Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File:                     N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier:          v08FEYU54lOM1AdmHHQKwDWg+Y24W3qXdP36wvf1FAA=
Subject key identifier:   AC:5A:17:A8:B0:32:DE:29:BF:F3:E9:C7:AF:AF:BA:CF:B4:29:7C:1E
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer:       /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial:       01988B104C047D8216C19FB1DD1AFA59A0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number:          0E7F
Signing time:             Fri 08 Aug 2025 19:02:37 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:37 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:37 +0000
Files and hashes:         1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: Rn89gwDI9rY79ZTOezIlZuPEqOF1895fHU+rLpUDV3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:4c:04:7d:82:16:c1:9f:b1:dd:1a:fa:59:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
        Validity
            Not Before: Aug  8 19:02:37 2025 GMT
            Not After : Aug  9 19:02:37 2025 GMT
        Subject: CN=ac5a17a8b032de29bff3e9c7afafbacfb4297c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:6b:59:ba:b4:90:81:4d:f8:a0:27:22:95:
                    b0:95:20:97:78:09:4f:f1:24:87:2a:bf:26:a1:77:
                    08:6f:29:7d:64:0d:2b:bd:59:d5:db:be:20:f1:96:
                    22:2d:76:92:af:ba:db:4d:29:20:9b:40:91:9f:49:
                    68:19:e5:ca:5a:9c:69:64:11:44:f9:b9:aa:b8:18:
                    ed:24:ef:c8:27:89:7a:75:2b:a0:40:08:f7:b8:2b:
                    24:56:0c:e2:9e:8c:c3:9c:32:95:ea:aa:d9:2e:62:
                    a8:b7:c1:c4:53:78:e7:3a:29:72:b7:b8:80:40:d3:
                    f2:ba:9a:58:ce:28:54:b9:77:39:22:88:1f:76:ad:
                    e8:23:c2:59:59:1c:96:2e:7d:90:59:3d:70:81:ec:
                    3e:15:01:eb:60:c2:d3:d2:52:26:bc:f7:79:98:32:
                    7c:9f:c3:9e:a2:2a:96:f9:04:a1:94:c9:0d:2c:3e:
                    85:1d:a0:34:b9:92:ce:49:c6:06:b4:59:4d:40:e0:
                    05:59:35:3b:b8:f5:11:cf:c1:d4:b0:fc:e3:62:92:
                    07:16:83:7c:03:ca:2f:6a:87:ec:c6:64:a9:c0:4e:
                    5f:d5:f8:bb:7f:cb:ef:68:dd:e3:35:b3:45:28:4c:
                    1c:68:be:01:1c:67:d1:1c:12:7a:16:8b:b4:c9:a2:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:17:A8:B0:32:DE:29:BF:F3:E9:C7:AF:AF:BA:CF:B4:29:7C:1E
            X509v3 Authority Key Identifier:
                keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:28:28:19:b8:a6:ff:3b:bf:54:7e:04:d3:57:a7:f9:08:f9:
         15:79:1c:3b:dd:68:12:30:df:12:97:ab:8f:be:bf:9a:af:ba:
         89:1b:8d:d8:29:3e:dd:61:e9:30:29:92:50:bf:2c:78:6d:1f:
         ab:91:10:88:b7:6f:ef:03:3c:47:20:02:10:99:07:1c:03:7d:
         61:24:eb:9e:1c:b2:d8:e8:43:f0:fd:82:49:52:d3:ef:62:56:
         f5:10:a8:7d:fc:8c:b9:8a:20:22:7f:1e:16:4f:d8:cf:be:7c:
         20:c5:b7:bf:4f:b1:7a:68:a2:dd:cc:6b:af:ad:4b:5b:e1:8f:
         15:71:cc:f3:73:6b:8e:07:4b:f0:c4:b9:1a:15:e3:6d:51:31:
         9d:97:f3:aa:20:5d:13:61:7c:25:db:d2:85:9b:fc:25:58:b0:
         2b:f8:c0:9c:a9:0d:25:b1:ec:37:c3:f4:d0:e1:e6:d8:b7:59:
         4b:30:e9:22:24:73:5e:66:25:be:4a:a2:c2:51:c3:03:42:cb:
         00:59:e0:d7:ef:e2:26:0c:9c:2c:f3:16:ab:b0:a1:56:29:fe:
         aa:06:e4:e0:28:5e:fb:f9:29:43:01:53:43:20:2c:10:41:ac:
         22:95:21:27:9e:5e:dd:77:e3:31:e8:20:b4:75:a6:12:b7:8b:
         af:f6:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:52 2025 by rpki-client