Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File:                     N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier:          6dvFtVN2qArE8IZ/12FLFceWXjUaUdNhWCnUpmw4ph0=
Subject key identifier:   77:7C:63:F9:7F:0E:30:9E:F3:8C:CD:20:42:03:CE:19:EB:85:43:96
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer:       /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial:       01987E66872BF2D66631A596F774F3CDCF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number:          0BA7
Signing time:             Wed 06 Aug 2025 08:01:45 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:45 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:45 +0000
Files and hashes:         1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: beaR6KgDIvWfUW7np6qGuNMfedAbJVLYyABCdnGNbyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:87:2b:f2:d6:66:31:a5:96:f7:74:f3:cd:cf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
        Validity
            Not Before: Aug  6 08:01:45 2025 GMT
            Not After : Aug  7 08:01:45 2025 GMT
        Subject: CN=777c63f97f0e309ef38ccd204203ce19eb854396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:57:dc:9f:8a:f1:e2:5d:1a:f3:04:e4:60:
                    b5:bb:32:ee:ff:96:c5:04:48:23:70:73:17:eb:4f:
                    b5:13:fe:12:ce:f3:02:de:fe:55:12:0a:fc:b4:69:
                    2f:9b:dc:86:fa:fc:e0:45:6d:57:ee:66:99:2a:9a:
                    9b:01:28:60:39:2e:b1:30:d7:9d:d2:c1:56:77:99:
                    88:b9:62:ab:3e:41:f8:2f:ad:5b:95:cb:eb:ea:66:
                    e7:1a:1b:50:c7:16:f5:ef:27:78:9d:9c:48:ff:33:
                    5f:06:99:ed:3d:b7:ae:de:31:41:e3:0f:37:b0:06:
                    30:89:b3:89:c8:e4:4b:9a:5a:c6:40:23:e9:cd:21:
                    2d:8a:4a:f5:1d:b5:45:c9:87:d6:db:fc:47:84:d5:
                    b4:7a:15:2a:a7:e0:0f:86:c8:01:1c:b7:71:18:e4:
                    1d:0f:08:46:f2:09:b1:a9:f9:95:bf:8e:15:c8:fd:
                    a2:36:c5:dd:c8:92:22:df:bc:20:4b:5f:d2:32:77:
                    04:f4:71:72:d3:97:b3:b8:e6:e0:02:82:45:62:48:
                    35:50:57:85:26:67:85:f5:af:23:09:4b:63:1b:6f:
                    57:7b:fd:6a:b6:4f:7c:70:b1:c6:8c:c0:3b:fb:20:
                    a7:15:4a:b6:26:9e:39:0c:e0:cf:7f:9a:51:ba:6e:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7C:63:F9:7F:0E:30:9E:F3:8C:CD:20:42:03:CE:19:EB:85:43:96
            X509v3 Authority Key Identifier:
                keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:25:d2:bf:ba:1e:30:03:01:a3:16:f7:05:9e:fe:66:f2:
         3f:11:83:0e:5f:a5:da:c0:6a:8d:01:18:49:3d:9c:1c:af:4a:
         9f:5f:2c:09:10:1b:51:ca:07:4e:59:b5:ea:11:06:de:bd:cf:
         b4:31:d9:0d:40:50:c2:5f:66:ec:7a:cc:29:9c:ca:59:6e:4c:
         3c:15:d0:c1:4b:a5:aa:7f:4a:14:e7:c2:7c:10:f3:a3:4c:77:
         77:02:0b:54:7a:46:67:c3:14:d8:3d:46:ee:1a:43:25:7c:79:
         65:a8:e6:ee:5c:cf:89:47:7c:91:13:60:65:04:b8:e7:cd:ad:
         29:32:84:4b:9a:a8:e3:1c:f5:56:35:ac:92:01:ac:74:7e:69:
         37:2b:f1:bb:c4:58:f4:b0:5b:56:92:4a:51:7a:e4:ba:6d:2b:
         29:08:46:68:52:17:ae:21:88:1d:02:f6:a1:91:1f:83:bb:5e:
         db:fd:62:8b:04:73:93:20:30:ef:2c:e6:45:67:44:28:88:a0:
         73:fd:fc:5c:88:ee:41:d3:0c:55:86:94:17:df:21:13:fa:b0:
         06:61:53:c6:87:e0:39:4d:ba:43:43:5a:b8:1c:05:7c:6b:54:
         7f:b1:56:d7:28:14:b5:37:d9:1c:6a:9c:a4:0f:bc:7f:5a:29:
         80:23:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:13 2025 by rpki-client