Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File:                     0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier:          R3+GqYhMdaBb8d8Ydks0odoieVtLc2R0wHySQjf94QQ=
Subject key identifier:   AC:5A:14:3E:6D:C4:AE:9F:80:9C:17:1D:E0:1A:3C:38:F9:E5:C5:70
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer:       /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial:       019889C4F97062DA03B4005B27DDD9AF00EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number:          01C9
Signing time:             Fri 08 Aug 2025 13:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:44 +0000
Files and hashes:         1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: P2qvlCxGKZW+dDH8D5rj+nQG+A9Qfesyj0aUjgbkqgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c4:f9:70:62:da:03:b4:00:5b:27:dd:d9:af:00:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
        Validity
            Not Before: Aug  8 13:00:44 2025 GMT
            Not After : Aug  9 13:00:44 2025 GMT
        Subject: CN=ac5a143e6dc4ae9f809c171de01a3c38f9e5c570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:1c:44:b8:00:47:ff:5a:c8:ad:63:bf:f4:
                    c4:66:6f:0d:1a:e7:1f:05:69:2c:c6:68:61:1c:73:
                    73:cc:24:9e:4f:28:9c:d4:79:71:a9:ed:7e:bd:56:
                    e3:9d:6f:a1:ee:b1:ba:ab:43:dc:f0:c2:41:d2:44:
                    d0:ef:01:e9:37:f3:72:f7:cb:ea:13:a6:fa:56:8d:
                    2c:c5:99:b2:1e:07:e0:0e:e6:87:2e:f6:b1:e6:db:
                    f3:41:53:71:61:8e:d6:c8:7a:8b:96:a7:d4:24:d3:
                    5f:53:47:02:d7:e4:6b:0f:42:6b:2e:b1:46:cb:3d:
                    ee:78:36:d0:86:32:c7:4b:a3:d3:d6:a8:94:6b:3d:
                    d3:88:b2:34:dd:fe:d8:40:af:fd:6a:45:9b:c5:36:
                    14:2f:93:65:68:6b:50:4c:38:ab:d4:56:7c:dd:f3:
                    fc:77:71:4d:d1:d3:9f:fc:60:8a:42:9b:8a:bf:94:
                    46:7e:00:35:70:36:e1:2a:92:d4:63:92:42:18:60:
                    8d:ef:30:21:03:8c:7c:69:ea:0d:da:ba:7b:e1:e4:
                    44:74:1b:9e:bd:bf:3a:b5:71:1e:a3:2d:e3:91:65:
                    3c:14:4c:42:e0:7b:ee:94:3c:0d:ac:96:77:88:d9:
                    18:73:58:e9:9c:27:56:bc:ad:98:24:ec:ea:e6:f3:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:14:3E:6D:C4:AE:9F:80:9C:17:1D:E0:1A:3C:38:F9:E5:C5:70
            X509v3 Authority Key Identifier:
                keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:30:1b:00:0e:5d:d2:73:6c:ea:84:8b:4b:ef:b2:6f:8e:3f:
         39:1e:38:c9:c2:32:b3:15:0f:ea:80:60:05:98:16:13:cb:79:
         4b:62:a8:d0:2c:e2:ce:c0:e0:da:99:65:b7:85:f0:6f:de:f5:
         76:fe:aa:08:0f:65:f7:73:07:20:3e:5c:3e:79:69:04:f7:a6:
         6c:45:29:5b:76:af:9a:19:50:a1:11:e1:c3:d1:47:52:9d:b7:
         64:57:83:a8:ee:1a:b3:50:96:95:b7:e9:56:44:f9:45:13:7c:
         2e:0a:e9:00:ad:57:bd:14:0a:cb:cc:a5:8c:23:f8:fb:17:1a:
         77:f7:08:98:dc:55:09:db:dc:d7:78:9f:cc:0f:95:82:22:16:
         86:b1:81:af:2c:09:87:48:2b:39:d1:8d:bc:72:1e:3c:56:ae:
         8c:d6:82:97:4c:16:f5:53:a4:a0:7e:d6:36:a2:48:92:08:0c:
         e8:1c:45:1e:ca:b6:16:32:99:d6:53:9e:6b:19:6d:75:cd:0b:
         35:6a:0d:1d:b9:f1:bf:70:4e:13:5d:79:ee:7e:28:6a:bb:52:
         b2:ed:2e:8c:7e:36:00:99:e3:d3:34:4c:77:1d:e2:8d:70:5f:
         ad:b4:e6:e1:2e:2c:cd:89:84:5c:81:6b:30:b4:47:7e:41:a5:
         ef:bb:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:02 2025 by rpki-client