Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File:                     elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier:          3dAJYZhrlG72Ys8H0zvh4W87/+gh9TZGriExENBJJ0c=
Subject key identifier:   6B:4E:17:61:C9:0A:07:35:0F:DF:E2:E8:26:D9:29:75:D1:74:B1:E4
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer:       /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial:       0198730695E5689159B1961ED4EC735EB828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number:          0615
Signing time:             Mon 04 Aug 2025 03:01:08 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:08 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:08 +0000
Files and hashes:         1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: 4npa/7boBVBz1OGyBJz7/DTkinnp1/xdrQsAUsmbp2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:95:e5:68:91:59:b1:96:1e:d4:ec:73:5e:b8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
        Validity
            Not Before: Aug  4 03:01:08 2025 GMT
            Not After : Aug  5 03:01:08 2025 GMT
        Subject: CN=6b4e1761c90a07350fdfe2e826d92975d174b1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:9d:68:2d:99:57:74:e4:0f:47:09:de:1b:
                    a2:46:1e:18:8a:68:9e:c8:18:77:02:35:43:bc:e7:
                    fb:2a:cf:a1:a5:db:a1:20:db:9a:eb:ee:af:93:62:
                    6e:68:8e:04:6a:9f:52:fc:05:0e:80:d9:5b:b7:1a:
                    73:71:f9:ef:4f:01:ef:77:d1:ad:0c:3d:c0:15:9b:
                    ee:9d:9b:28:2d:35:c1:a8:a4:4d:e4:a1:47:d7:58:
                    b8:10:9b:8e:37:26:91:03:02:7d:2a:77:48:30:92:
                    9d:6a:d2:0c:fc:f4:62:ec:24:c2:58:a7:94:af:6b:
                    f8:26:72:a1:b5:fc:f2:9e:d8:36:c8:d6:f0:06:7c:
                    ee:fc:c6:33:1f:dc:10:fd:88:c0:e8:30:30:26:6d:
                    db:aa:a0:53:d3:15:94:24:75:d3:4a:8d:48:3c:f4:
                    ae:ae:e5:57:6a:b0:4b:d5:55:ed:58:96:92:cb:eb:
                    fd:f4:5f:2b:f9:22:15:ab:44:70:ad:7d:57:f3:a7:
                    84:13:0a:c8:eb:49:8d:8c:d7:fc:08:87:a9:b8:bd:
                    6f:48:90:86:47:a4:5f:c5:9f:73:93:fa:c2:b3:b6:
                    a0:68:33:f9:6d:f2:4d:c4:40:55:29:ea:45:f7:15:
                    50:41:96:73:c4:34:a7:c4:7e:64:d3:c8:ac:2e:6c:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:17:61:C9:0A:07:35:0F:DF:E2:E8:26:D9:29:75:D1:74:B1:E4
            X509v3 Authority Key Identifier:
                keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:33:c5:0e:bb:3b:71:0e:bc:27:77:68:8d:c8:5b:0c:47:40:
         9f:fe:68:8a:73:79:57:d8:17:e4:b7:d8:3b:67:26:29:34:d7:
         6e:d2:81:1b:91:9c:4d:55:31:9e:b3:ad:3e:f0:4d:08:69:cd:
         cd:5e:cf:e8:80:91:fd:41:67:f7:62:f8:80:e3:4d:85:0d:79:
         fe:de:ae:26:da:8f:f1:0b:29:20:f7:95:30:5b:df:9e:5f:d6:
         0c:18:1a:3d:cf:57:6f:21:ac:9e:4c:6e:69:5c:56:47:26:3b:
         87:af:9a:9d:e1:92:06:46:3b:53:f6:5c:a9:2d:d7:3f:39:20:
         1c:fc:68:13:ef:2a:97:01:04:90:a0:e7:8c:71:05:f4:0f:03:
         04:6e:7f:1e:1d:6f:0f:a2:ad:3e:6d:95:54:d7:31:db:b5:92:
         82:ae:f5:3c:ce:af:54:ba:24:e1:7f:fe:cb:4c:76:56:2f:3e:
         81:d0:0e:52:f4:2a:2c:76:40:48:16:23:11:8f:07:9c:b4:76:
         2f:a0:ce:83:56:95:a9:f7:bc:e1:a7:8d:8c:6e:08:91:dd:c0:
         45:ab:b5:7c:29:06:55:a5:0a:a6:4e:7a:a6:4e:fa:81:2b:48:
         23:2a:e5:90:d1:42:ef:cb:9c:85:66:2b:4b:93:22:68:6a:8e:
         31:64:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:08 2025 by rpki-client