Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File:                     N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier:          LKbRQQYScvFZQmGt7FG6A+MJE5pc0eBNezK/aQw74pE=
Subject key identifier:   B1:39:E9:B3:E7:15:FF:85:44:D4:4D:08:37:8D:58:1B:65:07:63:16
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer:       /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial:       019880C20BF7A380B609F22FE791E1E98C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number:          10C9
Signing time:             Wed 06 Aug 2025 19:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:57 +0000
Files and hashes:         1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: 8nTeVI5OO0pIuk+Jq8cV4lngstpAIWw1l/BKrNRyfdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:0b:f7:a3:80:b6:09:f2:2f:e7:91:e1:e9:8c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
        Validity
            Not Before: Aug  6 19:00:57 2025 GMT
            Not After : Aug  7 19:00:57 2025 GMT
        Subject: CN=b139e9b3e715ff8544d44d08378d581b65076316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:90:3c:60:04:bc:d3:ad:c2:32:97:4d:8b:
                    2b:83:48:96:b2:dd:2c:9b:f7:2b:79:d8:30:4e:bd:
                    63:52:4b:b8:df:0d:ad:ae:a2:ea:6b:e4:b0:f8:6c:
                    1f:2d:b5:65:24:49:be:85:c8:a7:63:55:cb:70:e2:
                    3d:65:ae:21:3b:ca:36:68:50:ef:ac:e3:46:bf:b2:
                    e2:ab:3f:b7:d2:26:da:41:86:42:1f:41:cf:cf:a9:
                    65:3f:db:06:7c:f0:62:3e:f0:73:7a:3a:85:46:97:
                    15:24:c1:5a:69:78:bd:75:d9:03:fb:ee:86:61:a7:
                    63:e9:b3:32:d3:0b:fc:10:7b:79:f0:76:db:1c:0b:
                    47:bd:27:ec:7a:ce:09:8b:90:be:58:23:2e:dd:05:
                    76:b9:99:66:dd:a8:c0:aa:c6:17:d1:96:84:4c:b7:
                    64:81:18:8b:36:4b:8e:57:7b:67:fc:e2:bc:55:4a:
                    0c:ba:cd:d6:59:5c:43:81:02:55:66:c8:7a:ae:3c:
                    88:13:b0:40:00:90:dd:a4:7e:ce:d2:22:e2:f9:8b:
                    a0:52:74:e7:16:a0:8f:b2:f0:2e:94:85:52:05:50:
                    90:e6:e5:22:75:e2:34:ec:79:29:60:4d:8a:c9:c9:
                    3e:1c:75:38:59:44:16:a6:23:37:60:cc:20:4a:a5:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:E9:B3:E7:15:FF:85:44:D4:4D:08:37:8D:58:1B:65:07:63:16
            X509v3 Authority Key Identifier:
                keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c7:e6:3c:1f:93:69:76:d4:08:1b:10:da:f3:bd:68:be:4b:
         c2:c4:e7:b5:f4:51:f4:17:55:9d:1e:2a:e6:da:21:e8:20:78:
         16:29:c6:75:c9:6f:28:89:76:01:f3:36:55:74:e3:7c:18:b0:
         10:f6:93:de:eb:db:51:73:b8:73:45:e8:6e:67:fa:f2:b1:28:
         c3:c4:eb:77:ca:93:f7:99:d2:a4:83:6d:2b:4d:d2:ee:76:be:
         9e:95:ec:aa:0a:a7:08:ca:fa:e3:8f:40:48:60:5f:e0:b0:9d:
         40:ec:59:32:f1:33:81:6d:d4:85:58:51:36:54:63:3f:c0:5f:
         05:a8:7e:38:18:f0:f8:dc:9e:67:80:e0:31:8f:d1:13:aa:fb:
         b8:5d:b2:e9:90:66:c3:78:0e:82:0b:fd:32:7c:a3:05:23:16:
         29:c0:a8:d8:dd:f3:9a:a7:7a:91:2a:81:49:61:c7:fb:3b:9b:
         e4:c8:4e:c2:6c:c0:62:a3:f0:84:7d:9f:22:7f:17:b6:9c:b8:
         f8:c9:ec:2e:5c:d1:9a:68:c5:61:2e:cd:e5:f5:14:fc:fc:25:
         51:df:79:50:ce:3d:b9:6f:e4:6d:48:7b:52:be:5f:0b:1e:f5:
         f1:53:46:b1:1c:bc:81:54:13:f8:f9:fe:11:07:53:1b:45:26:
         18:a9:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:14 2025 by rpki-client