Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File:                     INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier:          ryo9W5doJ1dzq6BC9krlTsC87D9JGbpttSI1zsGRKJU=
Subject key identifier:   7F:CC:80:D3:21:5A:7C:6B:0A:D7:36:F9:34:B3:CD:8F:C8:6B:25:AE
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer:       /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial:       019874505D8E7D021C87821AE7AC920188DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number:          063B
Signing time:             Mon 04 Aug 2025 09:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:20 +0000
Files and hashes:         1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: 9HCGEwBUlnDzCnADlzyhHuwA40Yl/tU6b5WtVNUovLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:5d:8e:7d:02:1c:87:82:1a:e7:ac:92:01:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
        Validity
            Not Before: Aug  4 09:01:20 2025 GMT
            Not After : Aug  5 09:01:20 2025 GMT
        Subject: CN=7fcc80d3215a7c6b0ad736f934b3cd8fc86b25ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:75:f3:22:23:cd:88:5f:ba:4d:98:88:4c:
                    58:8f:ca:48:85:d5:30:59:29:75:47:1c:15:eb:dd:
                    db:be:1f:11:96:da:c7:eb:3d:94:e1:d6:7e:a5:92:
                    d5:92:a8:79:27:5b:2c:d2:b7:38:c7:41:19:a0:f9:
                    6a:e1:8d:6d:20:25:56:cf:cf:d3:52:52:34:1d:a2:
                    d3:71:7f:e9:56:4b:ae:39:8f:63:5c:c1:9c:fa:b7:
                    18:ba:2c:b6:91:63:1b:53:53:57:9f:7b:b3:f5:ba:
                    be:d9:c3:7a:77:7d:7d:12:ed:58:56:e1:9b:73:af:
                    03:b7:de:66:80:8e:1b:15:3b:6b:82:49:9f:fc:56:
                    80:ac:8e:b7:e2:23:3d:40:c7:79:d6:c8:a9:be:89:
                    d5:ff:0a:2b:5e:2a:24:7b:13:23:5b:13:71:fe:38:
                    27:e6:d4:4d:ef:fb:14:c1:95:6e:79:e3:e8:1c:05:
                    38:73:18:61:13:a0:5b:c7:3e:87:ae:45:2b:c0:c7:
                    24:2f:67:6c:8b:a0:be:f6:d4:77:e2:d2:a6:f9:6a:
                    29:86:86:f7:b8:7f:7d:f7:77:d7:b3:09:b5:f3:bb:
                    b9:66:a4:ff:44:9e:e7:60:9b:19:72:97:48:22:cc:
                    9b:df:3d:95:b8:03:58:a3:f3:02:29:df:95:4b:f5:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:80:D3:21:5A:7C:6B:0A:D7:36:F9:34:B3:CD:8F:C8:6B:25:AE
            X509v3 Authority Key Identifier:
                keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:44:b1:4b:f6:ad:cb:94:74:93:c4:3d:28:af:61:ca:2e:
         43:a0:42:74:4b:b0:1d:6e:ca:69:8c:15:21:9b:2c:e5:48:f0:
         70:42:5d:50:09:80:30:9c:bc:e5:18:93:d5:e6:8f:ca:7b:91:
         61:78:a1:2d:55:03:8a:ea:12:0c:83:a4:f2:4e:c6:82:66:a3:
         6e:57:e6:dc:f6:22:86:04:aa:95:cd:16:9c:02:98:34:27:74:
         8f:7c:62:9e:9a:90:de:fb:84:0b:f2:d0:17:a2:4d:db:fd:59:
         98:c1:94:20:e2:a7:88:76:f3:79:fd:64:bd:92:ba:63:32:a0:
         65:0f:83:e1:9a:1d:79:df:19:69:02:99:58:e4:d1:ff:7f:62:
         6a:ae:ca:e7:17:10:b4:83:69:92:22:5e:b8:4d:56:7e:bf:4a:
         9b:c2:03:c3:30:c7:d5:27:03:34:9a:2c:cc:b6:27:56:6e:42:
         dc:b0:a0:7d:2c:d9:af:87:1f:e6:6e:2c:12:d3:31:bf:3e:f6:
         5c:fa:98:4f:81:40:02:83:76:63:4f:d8:e7:30:cb:30:65:83:
         6c:5d:48:f2:eb:80:6b:11:70:57:40:b2:49:17:d3:52:a7:9f:
         04:9c:1d:69:68:6a:d0:ad:85:72:0e:74:5d:7d:37:2f:38:9c:
         7b:09:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:54 2025 by rpki-client