Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File:                     ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier:          1bjlWm1x2oLK213BzxxDCokPOA0nG1StxezLbJVttsk=
Subject key identifier:   09:EF:C7:4E:1E:5F:0A:75:60:AC:7A:62:A7:3D:8F:21:FF:8C:B8:01
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer:       /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial:       0198880D534C60301A9DADEAD2E917695ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number:          1125
Signing time:             Fri 08 Aug 2025 05:00:31 +0000
Manifest this update:     Fri 08 Aug 2025 05:00:31 +0000
Manifest next update:     Sat 09 Aug 2025 05:00:31 +0000
Files and hashes:         1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: Fqa2wkuY+/l+xV95nFSoPDixlzObpvXRJahxwCrAG9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0d:53:4c:60:30:1a:9d:ad:ea:d2:e9:17:69:5a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
        Validity
            Not Before: Aug  8 05:00:31 2025 GMT
            Not After : Aug  9 05:00:31 2025 GMT
        Subject: CN=09efc74e1e5f0a7560ac7a62a73d8f21ff8cb801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:42:3c:57:8b:2b:04:b1:18:32:ee:63:88:
                    ac:03:1a:a6:8e:16:2d:01:6b:b1:8f:2d:11:16:de:
                    fd:6e:c6:f5:c0:91:d4:00:71:d3:6b:5c:08:55:a6:
                    de:5b:6e:03:d7:d1:dd:d1:6f:c2:f9:00:ae:67:7b:
                    85:10:9d:39:e2:e3:80:e5:cc:d8:6a:64:97:98:d3:
                    02:b0:0e:bc:c3:e4:32:cb:f2:09:02:c5:61:bd:98:
                    e0:bf:cf:fe:7c:12:e9:d5:e6:9e:00:70:d7:27:8d:
                    76:87:c1:38:d7:09:c5:8f:32:32:ef:39:91:e4:f1:
                    09:80:a9:56:ab:fd:f4:96:7d:ee:ce:f7:09:51:aa:
                    76:c8:15:d5:cf:b3:4a:25:32:a3:83:7c:07:b7:17:
                    c7:2a:d0:f8:6f:27:ba:04:38:be:11:e1:d7:17:c9:
                    3c:f9:29:8b:bb:f1:90:6b:99:41:48:bb:48:f6:e3:
                    0c:60:1d:04:30:5b:35:be:41:c1:91:2a:5b:50:63:
                    83:23:2f:e0:26:39:27:09:98:42:50:12:42:91:01:
                    cd:73:38:92:83:37:e9:13:92:fc:2b:2f:5a:ea:36:
                    76:93:74:b2:62:20:41:9e:da:87:01:70:9e:f1:bb:
                    13:d1:18:7c:c8:40:68:68:cd:5e:f6:49:b3:c3:2a:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:C7:4E:1E:5F:0A:75:60:AC:7A:62:A7:3D:8F:21:FF:8C:B8:01
            X509v3 Authority Key Identifier:
                keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:91:f2:99:41:ba:9e:09:8d:48:ae:6e:55:8d:fc:dd:c6:
         5b:03:ef:05:1c:a6:8b:2f:5a:44:ed:d6:b6:43:7a:29:9e:46:
         6c:a1:ed:c3:e8:68:ae:ea:2e:44:b4:da:ba:c5:f7:16:cc:a0:
         44:42:2d:72:24:cf:ba:bc:96:24:e4:1f:8d:f0:8b:af:71:0d:
         3e:ef:85:16:78:4b:de:b3:b4:bb:8f:af:62:f4:e4:94:c1:90:
         88:bf:a2:fd:39:b7:68:2e:24:69:c7:16:64:79:3e:82:33:ea:
         98:57:ae:b0:05:8c:9c:90:04:8f:f2:a4:84:ee:cc:6a:97:d3:
         f3:b3:b4:1f:c2:a0:da:64:09:e6:4a:13:27:1d:f0:53:4f:d8:
         09:c8:1a:e8:c5:b1:44:50:7b:81:aa:8a:98:c1:37:91:4e:40:
         96:40:b9:28:24:89:61:10:36:42:c0:92:d4:4c:33:32:bb:5f:
         7b:70:4e:bb:50:a9:7b:96:5c:78:3f:f7:66:1b:7c:f6:e2:e4:
         17:89:25:8c:f9:4c:a9:7b:ab:59:4d:ef:a6:19:95:9d:c6:6f:
         fb:30:b3:98:f3:d0:e9:0d:a5:81:0f:08:1a:32:fd:10:fe:84:
         a2:9d:c7:9a:8d:1b:82:34:67:5b:34:22:fe:a9:a2:7c:bf:31:
         97:72:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:51 2025 by rpki-client