Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
File:                     cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json)
Hash identifier:          MmT0l/E9yz+k3KcrYBNPnu0GK2C8lcSoJf3UGBfZXzg=
Subject key identifier:   36:80:B7:32:44:24:70:AE:35:A3:3A:B4:8D:CA:75:89:B3:D6:11:9A
Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
Certificate issuer:       /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Certificate serial:       019894B7D1EC0DDF8D50500B48236D607910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
Manifest number:          0FE7
Signing time:             Sun 10 Aug 2025 16:02:11 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:11 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:11 +0000
Files and hashes:         1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: 7QFxoeVB5ZOTzjetNSbA9Pt7vs9wivqYrVViTkRFpr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:d1:ec:0d:df:8d:50:50:0b:48:23:6d:60:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
        Validity
            Not Before: Aug 10 16:02:11 2025 GMT
            Not After : Aug 11 16:02:11 2025 GMT
        Subject: CN=3680b732442470ae35a33ab48dca7589b3d6119a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:5e:18:05:17:8e:7b:36:87:cb:15:30:35:
                    7c:76:e1:59:ad:35:6c:0d:b3:de:73:25:d9:05:1f:
                    46:e3:bf:fc:b5:4d:74:b4:60:04:17:e2:a4:b9:cc:
                    19:2a:b8:39:3a:4a:b7:d2:58:db:24:0d:54:f8:92:
                    ed:37:1d:82:38:f7:2f:16:fa:f2:69:bb:9e:1f:63:
                    e4:b4:ad:47:68:88:e6:b4:79:6c:d5:95:6e:0a:0d:
                    da:e7:b2:e8:4f:96:27:92:90:31:8d:55:43:1c:47:
                    c0:c4:59:44:4b:a9:5c:48:b9:42:ca:73:bd:85:5e:
                    e1:13:79:47:b3:1e:42:98:a3:da:99:02:b6:24:ab:
                    a7:bb:bd:5f:bc:10:64:67:7c:d4:2c:4c:5f:25:89:
                    9c:44:2b:21:24:d2:97:ef:8f:a9:59:f6:f5:29:3d:
                    b1:20:5b:2f:f6:d5:8e:21:aa:78:31:f0:46:81:31:
                    79:c6:a5:cc:34:2c:61:41:ab:c2:4d:43:ca:80:5a:
                    c2:a7:92:c6:8f:75:75:0d:65:c5:28:3e:ce:16:73:
                    a2:62:51:ac:0d:5c:80:bb:64:2f:c0:5a:4e:16:41:
                    6c:01:57:91:39:fe:64:f0:f3:83:fb:42:70:d4:94:
                    2f:86:b0:16:b9:00:ca:9f:70:ce:a2:4c:48:db:63:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:80:B7:32:44:24:70:AE:35:A3:3A:B4:8D:CA:75:89:B3:D6:11:9A
            X509v3 Authority Key Identifier:
                keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:37:03:6d:f1:23:da:72:57:7f:af:a0:75:88:ff:9a:5f:c5:
         74:69:4a:56:d4:d4:93:c7:1c:51:9c:99:65:33:7c:85:2f:17:
         c7:27:f6:8a:1e:b6:45:17:ec:63:10:68:18:29:a2:30:4b:fa:
         f5:ce:dc:9f:96:90:54:f1:6b:86:14:fd:fa:b8:57:c6:18:ef:
         18:ff:ab:f1:6e:1e:bf:a5:76:79:c6:17:f2:9b:88:bb:7a:e3:
         f4:6b:c3:0c:88:39:ae:40:95:5e:9c:90:df:5a:85:33:3a:c7:
         25:14:b8:a0:48:cb:44:80:73:af:ea:9c:03:4f:25:6a:95:10:
         ee:27:8a:da:00:38:62:3c:6a:b8:c2:f4:c7:29:35:a6:0f:b5:
         38:7b:1f:02:2a:b2:11:43:53:09:a0:79:36:60:70:f2:8a:12:
         78:76:20:f8:9b:c3:a2:5f:81:fd:a1:d9:32:52:80:f1:f3:6f:
         73:4b:d9:dd:3d:74:4b:0d:68:a5:f0:70:08:1f:4e:e1:46:d1:
         1e:7a:63:a2:7a:44:ed:b9:75:a7:e9:e9:63:a8:8c:13:35:dd:
         e6:24:6e:8f:aa:8c:65:12:db:8b:3b:7d:ab:0b:5e:fe:9f:96:
         0c:68:1c:f6:83:a8:10:0a:71:9f:6f:c7:1b:fa:cc:38:25:fe:
         02:50:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:25 2025 by rpki-client