Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          AxO6CNZ8AHUqO4yK5RCkbOC5n7e0a5u25nxJwG5n56c=
Subject key identifier:   70:5B:09:28:A2:A6:34:B0:60:37:A1:37:D5:1C:99:34:74:69:FC:AC
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       019874509EBF4F7FEA2C31044C40E17633E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 09:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:36 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: 8SkJNg9KKUqSr72cZ90vBfVdZXWzHhuX6gD6tz52e78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:9e:bf:4f:7f:ea:2c:31:04:4c:40:e1:76:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Aug  4 09:01:36 2025 GMT
            Not After : Aug  5 09:01:36 2025 GMT
        Subject: CN=705b0928a2a634b06037a137d51c99347469fcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:e7:d2:f6:b2:60:ec:e8:a0:58:cc:0e:3e:
                    48:cd:fc:c8:f2:89:29:9c:d6:71:db:8b:c1:87:a9:
                    f8:1e:de:fc:75:3b:a3:36:da:e6:38:8d:07:25:94:
                    c5:4b:ab:c9:a5:b1:58:c8:97:49:7e:88:46:ae:17:
                    64:47:f2:84:28:c7:63:5a:4e:bd:97:ae:c1:2e:8d:
                    21:dd:71:73:13:ed:3a:0c:d8:5a:2c:c8:75:24:22:
                    44:e3:b6:96:1c:86:ac:ac:8e:b8:90:ed:10:0b:e1:
                    1b:ba:7d:a6:70:86:a6:9f:18:cf:8a:ea:3c:a9:2f:
                    3f:f6:05:7f:a8:d0:20:1b:0a:9f:39:09:ee:52:49:
                    df:77:06:6e:f1:14:0c:c7:51:58:ba:86:0c:e2:eb:
                    a6:d5:5c:3e:d0:36:d2:c7:bf:18:93:e8:39:68:ab:
                    6b:cf:dd:1b:e5:54:ad:15:c2:1b:35:c1:da:66:0e:
                    e1:12:2d:ad:5b:09:5b:7c:6e:ba:7d:9d:53:48:eb:
                    bd:b9:eb:4f:25:be:59:b6:d1:05:f8:ec:5c:b6:60:
                    7f:72:fc:7f:5a:8b:b5:c2:c5:29:23:43:e8:95:34:
                    42:2e:f5:97:09:bb:f1:53:7c:35:b7:f6:7b:8a:2b:
                    27:f4:1f:bd:52:94:0a:24:73:36:ff:15:be:30:a4:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5B:09:28:A2:A6:34:B0:60:37:A1:37:D5:1C:99:34:74:69:FC:AC
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:9f:4b:d0:ed:1f:be:df:47:3d:ac:69:d3:85:5d:b5:ee:
         1c:c6:70:4f:6e:d3:65:55:21:d4:72:64:3d:a8:98:b8:5a:9f:
         24:11:73:4d:61:fa:95:2a:c8:69:42:53:da:f2:cd:ef:c7:40:
         6c:32:ca:e7:5f:03:f4:53:a3:63:65:73:81:ea:22:76:3e:2b:
         d9:14:f6:b2:d4:02:03:8b:40:09:0c:65:a8:5e:c7:7c:80:4d:
         60:f4:e2:77:1d:67:59:5f:71:25:1f:8b:77:1a:14:bb:8c:d3:
         d4:e0:63:5c:76:3d:ab:df:e7:7b:2c:1f:0a:a3:5b:dc:c4:c3:
         3b:1e:07:70:e2:d4:fe:38:d1:7e:e2:ef:49:19:a0:0c:5b:e0:
         9f:84:fd:a5:ae:cb:83:7b:62:33:3a:db:5d:f5:77:a6:57:48:
         5b:6f:87:d7:50:05:ff:19:71:74:8c:38:2b:65:2d:6e:b9:82:
         22:cf:05:26:4c:dc:83:b8:9f:ac:4d:1d:cb:60:6a:95:4e:ca:
         1e:b2:4b:20:09:cd:c2:3d:84:8f:60:9b:ff:27:9a:a7:8e:c9:
         86:21:fb:98:87:c3:26:2a:1e:77:bf:e1:69:0b:4e:45:c4:e1:
         13:e1:39:5d:ca:dc:99:26:a1:0d:9c:c9:cb:be:0d:b2:d2:8a:
         7a:89:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:13 2025 by rpki-client