Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          qBSBBjignlgjl1Hw60ppm6rHVZDzB9NxSl5oVKbWY7Y=
Subject key identifier:   88:FB:62:34:96:0C:77:17:94:D1:02:7C:95:F1:70:A7:4E:B1:EB:82
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       01987CE4FFBCB3B9B9B08DFAC75BFDDD0DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          0313
Signing time:             Wed 06 Aug 2025 01:00:39 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:39 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:39 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: +Y74tLsaD0CyTuZbAVESXZTXU4reRjMhhuEQj5IfXm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e4:ff:bc:b3:b9:b9:b0:8d:fa:c7:5b:fd:dd:0d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Aug  6 01:00:39 2025 GMT
            Not After : Aug  7 01:00:39 2025 GMT
        Subject: CN=88fb6234960c771794d1027c95f170a74eb1eb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:9a:f7:ca:d8:5e:22:67:e5:e4:a2:95:b6:
                    3f:84:c2:5b:8c:65:1b:e2:fd:92:67:43:61:d6:42:
                    e5:10:a6:fc:b2:10:71:b2:1a:d2:98:7a:db:89:27:
                    14:59:60:09:50:76:d7:12:f3:f8:91:36:63:e5:c2:
                    4e:ea:9d:07:bc:a8:48:52:cd:48:60:73:1d:18:97:
                    a9:77:d4:cd:21:d1:e4:94:6a:27:4e:81:98:dc:93:
                    34:6e:38:d5:76:f8:b0:5e:e9:22:88:77:4a:1f:45:
                    66:e3:a7:f1:ae:8c:53:a6:e6:3f:c4:92:55:c8:5e:
                    3f:d1:b4:f9:2a:5f:3a:63:ca:b8:55:71:70:a3:d4:
                    d1:1c:ad:5b:85:52:4e:ae:97:a4:39:93:7e:53:06:
                    a1:3c:5c:8d:fe:41:41:34:56:b5:5c:57:2f:6e:58:
                    81:81:32:d4:21:ab:d1:eb:12:2a:b5:47:31:c2:c7:
                    7c:89:fe:90:f6:e8:de:1c:77:93:bb:51:78:f4:d2:
                    3a:d5:5a:fe:d7:1b:5c:90:89:3b:74:c3:6a:55:1c:
                    5d:eb:3b:99:bf:c7:74:0e:ca:f7:23:5c:a5:4d:a0:
                    86:31:98:54:71:93:d5:6b:40:62:58:56:84:0e:4e:
                    ff:26:53:30:7f:52:c6:bc:db:4f:e1:12:25:95:89:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:62:34:96:0C:77:17:94:D1:02:7C:95:F1:70:A7:4E:B1:EB:82
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:6c:ad:99:71:60:b7:77:b5:e7:fe:2a:80:ee:79:df:0d:
         a2:ea:2a:0e:39:1a:61:f0:a7:34:f0:4a:3e:bc:28:fe:1a:5d:
         91:dc:e0:76:81:89:20:79:dd:45:d8:be:e5:b0:bc:f4:9e:91:
         ed:61:a4:54:0d:f2:26:e1:6f:9d:c7:53:8d:a3:d8:be:d0:1b:
         5c:31:d2:75:da:42:6e:c8:64:98:b3:00:c9:f0:c7:bb:36:1e:
         a4:22:e1:9c:5b:1d:3e:c0:2f:43:df:71:84:9e:54:3d:73:52:
         57:46:da:a3:9d:21:d3:df:d8:ab:dc:3f:42:f1:ec:60:6f:66:
         89:b1:a4:7e:1e:4c:f4:3a:f5:5b:fb:aa:3e:b4:21:bc:fe:90:
         71:37:16:6c:23:19:51:f9:cf:82:1e:28:b8:f1:4b:cb:88:d3:
         ea:3d:17:c7:e2:42:e0:cd:50:89:6a:2f:0c:19:c3:a7:d5:ad:
         9a:af:e4:a7:67:44:cb:71:50:2c:23:25:87:ee:be:44:30:08:
         25:bc:f9:c1:38:be:0b:70:85:e0:f6:82:30:ee:d9:31:82:07:
         71:b6:e2:df:58:0f:f7:75:a0:4b:2a:09:59:94:3c:00:1e:fc:
         7f:69:8f:ef:67:a8:a4:13:af:cc:05:06:8d:f2:b9:e9:3b:33:
         11:aa:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:20 2025 by rpki-client