Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File:                     mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier:          Qh7qXBGQMZFh9pF7kZmjE8ajT2xr08iDkbRJBnyl94o=
Subject key identifier:   D8:B8:85:97:61:C9:94:68:AA:01:BC:E0:F3:59:13:30:D6:21:22:29
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       01987ED3FF2A2513E4D5C8FCA1446A3E2519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number:          0DC0
Signing time:             Wed 06 Aug 2025 10:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 10:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 10:01:19 +0000
Files and hashes:         1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: gCliiHN480zIrhO0geFNKuGAsik84bJ2eBCQv2sGeW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:ff:2a:25:13:e4:d5:c8:fc:a1:44:6a:3e:25:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: Aug  6 10:01:19 2025 GMT
            Not After : Aug  7 10:01:19 2025 GMT
        Subject: CN=d8b8859761c99468aa01bce0f3591330d6212229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:8c:31:b1:3d:fa:20:3e:c0:ff:6f:a2:a1:
                    94:13:40:43:a7:a8:a5:1e:c2:73:94:40:d9:35:4f:
                    7d:31:ae:10:e0:23:de:03:7c:0a:e9:df:62:31:65:
                    93:bf:eb:10:e7:8d:c9:5c:51:4b:b7:1a:82:ed:a4:
                    26:e6:74:e7:32:9d:8b:0f:f9:2b:af:75:00:dd:95:
                    aa:e5:48:4d:ab:c2:02:f2:16:16:23:80:48:4d:b1:
                    23:93:e0:96:2a:27:4b:a9:7a:d5:3a:14:b4:4a:bf:
                    d5:c2:ee:1b:b1:c0:85:69:0c:68:35:a6:1b:eb:38:
                    1b:f6:7d:12:85:56:01:e6:97:32:b2:c7:ea:83:d5:
                    71:f7:16:41:6c:45:35:b6:c8:80:40:3b:3d:f4:aa:
                    16:4a:39:6d:a8:aa:b0:ca:0d:46:6c:4e:62:94:a3:
                    f9:f7:d1:b4:0f:1f:41:66:f0:e6:3a:8f:8f:2d:5e:
                    c2:3d:7c:65:d4:0d:9b:44:4a:74:ab:58:1e:a5:2d:
                    6a:da:a0:7f:78:47:b4:2c:45:7d:1f:ba:1e:5f:43:
                    6c:df:1e:63:c2:a8:bb:7a:5c:f7:2e:60:0d:91:ea:
                    ea:92:e9:a7:78:4f:a9:63:12:1c:54:07:13:37:dd:
                    3c:44:0c:87:9f:f2:c6:ce:6e:35:ab:4f:52:44:ce:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:85:97:61:C9:94:68:AA:01:BC:E0:F3:59:13:30:D6:21:22:29
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:35:42:b8:8c:cd:65:0c:70:a9:00:42:b8:84:cc:8f:49:86:
         2f:87:ea:75:04:af:4d:41:b0:57:c9:06:f7:03:4a:3c:29:19:
         03:d9:4a:96:a1:67:51:27:e0:8c:da:2a:34:d7:33:a7:44:69:
         6f:ff:68:6e:55:96:f7:7f:f0:d9:56:e9:6e:6e:8c:e8:23:77:
         d7:6f:f7:d9:7c:4c:6e:9c:cd:9f:e4:c6:0b:5f:69:48:e2:77:
         7c:0c:db:81:3a:d8:81:41:a8:23:89:ab:89:9d:87:9f:8c:54:
         fe:c7:1e:7b:d6:0a:81:f5:08:1a:a5:f0:7f:b1:51:88:35:0f:
         55:9b:b7:47:9b:ac:a6:4f:df:c9:6f:d3:f7:3a:25:cf:06:d6:
         08:aa:3f:58:5c:c4:f1:55:a1:9a:4d:49:18:6a:ae:1a:d7:ac:
         aa:2b:69:6b:d3:63:9b:dc:4f:b5:38:bc:46:fd:af:17:70:71:
         b4:d5:e0:72:e0:18:da:67:a1:76:3b:0d:dc:7d:09:ff:17:ab:
         d7:70:0b:98:a6:77:05:d4:bf:fb:44:7e:af:27:6e:94:de:d4:
         c9:27:7a:a9:f6:f4:5c:a0:2d:0d:a6:af:db:5e:64:38:2a:81:
         56:2a:47:12:63:fd:85:c7:dd:ed:38:4b:69:8c:64:2e:52:c5:
         b0:79:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:04 2025 by rpki-client