Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File:                     xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier:          VCjqVX+kem3KQjtpHLJq9AK7/W3hKWgu8BK3crTGvrg=
Subject key identifier:   78:AA:72:95:B9:B4:BE:75:89:BC:F3:7C:25:09:EC:2E:F0:B5:FA:BC
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer:       /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial:       01988BB3A20BDF6431D93FEC2B7AA6713269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number:          061D
Signing time:             Fri 08 Aug 2025 22:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:02 +0000
Files and hashes:         1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: +kscri1UebF3Qxe1/0DrCZ3fr5ZM0phrZYAE5qo304c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:a2:0b:df:64:31:d9:3f:ec:2b:7a:a6:71:32:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
        Validity
            Not Before: Aug  8 22:01:02 2025 GMT
            Not After : Aug  9 22:01:02 2025 GMT
        Subject: CN=78aa7295b9b4be7589bcf37c2509ec2ef0b5fabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:3a:55:1e:23:6d:f3:9d:6b:11:4e:ef:91:
                    f2:9a:3e:55:0a:83:20:16:f7:29:57:f0:17:59:50:
                    03:f4:70:67:2c:4c:e2:18:7a:14:db:9c:a1:25:32:
                    05:28:f2:21:33:e6:44:a7:98:7f:2b:f0:24:47:d8:
                    4b:10:1b:09:12:8c:5c:bd:2d:6c:15:89:69:e8:b6:
                    61:9c:1b:d2:f5:64:1b:cd:4d:2b:0b:d7:7b:6f:ba:
                    fe:8f:a8:53:ab:d4:d1:b0:69:a5:91:dc:6e:bc:37:
                    3c:50:68:c7:3f:96:91:58:99:85:78:f6:86:52:41:
                    3b:4e:63:02:c0:cc:b6:c6:cc:af:52:07:99:c0:8f:
                    58:10:2a:38:41:6a:c8:87:b7:21:d0:ee:ef:09:a2:
                    d8:eb:4d:51:53:eb:7a:c5:7d:5f:e0:12:9d:1b:82:
                    8f:70:b3:84:f0:f5:80:a6:c1:65:b8:88:02:ac:e0:
                    5e:54:59:9a:8e:77:f7:e5:ca:f8:a5:74:00:5c:2b:
                    90:0f:c6:d2:04:de:a0:4a:66:af:70:c3:48:eb:ad:
                    e9:48:e0:e7:cf:a5:f1:0a:df:f5:78:46:32:a9:5a:
                    bf:63:93:05:61:86:40:f5:1b:b2:1b:03:eb:7f:81:
                    de:ef:38:44:b4:9a:5b:af:f2:92:cc:9c:89:6e:00:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:72:95:B9:B4:BE:75:89:BC:F3:7C:25:09:EC:2E:F0:B5:FA:BC
            X509v3 Authority Key Identifier:
                keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:74:c6:d3:b5:92:13:23:c7:f0:f8:d0:d3:8a:0f:5d:c4:85:
         59:5c:aa:84:e3:04:75:9e:97:59:20:ff:e3:f4:c3:03:aa:ad:
         66:8a:85:10:ca:0d:97:70:d0:8a:9b:3f:ef:ea:af:15:f5:84:
         38:20:00:e8:55:03:33:8f:72:e4:ac:f2:5a:47:fc:18:ec:be:
         28:10:66:46:30:60:1e:61:7f:a1:72:28:03:4e:7c:46:0d:ff:
         c2:a6:b3:36:9c:6d:11:03:4a:a4:aa:bb:60:85:f6:cb:0e:b8:
         f2:23:27:49:d3:d5:74:6f:66:a1:46:2d:82:ec:7b:b3:ec:11:
         11:b2:6a:34:ad:2e:7a:84:67:12:d3:a4:f1:d9:18:02:e9:24:
         b6:bd:b5:74:08:35:89:19:8e:83:93:b5:f2:7b:fa:89:83:61:
         e6:b6:d3:85:21:2c:6a:e5:48:15:90:5b:dd:59:bb:d6:68:ae:
         92:15:c2:72:8b:25:f0:a9:fd:80:d4:ea:da:09:d8:51:a5:73:
         b0:c0:2c:9f:ed:1c:11:49:13:d8:c9:d9:dc:61:ef:1b:0a:1c:
         cf:4e:4b:9c:bd:78:77:bf:14:4f:ad:c3:5b:f1:4b:6f:74:3b:
         46:38:fe:dd:b1:54:88:e0:ea:94:ed:59:10:69:da:dc:b2:ea:
         0e:3c:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:47 2025 by rpki-client