Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          av2KDyOLLvqZXd9bbySva1fYor8sJngHmtjG4PAW6aY=
Subject key identifier:   73:99:E4:9D:FF:D6:F9:2B:4E:5E:AC:19:09:BE:4B:41:B7:EA:ED:61
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       019881691EA8391BD513FB069F19F1B9F2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          0D27
Signing time:             Wed 06 Aug 2025 22:03:26 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:26 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:26 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: 0+rt+Eg731khWuRfq/FQiJMdXtVmvRjEvGDDvcndKvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:69:1e:a8:39:1b:d5:13:fb:06:9f:19:f1:b9:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Aug  6 22:03:26 2025 GMT
            Not After : Aug  7 22:03:26 2025 GMT
        Subject: CN=7399e49dffd6f92b4e5eac1909be4b41b7eaed61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:fb:d7:16:25:63:5c:dd:9b:e5:ac:05:d0:
                    2d:7a:17:22:c2:6d:82:74:72:0a:9c:56:2d:8f:71:
                    2f:53:e2:64:b4:e0:c8:8f:e4:9d:86:11:0b:6e:48:
                    9a:2f:d1:fd:e6:d9:b6:6e:f7:41:a8:83:09:28:5d:
                    81:1c:9b:29:33:7f:a3:62:6e:ad:9c:f8:5b:ea:21:
                    cf:fc:4c:15:74:9d:1f:07:f9:4a:c5:a1:ec:7b:94:
                    42:80:97:46:36:1e:6c:09:57:8f:eb:17:83:48:91:
                    6d:33:49:1f:33:b2:a9:43:81:0d:69:66:dc:9e:f4:
                    47:03:71:da:2d:f9:a1:b1:45:d2:1a:83:1b:38:9c:
                    d7:15:27:48:c5:2a:f8:17:28:3a:7c:0d:5b:fa:8e:
                    08:98:50:4d:d9:be:b0:77:a0:ab:26:a1:00:c4:d2:
                    80:b1:db:a6:05:0c:a3:49:92:2e:9a:14:22:19:92:
                    ab:3a:bc:d5:06:62:fb:0c:50:54:ca:72:ed:74:c9:
                    42:66:ac:f4:d0:81:59:c9:04:5a:23:d7:d8:70:af:
                    76:02:14:13:bb:97:a4:29:14:6b:33:88:73:76:dc:
                    1e:d2:af:66:d8:f0:0e:95:1e:73:42:36:c6:b0:3f:
                    c2:26:51:06:f4:18:40:53:89:b6:a1:08:34:74:7b:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:99:E4:9D:FF:D6:F9:2B:4E:5E:AC:19:09:BE:4B:41:B7:EA:ED:61
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:73:2c:81:47:b3:1c:1b:c6:7c:8d:99:01:70:b3:d0:10:
         7f:c3:77:ee:4d:a0:63:15:3c:0a:b6:7b:fd:bd:3f:25:e5:ec:
         40:80:af:df:a6:07:c2:7b:68:51:5d:89:b2:0a:9b:3c:e3:1e:
         e5:b0:d1:17:32:56:f6:7f:03:73:c7:28:50:b3:dc:80:a5:6e:
         f5:33:93:2d:c7:16:02:81:11:63:12:e6:f3:5e:23:62:e6:f2:
         74:b6:6a:2a:98:02:3c:9b:02:2a:a9:e5:de:8b:15:e6:1c:06:
         5b:5b:84:41:06:16:34:f6:bc:69:a1:66:52:f9:94:b8:0d:58:
         3e:b8:ae:1a:78:9d:67:e1:c6:c8:a3:77:c3:83:18:ff:5c:cc:
         93:b3:34:25:95:cd:d9:8e:56:50:f5:64:56:03:7a:0e:19:13:
         cf:e8:63:c9:5f:5d:66:7c:8c:7f:45:9e:88:b3:d7:c4:62:4e:
         0b:58:3a:49:f7:d2:a6:5a:32:a3:89:26:38:0f:49:4a:28:41:
         3b:1f:67:51:0d:1b:f4:d7:e1:4e:d2:27:ec:91:80:3a:6c:3a:
         28:86:a2:5b:3a:bc:44:25:a3:47:c5:c5:15:f9:19:ff:13:12:
         10:5d:23:37:b8:47:02:f0:f8:cf:d9:bc:4d:16:95:6d:74:da:
         87:c8:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:36 2025 by rpki-client