Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          arl3agJAbH4Nrq9T9trI8XElchnI6iNqSMSncOTFW1A=
Subject key identifier:   AB:0F:6C:0E:6B:C2:0E:0D:CB:65:19:0E:48:E4:F2:79:8E:2C:A8:2B
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       0197B88ECF8C5754825A515BBDAFCA3442F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          0852
Signing time:             Sat 28 Jun 2025 22:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:56 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: 7ss2ElbvCp7buRqz+UF7vWQQQsvB1PR7D85Vh5UiJ7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:cf:8c:57:54:82:5a:51:5b:bd:af:ca:34:42:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: Jun 28 22:00:56 2025 GMT
            Not After : Jun 29 22:00:56 2025 GMT
        Subject: CN=ab0f6c0e6bc20e0dcb65190e48e4f2798e2ca82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:01:88:f0:ec:3d:af:00:b5:9e:94:27:0b:
                    29:7a:64:48:4d:02:c7:2c:41:7c:b0:b9:60:59:39:
                    41:60:9b:07:ad:17:f2:d0:f5:df:ae:ee:8c:7d:b7:
                    b2:57:ea:3e:d7:e9:b6:15:9b:39:ec:50:64:de:a7:
                    6b:0d:3e:05:0d:05:79:6e:72:db:2c:b6:72:44:80:
                    b0:4d:99:0d:bd:d8:df:9f:f4:f2:1b:4a:ff:45:dd:
                    cd:76:e0:8b:0c:49:0e:95:7d:e9:04:21:bc:f4:fc:
                    48:a2:20:c7:60:97:30:8c:91:f4:22:b6:ab:16:69:
                    a8:c5:99:b6:3f:1d:ab:b6:d6:46:ce:0f:c2:68:e2:
                    32:b0:2a:78:9a:db:58:0a:39:32:35:bc:80:d6:76:
                    7f:3f:c9:c4:8d:cd:51:b0:d2:45:94:03:6a:be:4a:
                    b6:9c:10:ba:d7:37:3a:82:ee:97:c5:12:3b:29:aa:
                    de:44:59:9c:31:a0:26:77:42:83:28:ef:87:46:d5:
                    64:e4:f3:8c:82:0e:32:d7:ed:67:27:21:a7:f4:d5:
                    a6:f7:db:56:1c:17:5a:9e:e0:f9:a6:d2:5d:0a:a2:
                    76:db:8a:45:2e:ca:4b:22:a0:ae:e3:33:09:dd:eb:
                    34:30:00:ec:53:c4:5b:11:40:e6:1b:66:7e:de:cf:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:6C:0E:6B:C2:0E:0D:CB:65:19:0E:48:E4:F2:79:8E:2C:A8:2B
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:27:23:2f:1d:05:9f:a5:70:e9:a2:2e:46:5e:a7:2d:28:5a:
         57:fc:d0:75:58:c0:8e:50:d8:ed:c1:fc:6b:a5:c8:75:b9:b9:
         5b:3a:f5:21:1c:b5:39:db:dc:31:3f:cb:2e:99:39:f5:e6:ff:
         46:a3:8e:1e:5e:c3:18:00:a5:10:b0:72:1d:33:b5:87:70:bb:
         70:34:1b:2b:c7:b0:3f:80:43:e6:46:bd:9c:16:de:b3:27:ee:
         1c:35:70:ab:0a:6d:35:14:88:b3:75:33:53:08:04:84:a8:75:
         2d:57:37:46:97:fd:e8:df:87:55:72:e3:09:a8:58:bb:21:96:
         3f:71:3a:18:6d:35:ac:c9:56:80:8e:76:7f:32:6d:e2:24:88:
         2c:ea:a6:ec:b2:05:6b:18:b1:fc:6d:ac:de:e4:40:88:f6:77:
         38:44:04:77:0c:25:98:99:1e:72:6b:28:9e:d3:78:c6:2d:fc:
         c0:96:00:ca:50:56:e9:0d:32:7b:d2:39:81:86:56:59:ad:9d:
         01:a5:67:b5:bc:d1:17:ed:2e:f8:eb:50:de:27:44:76:84:b5:
         c5:b7:d0:f7:e2:5a:a3:46:47:db:06:a9:58:a7:78:9a:41:34:
         e5:34:29:40:2a:34:c6:63:54:4f:9a:61:b6:f3:dc:cb:a6:6b:
         8d:40:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:52:42 2025 by rpki-client