Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File:                     c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier:          5IrBU5fxl2ll1cabBqt8vGAEgICtnMfxZsfYBNwPjgY=
Subject key identifier:   F4:80:27:19:20:CC:E8:A7:19:86:D6:A2:B2:D6:E1:F1:F8:FC:4A:85
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer:       /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial:       01987306703EFBAD6375E26E7E68A7513ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number:          029D
Signing time:             Mon 04 Aug 2025 03:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:58 +0000
Files and hashes:         1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: EW63LmcgvMBfJ3abzYIgKpMfAWz4jj40PtjZFsw5kKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:70:3e:fb:ad:63:75:e2:6e:7e:68:a7:51:3a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
        Validity
            Not Before: Aug  4 03:00:58 2025 GMT
            Not After : Aug  5 03:00:58 2025 GMT
        Subject: CN=f480271920cce8a71986d6a2b2d6e1f1f8fc4a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:11:2a:6a:cd:88:8b:f7:0f:4c:fc:e2:ed:
                    ea:9c:e8:e5:f7:4e:09:20:d7:28:8e:12:0e:16:09:
                    49:43:82:f1:c7:d3:79:4a:b8:05:56:21:18:7a:c2:
                    0f:99:27:68:12:95:99:a8:27:ca:c9:a5:cb:55:03:
                    ad:4f:c0:58:7b:19:27:59:e3:59:2f:b7:c4:7b:ae:
                    ac:79:4f:0f:1b:d5:0f:49:63:85:cf:a1:41:e4:51:
                    82:fa:ae:e6:e0:6e:14:ec:4d:4c:49:97:28:cf:67:
                    e2:b6:33:4f:ef:f3:9a:04:23:65:a2:8f:ab:dd:eb:
                    ad:1f:a0:35:49:9e:df:46:6d:cd:ba:e1:0d:dc:85:
                    e6:5b:8c:13:9b:fa:7a:6b:26:03:fd:76:ad:e8:59:
                    82:eb:95:47:dd:fd:b3:38:4f:19:06:41:65:b4:aa:
                    90:7e:21:52:2b:85:be:b2:05:67:9a:97:77:7d:e2:
                    7d:5e:a0:b1:f8:9f:d4:c4:d2:0d:13:01:be:2c:19:
                    b6:d0:94:f6:e5:bf:39:9e:b9:aa:6e:29:c9:45:21:
                    84:84:8d:e9:a6:30:5a:61:5d:e8:72:5f:25:52:c7:
                    c0:54:5d:97:11:48:e4:b2:ca:06:37:b7:3b:b4:f4:
                    a7:8b:76:29:97:d8:7a:08:02:c8:0f:22:c0:bc:ff:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:27:19:20:CC:E8:A7:19:86:D6:A2:B2:D6:E1:F1:F8:FC:4A:85
            X509v3 Authority Key Identifier:
                keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1b:a0:7d:7c:21:45:8e:39:88:92:4c:be:08:91:bf:87:0e:
         b0:c7:30:b1:54:93:0c:10:41:50:a6:14:36:fa:d8:a2:94:92:
         bc:dd:5e:35:4f:7f:a8:d9:4b:66:28:51:f1:7d:2a:54:25:8d:
         ce:58:6b:c2:d0:40:33:75:70:27:fb:44:cb:79:27:f2:eb:9a:
         66:59:41:01:4f:37:ff:83:57:67:75:fb:c0:f0:79:5b:a2:65:
         2c:37:16:b0:ab:0c:83:7e:48:80:6d:ae:de:c3:62:91:65:a3:
         5c:f6:3a:03:70:4b:a5:69:f6:ab:31:43:66:63:32:6a:89:d0:
         47:d9:75:e5:b7:7a:7f:c8:bd:57:2d:2a:79:0d:3e:db:b1:30:
         5b:d6:ca:60:7d:8a:5d:cc:23:3e:c8:4d:98:95:65:40:01:5b:
         db:9c:eb:c0:12:bf:90:ac:88:06:cf:7e:63:13:d2:a6:6d:ee:
         3c:69:fa:c5:f7:c8:48:09:6a:e9:5b:e3:ab:8d:a5:8e:a9:28:
         63:35:63:a2:f8:da:73:f1:da:fc:2c:46:3a:44:d4:dc:1b:68:
         52:1c:2e:3f:6d:3d:92:93:71:f1:fb:0a:cd:47:07:f7:b9:22:
         36:c1:aa:cc:ec:6f:2a:8e:3b:b5:d3:c0:94:91:69:6f:10:d4:
         0e:74:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:02 2025 by rpki-client