Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File:                     gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier:          AryP0WGHL3WYCjqE5rY1Pm9LKAtaAwAJTWGAF7V6RZI=
Subject key identifier:   0C:74:FF:3D:31:8D:64:48:E7:94:13:2B:31:FA:48:A2:F2:57:EB:56
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer:       /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial:       019873E22DEB99670C607606E14F5D117E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 07:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:59 +0000
Files and hashes:         1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: +uBhwcRsRv9u72FK/65BBARYCAljRfgDoYu8DQVNxzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:2d:eb:99:67:0c:60:76:06:e1:4f:5d:11:7e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
        Validity
            Not Before: Aug  4 07:00:59 2025 GMT
            Not After : Aug  5 07:00:59 2025 GMT
        Subject: CN=0c74ff3d318d6448e794132b31fa48a2f257eb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:b4:36:8f:c6:be:b1:02:bd:50:e1:88:4f:
                    f5:d3:2a:0b:b1:c0:45:ee:6f:e0:0e:d7:a6:26:b1:
                    ea:2f:10:94:ff:96:d5:b1:5a:a8:06:b8:c5:87:ed:
                    f2:e1:3e:e1:6c:b4:2f:40:f9:c5:36:ee:29:ff:2e:
                    9c:80:32:83:87:dc:51:16:f4:78:0f:72:03:20:70:
                    49:b1:c0:d3:95:a7:2c:77:78:ae:f9:91:6a:ac:5d:
                    39:22:6c:ea:77:35:9d:8e:3b:b6:5c:b4:a3:e9:59:
                    9a:4f:0d:c0:e4:77:0a:7c:2c:86:81:02:0e:3e:70:
                    a7:8f:3c:db:61:de:67:3f:ac:cb:c9:69:6c:ec:72:
                    bd:9a:80:70:59:b8:cf:2e:3f:ed:19:c2:2d:a2:56:
                    f7:d3:47:b6:c3:96:f7:74:80:3a:da:cf:8b:ef:11:
                    2b:ae:cc:6f:ab:d4:80:5c:e3:8b:df:bc:7f:9a:ff:
                    85:86:04:12:e7:11:90:17:1c:e5:91:1e:f4:e8:b6:
                    f2:e0:42:35:de:41:15:a6:27:65:f8:27:d7:a5:fa:
                    c1:2e:bc:d8:7f:6a:78:9f:55:93:24:2f:25:a2:2a:
                    b2:a8:9a:56:3d:82:74:77:9d:dc:d1:8f:ac:ff:71:
                    7c:02:c4:4f:c0:9f:29:31:9d:24:0f:05:d6:29:01:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:74:FF:3D:31:8D:64:48:E7:94:13:2B:31:FA:48:A2:F2:57:EB:56
            X509v3 Authority Key Identifier:
                keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:de:45:58:03:9e:55:7a:d9:f2:d0:a2:27:f4:c1:2a:8a:bf:
         a4:32:c5:b5:37:8f:85:c7:78:c8:95:0e:2e:01:86:12:68:60:
         eb:93:2b:d9:8b:84:f8:3c:75:65:52:94:08:5f:6e:d6:18:c3:
         8d:78:c9:9b:b0:7a:6b:06:04:40:78:cb:e3:e7:69:04:1e:e3:
         e0:10:95:d5:26:31:ef:6b:ec:65:42:2f:16:e4:dd:ef:d7:88:
         98:80:e5:fe:02:53:89:81:3e:93:26:c3:a1:ed:c8:f7:6b:3f:
         90:f6:27:cd:24:37:94:d0:cb:0e:73:e2:55:9c:0c:b1:46:d5:
         94:c0:6a:0a:cf:d2:97:fb:0b:95:ba:9b:52:dc:5a:82:47:2c:
         06:63:f0:77:da:68:55:72:16:7a:e6:1b:92:e4:78:c7:f5:d4:
         91:52:83:69:4e:a3:e6:6c:01:47:d3:1a:74:c0:1e:cd:c9:2b:
         c3:a3:de:c3:1b:b2:26:35:07:57:c0:35:cd:12:9a:4f:fd:1b:
         56:79:f4:e1:ba:af:3d:b6:f2:79:53:12:9f:cc:4f:35:47:41:
         9f:62:f0:7d:db:d7:96:2b:3f:b3:33:5a:ed:87:58:e6:32:41:
         38:1e:40:23:2c:47:b6:1d:38:38:ce:a6:d4:44:9d:f7:52:2b:
         2b:80:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:44 2025 by rpki-client