Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File:                     iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier:          TyBzzyLG6Jqd+ok/SqDR+VL+tns2daLrozJ0yrYGtGY=
Subject key identifier:   B5:6E:B2:C3:28:DB:2F:0F:D8:19:1D:69:68:C7:DC:55:6A:D9:73:2A
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer:       /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial:       01988B10449DDCB78597F1BF2DBA512B4226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number:          065F
Signing time:             Fri 08 Aug 2025 19:02:35 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:35 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:35 +0000
Files and hashes:         1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: vHrGCvNY34uMFykiIDZWWm6rGpIlaKvPuUFg7MBjBqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:44:9d:dc:b7:85:97:f1:bf:2d:ba:51:2b:42:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
        Validity
            Not Before: Aug  8 19:02:35 2025 GMT
            Not After : Aug  9 19:02:35 2025 GMT
        Subject: CN=b56eb2c328db2f0fd8191d6968c7dc556ad9732a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:1f:b5:78:5a:8f:ed:ae:9b:5d:58:dc:d0:
                    89:71:81:50:f2:df:c6:b6:c1:56:62:95:37:7f:a1:
                    9b:0f:a0:20:3b:c4:af:00:85:ad:19:7c:13:6b:d5:
                    f9:74:fa:91:7d:90:8a:2e:40:fb:d7:f2:57:58:ff:
                    c9:c8:1e:9d:f5:62:18:40:0b:66:87:c3:47:c3:60:
                    f6:fe:81:18:80:0e:69:a0:83:6b:8f:37:07:5e:51:
                    1d:87:ed:b3:90:c2:4a:9b:32:a9:64:4e:a3:3a:3d:
                    23:35:ad:19:21:50:70:21:13:84:2d:90:90:68:33:
                    5f:23:5f:f0:14:a7:14:90:0d:0e:fd:fc:28:a9:7b:
                    07:15:c1:37:0a:ad:c8:7b:3b:7e:6d:c0:d8:58:96:
                    40:4a:72:73:c2:a8:66:73:90:62:61:1e:bb:2a:21:
                    04:05:f1:f8:10:69:54:d2:38:1c:91:fa:0c:2f:3b:
                    09:33:91:13:18:f9:5e:bf:ee:97:ad:a9:9e:9b:b8:
                    46:db:58:d6:67:01:0d:7c:4e:5d:db:b8:64:e1:85:
                    6e:43:21:0d:6f:bc:d5:4e:a3:c4:ae:d0:2f:0e:5f:
                    b8:33:f2:9f:f6:e6:5e:b9:1c:b2:33:8a:44:45:61:
                    b5:f1:e6:cc:f6:a1:0f:5c:43:8a:38:81:61:2e:17:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:B2:C3:28:DB:2F:0F:D8:19:1D:69:68:C7:DC:55:6A:D9:73:2A
            X509v3 Authority Key Identifier:
                keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:bb:1c:4a:ac:42:6a:88:db:a1:ea:50:f0:98:fe:da:0c:
         af:d5:43:20:4d:3b:dd:a8:16:82:ce:78:13:5f:22:40:89:00:
         c3:bf:bd:29:8c:7d:ef:d8:74:8f:5e:ec:8b:e9:aa:85:4e:04:
         f9:1a:d1:8c:5d:ae:ab:9c:b0:fd:34:48:04:1b:00:bb:f5:49:
         42:8e:16:2f:d1:c7:e1:e0:6a:50:3c:b9:89:1c:e5:02:1c:29:
         b7:18:14:13:c7:0d:2b:5e:b3:93:05:4e:0f:63:0a:20:22:7e:
         52:b7:3e:63:cd:e5:85:11:8d:b4:f2:04:21:40:fd:5d:c0:39:
         85:d9:50:c5:3a:79:25:9b:33:a7:65:5e:9b:66:65:a0:2b:a0:
         a2:f8:61:a7:e3:84:b4:46:66:15:3a:9f:3f:bd:8d:15:ab:4a:
         ee:e7:a8:57:46:c0:0f:ae:c9:22:3c:79:49:87:94:17:93:da:
         47:a0:6f:9f:a7:a2:7b:90:10:58:7c:b6:8f:d6:f0:4f:29:8f:
         4b:02:ef:e8:d0:20:f2:43:2b:a4:72:96:b5:bb:4a:87:61:07:
         55:68:43:a5:1c:cd:41:61:61:c3:6c:a3:a3:a6:ac:bf:d3:60:
         1e:97:eb:b0:71:6a:fa:b0:98:bf:b4:eb:f3:46:5c:01:be:56:
         44:31:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:35 2025 by rpki-client