Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          qI3yvMI1p70hO4Uu6qWgBJgq3gze8tGc/UeU4PBLPpk=
Subject key identifier:   65:8D:92:BC:D9:DB:76:F3:83:E0:C8:9D:B0:81:11:96:A5:92:51:74
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       0198808B735E8F2857647B30E6C29B8FA043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          06DB
Signing time:             Wed 06 Aug 2025 18:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:19 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 59hxn0NSqPl/H3RFPpelyKi5m8SNBFS6odjF3LsbE0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:73:5e:8f:28:57:64:7b:30:e6:c2:9b:8f:a0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Aug  6 18:01:19 2025 GMT
            Not After : Aug  7 18:01:19 2025 GMT
        Subject: CN=658d92bcd9db76f383e0c89db0811196a5925174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:64:5b:09:73:58:24:4d:3c:81:64:8f:bd:
                    f2:15:76:e3:52:7a:80:07:09:f6:55:dc:80:3d:53:
                    60:a4:dc:53:ad:60:76:61:ea:fa:67:ab:36:02:1b:
                    52:79:37:bc:ad:74:af:96:c6:2a:83:fd:0e:83:01:
                    23:07:d4:4c:ab:28:a0:87:a4:18:22:4d:85:a0:17:
                    33:87:53:71:89:c8:0f:70:fa:97:d7:f8:5d:44:f2:
                    60:eb:f0:c5:36:ac:ea:e8:a7:f1:92:81:aa:f1:73:
                    05:0d:18:86:d2:58:3b:48:fd:67:0d:1c:4c:ec:06:
                    75:b8:fc:ab:ed:95:01:c8:ab:79:9d:2a:4d:20:b4:
                    38:18:bd:fb:33:ca:ff:8f:a6:9b:39:b3:fc:35:aa:
                    ab:8d:5e:cd:d8:2f:4e:79:33:ea:e4:96:80:70:37:
                    b7:c3:ab:2a:d5:4a:5e:d0:f4:1e:41:e2:e1:08:e0:
                    39:fd:7d:91:0f:b6:cd:6e:35:0c:a6:32:22:f2:44:
                    d9:7c:dd:f1:5f:b6:f8:5a:4a:37:d4:bf:01:bb:d5:
                    a9:2e:e7:35:e8:40:1c:a4:5b:22:31:ee:fa:86:02:
                    89:26:fa:f5:e3:c1:c5:c2:c8:8f:13:57:ba:8f:f4:
                    69:a8:26:5a:cd:ae:d6:f0:6f:26:47:58:fe:9d:e7:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:92:BC:D9:DB:76:F3:83:E0:C8:9D:B0:81:11:96:A5:92:51:74
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:a7:dd:09:20:00:39:78:18:54:ba:b4:52:42:19:75:00:
         97:24:b8:b7:e8:f1:2c:76:a1:b4:a5:2b:ae:c5:bd:6e:25:e4:
         74:fd:61:f4:cf:27:ff:2b:81:98:96:cb:85:65:92:71:29:fa:
         85:b9:45:ed:17:e6:f8:9e:54:f1:23:db:74:81:e4:57:17:83:
         68:75:aa:a8:0c:c1:2b:40:c1:0d:a0:13:f0:b7:f9:45:79:e6:
         c4:d9:74:f5:ab:42:5b:89:45:21:05:c0:a2:e9:af:d6:3b:67:
         c6:14:38:25:63:f5:e9:8d:54:0b:a0:9f:bb:99:8d:09:4d:36:
         eb:7b:c6:88:63:c4:b3:94:34:54:61:6a:2d:12:61:20:bd:fc:
         d8:73:f6:28:6a:9b:5a:fc:1b:26:a5:a8:c8:1a:da:b4:ae:f1:
         9c:56:56:6f:58:ac:e3:6d:51:61:56:54:c2:76:56:aa:6b:c3:
         79:85:69:32:33:94:f2:58:d0:cf:f1:a8:a6:0c:e2:c4:08:a2:
         b5:8c:a0:ab:c1:bd:3c:af:67:0e:7b:16:1e:25:b0:c5:4a:25:
         79:fd:d0:21:22:19:4d:be:bd:32:44:b5:4e:8e:b0:52:ac:f9:
         a6:1e:5c:df:cb:9e:36:e5:b7:f1:6b:e9:a6:24:ec:e6:1e:86:
         71:4f:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:46 2025 by rpki-client