Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
File:                     npWzJ2xWYmGPOcvBVYdAy-76GC0.mft (raw, json)
Hash identifier:          8BzvMtSHO7JqIibnEYbsSQT4rG7CPiwXfbgJwGIg0d8=
Subject key identifier:   98:17:8B:FD:43:6B:90:37:62:B3:6E:AE:1F:72:EB:40:AC:F2:1C:95
Authority key identifier: 9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D
Certificate issuer:       /CN=9e95b3276c5662618f39cbc1558740cbeefa182d
Certificate serial:       019879AEDFD5EE3A8CC38B346FBE43DD4373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 10:02:40 +0000
Manifest this update:     Tue 05 Aug 2025 10:02:40 +0000
Manifest next update:     Wed 06 Aug 2025 10:02:40 +0000
Files and hashes:         1: npWzJ2xWYmGPOcvBVYdAy-76GC0.crl (hash: 8BHzRYmGu1rYmhNKI9k5oYr/U3jmIYiL9j0zin1OQ08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:df:d5:ee:3a:8c:c3:8b:34:6f:be:43:dd:43:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95b3276c5662618f39cbc1558740cbeefa182d
        Validity
            Not Before: Aug  5 10:02:40 2025 GMT
            Not After : Aug  6 10:02:40 2025 GMT
        Subject: CN=98178bfd436b903762b36eae1f72eb40acf21c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:46:37:f8:79:7c:30:bb:22:75:47:56:5a:
                    60:ae:45:8f:5a:b4:c8:da:f2:9e:85:f8:3d:c3:cf:
                    76:e1:bc:2d:4a:94:f0:d1:25:93:48:6b:6e:ca:d1:
                    3f:2b:f9:fa:36:e8:fa:ed:26:01:3e:67:81:49:23:
                    4b:70:11:ae:1e:3b:6e:8a:b1:90:2a:40:13:0c:5c:
                    1a:a6:e2:8b:6f:0e:69:d7:5c:aa:2f:cc:2b:d7:42:
                    8d:b0:f0:14:3a:7e:2c:b8:ad:1f:f9:47:11:a0:01:
                    88:1f:81:e5:e6:02:b6:7f:26:4e:12:20:85:20:ca:
                    c1:14:7b:ef:d2:e5:99:a6:79:5c:c8:0e:b5:9b:e1:
                    b9:f3:83:c6:ff:d6:be:19:e8:7f:a1:22:79:da:f7:
                    3c:34:fd:c9:2d:55:9f:34:fc:64:fa:92:99:21:57:
                    cc:30:bc:e8:db:62:fe:1c:16:a6:9c:47:ef:5a:de:
                    54:bc:ff:a6:8b:bb:0e:15:41:58:dc:0c:c6:de:47:
                    9c:68:7c:cb:52:a8:a6:7c:b2:11:6f:24:28:af:07:
                    57:b0:80:43:e1:1c:12:f7:f0:b3:d9:f7:30:d4:0b:
                    c9:4b:a3:8d:25:16:a3:9a:3c:b1:78:da:27:b1:83:
                    87:a1:0e:67:8c:d2:74:62:65:bd:10:fe:d1:d9:f5:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:8B:FD:43:6B:90:37:62:B3:6E:AE:1F:72:EB:40:AC:F2:1C:95
            X509v3 Authority Key Identifier:
                keyid:9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:49:bf:aa:0e:98:b8:a6:9b:ee:90:11:e3:6d:73:54:05:
         fc:8a:2e:60:b1:09:5b:8a:57:83:ba:6c:2f:13:45:f3:54:81:
         5f:55:79:35:97:06:de:73:0c:43:44:01:e2:21:38:7f:ea:0f:
         2d:38:ef:13:14:43:75:cf:d0:6d:9d:d2:d8:8d:84:52:6c:24:
         67:fd:35:2d:47:bd:84:d9:2c:60:74:cf:6d:b1:65:c6:fa:f1:
         c4:59:14:f6:23:6d:f8:56:ee:6f:cd:7b:c9:72:ab:7d:87:c2:
         5a:a8:27:9e:22:26:e4:6a:26:ba:3c:e3:0f:d8:71:3d:cb:94:
         98:b8:80:a7:0a:00:f0:a9:e1:83:0c:0e:a0:3c:d0:ca:b7:0e:
         3f:77:cd:0d:c9:7e:8a:28:6d:0c:ec:07:47:7e:66:0e:95:39:
         3c:a4:fa:d4:3b:81:5a:8f:73:85:52:64:08:5c:76:41:25:5b:
         fd:30:98:ee:a7:96:ae:3d:3c:52:2c:01:28:32:df:d9:58:f4:
         32:c3:ae:90:d2:a2:f2:55:6b:b2:c3:9d:40:25:d2:f0:59:f0:
         dc:8c:73:8e:37:d9:66:b0:a9:e1:b0:82:02:7b:c0:60:e6:89:
         e2:28:02:52:2b:08:2d:c5:34:5a:c2:9c:ad:4b:1f:6d:de:47:
         df:66:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:55 2025 by rpki-client