Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
File:                     c_guDtDzbgmSN8xCz4d4tAeCgAE.mft (raw, json)
Hash identifier:          nccS+dd6D0pMfcbVt/u2H2tHobkRLtZXZn9latmO/V4=
Subject key identifier:   BC:D6:5A:47:6D:FC:B0:90:EC:46:04:14:2B:30:BA:61:EF:C8:5C:BB
Authority key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01
Certificate issuer:       /CN=73f82e0ed0f36e099237cc42cf8778b407828001
Certificate serial:       01987CE4D8A82623396ADF10C4D82FE6B1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
Manifest number:          1617
Signing time:             Wed 06 Aug 2025 01:00:29 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:29 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:29 +0000
Files and hashes:         1: c_guDtDzbgmSN8xCz4d4tAeCgAE.crl (hash: 8rkhyG0Pzdkhhw18a8/0rmevB2VBrpKvdrxmIvOj6dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e4:d8:a8:26:23:39:6a:df:10:c4:d8:2f:e6:b1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f82e0ed0f36e099237cc42cf8778b407828001
        Validity
            Not Before: Aug  6 01:00:29 2025 GMT
            Not After : Aug  7 01:00:29 2025 GMT
        Subject: CN=bcd65a476dfcb090ec4604142b30ba61efc85cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:93:3e:38:26:ac:36:e1:09:7b:2f:31:2a:
                    4d:01:22:45:30:2c:de:df:2b:e7:7a:2e:c0:71:69:
                    b0:cf:51:12:c3:b0:9b:85:45:06:af:6a:ac:d6:57:
                    97:3d:8d:56:08:a1:1e:72:10:9e:05:1b:9f:cc:33:
                    2e:83:a0:7c:8a:77:ba:81:42:12:77:aa:e2:77:26:
                    48:b2:2e:d2:44:a7:46:08:96:1f:5c:ef:ff:24:35:
                    cf:c9:f8:d7:ce:f7:b3:e9:a0:c9:5f:b0:d1:fe:72:
                    57:16:28:9e:2e:c2:3a:43:1a:29:93:62:c3:75:25:
                    a0:01:28:f0:01:09:dc:ed:04:c8:99:4a:47:44:9a:
                    e3:d1:e7:2c:14:cc:a7:49:b5:05:4d:88:4b:f0:76:
                    a8:01:98:df:f0:9a:cd:bd:68:88:30:5e:36:1f:09:
                    49:8a:f7:8b:4e:9e:11:55:3f:a3:27:e5:00:2e:07:
                    ef:68:95:8f:2d:67:81:40:61:25:79:8b:e8:fd:1e:
                    9c:2b:b0:f8:03:12:32:5e:1c:76:bc:6a:74:4b:60:
                    0c:fd:16:40:3d:d2:a2:ba:0d:fd:2f:97:87:75:23:
                    04:c7:d9:32:3a:13:37:b9:14:a5:bb:37:ac:9f:67:
                    ac:01:17:24:97:fa:91:b2:12:74:0e:94:d8:41:90:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:5A:47:6D:FC:B0:90:EC:46:04:14:2B:30:BA:61:EF:C8:5C:BB
            X509v3 Authority Key Identifier:
                keyid:73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:57:88:c8:42:4e:d4:2a:cd:25:fa:ec:8c:f4:28:fd:f7:
         40:79:ce:58:a8:e8:c1:21:14:70:f0:c2:b3:8f:f3:72:21:8c:
         9f:ba:73:57:71:f1:f7:df:28:82:02:6e:07:15:8d:80:0b:53:
         f0:81:5d:5f:51:0d:80:36:b4:25:b4:1e:06:1a:98:0b:18:e7:
         2f:50:9e:6e:d7:99:ad:64:ee:50:b5:a7:a7:f8:3f:a9:af:b7:
         bb:96:21:0c:59:9d:22:61:42:fa:6f:89:c2:6c:75:1f:fb:af:
         44:3e:f6:7a:ea:b0:9e:aa:ef:b5:22:7a:11:3e:2d:16:76:27:
         7e:fe:07:1c:3a:e7:63:0e:45:9f:d2:43:62:bd:c4:c2:69:bf:
         50:48:b9:5f:d8:b9:62:7b:ca:a8:7b:8c:b9:2d:92:ad:cf:5a:
         68:aa:a7:4f:c4:00:49:60:f3:4e:a2:b0:98:cb:89:3e:1b:72:
         ea:b4:12:b5:5f:39:8f:90:8b:84:c3:38:0f:f0:07:0c:90:5e:
         d5:28:3c:a6:63:d9:70:84:0a:55:6b:70:d5:97:53:cb:2c:9c:
         bb:86:66:84:40:c0:19:8e:a6:d8:bc:a9:e3:96:e7:c0:17:b0:
         ce:90:77:bc:42:80:11:d5:70:7a:9b:61:b9:a7:83:c4:0f:d0:
         29:20:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:56 2025 by rpki-client