Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File:                     c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier:          FdiO7YD68CzYI7BgsLypH6ndeqIVJ5CBASh4a3Y1Ogk=
Subject key identifier:   2F:C8:8D:F5:24:4A:90:02:7F:A4:8E:D0:31:BF:D8:1A:53:A8:87:B8
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer:       /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial:       019881678FDE88C73ED7C5F4A5F562668F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 22:01:44 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:44 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:44 +0000
Files and hashes:         1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: +gMU8sjVnguuihpGwou3TSlA9mJF0FSjFlieZ9HVB68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:8f:de:88:c7:3e:d7:c5:f4:a5:f5:62:66:8f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
        Validity
            Not Before: Aug  6 22:01:44 2025 GMT
            Not After : Aug  7 22:01:44 2025 GMT
        Subject: CN=2fc88df5244a90027fa48ed031bfd81a53a887b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:83:75:25:b3:83:1d:f2:05:ad:8c:15:af:
                    c6:df:bf:f7:61:0b:b5:af:09:67:2e:32:65:1f:23:
                    22:fd:1a:97:6d:70:fe:d4:9d:30:28:85:d7:2f:ae:
                    51:bd:08:ea:69:0b:90:cd:44:b4:65:6d:f4:b1:2d:
                    15:f6:df:5b:4b:19:11:a4:07:ea:92:d1:04:6e:89:
                    74:7e:33:c4:7b:53:4e:83:4d:30:eb:9f:95:4b:93:
                    95:56:79:39:25:e9:f2:b0:2a:ab:ef:1e:d4:03:7c:
                    05:1f:e2:5a:77:28:19:9c:54:09:76:1f:62:94:08:
                    2c:e0:d8:7a:1f:25:47:13:e8:e5:e1:f0:58:54:6f:
                    32:a9:8b:2b:d4:bd:e5:a9:a5:e2:76:01:e5:72:bb:
                    00:e9:17:28:f9:8e:92:76:dd:c5:cc:59:4c:e9:a6:
                    ad:ce:38:9a:9c:22:40:6c:d9:3a:8c:b5:46:f5:81:
                    92:1c:08:f3:04:0f:76:02:84:7e:ac:69:8b:ae:6e:
                    ca:c7:99:a1:ca:b8:e7:33:d9:e9:5b:8a:70:e6:77:
                    da:97:9f:88:f2:59:32:6f:92:a2:4b:09:c9:4d:6a:
                    74:a9:ae:52:5c:43:78:62:e7:9f:d3:bc:19:f7:5e:
                    75:b1:93:f2:c2:e6:41:0b:50:37:7e:02:ab:5d:60:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:8D:F5:24:4A:90:02:7F:A4:8E:D0:31:BF:D8:1A:53:A8:87:B8
            X509v3 Authority Key Identifier:
                keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:ab:bb:8c:61:4e:6d:c9:ad:74:75:67:cd:61:3d:26:10:
         7c:fb:1c:f6:fb:d4:41:b2:7b:c4:5e:bd:b5:59:a1:7c:a1:1e:
         c3:e5:b2:64:03:b3:01:87:43:f5:74:fd:7d:f9:c4:64:77:33:
         22:26:91:0a:a1:0c:47:53:4a:07:8b:e7:43:a3:8f:6d:1e:aa:
         75:5a:c9:a4:78:05:b6:47:2c:a6:97:bb:62:0a:75:fb:55:16:
         bc:35:01:94:c5:73:ac:10:b4:3e:30:a4:96:b1:7d:11:e9:24:
         19:2c:b0:98:02:d0:a2:99:b3:83:50:90:83:90:7c:34:4b:af:
         e0:9e:d2:7e:93:d4:0e:42:21:47:44:59:bb:54:e2:ae:f1:46:
         21:bb:c3:aa:ca:1d:e1:9b:af:c7:02:a8:27:26:54:2c:9c:0f:
         46:f9:9e:11:4f:3d:6c:06:c4:30:0b:93:9c:76:f5:44:65:a2:
         a5:07:3c:e4:37:84:79:07:ae:eb:b1:0f:68:e7:24:7e:4b:3c:
         dc:88:44:0d:9a:b6:c8:75:7f:bc:64:bc:0a:56:db:92:b3:37:
         02:f4:93:96:3a:4a:ee:14:8e:28:16:61:19:03:43:9c:29:db:
         8e:28:ea:f5:ec:ad:39:a3:cc:af:c4:fb:dd:80:63:d7:62:59:
         1a:59:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:59 2025 by rpki-client