1c:e0:3d:4a:c2:81:df:3b:97:d0:ca:
         46:25:78:2e:17:9d:ff:f5:80:44:d0:6a:b2:92:fa:c8:de:c6:
         23:8b:29:24:20:a5:66:d0:8f:d5:e9:65:85:2a:8a:ef:85:22:
         42:3f:04:82:ff:69:99:28:32:34:70:59:3a:63:07:ce:7f:64:
         5d:15:25:c9:90:a4:3f:ff:3a:49:ec:6a:1f:66:00:3d:e4:6b:
         9f:4f:b5:43:07:8a:6a:9f:e0:0f:31:49:b5:7f:e4:38:3b:8c:
         4e:20:12:cd:2e:ff:0b:2b:97:eb:b0:f4:3d:c2:8c:40:14:3c:
         c7:1e:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:17 2025 by rpki-client