Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File:                     9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier:          Fn2inyayI5t9iAiBEg9ledqE1IG5YhY/3J5QRbVvLJA=
Subject key identifier:   FB:B1:EB:75:0C:AA:BE:0E:05:85:25:38:15:77:7B:C9:E6:D5:30:9F
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer:       /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial:       01987E65F53328ED58536CD1D36A7D781FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 08:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:07 +0000
Files and hashes:         1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: bn7Mw+v3Tpku+MBSIR1R4L6GDUQhmvrO6h9GczToJPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:f5:33:28:ed:58:53:6c:d1:d3:6a:7d:78:1f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
        Validity
            Not Before: Aug  6 08:01:07 2025 GMT
            Not After : Aug  7 08:01:07 2025 GMT
        Subject: CN=fbb1eb750caabe0e0585253815777bc9e6d5309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e0:eb:b4:68:03:55:e9:de:5c:4a:8c:37:80:
                    b4:8a:a7:26:5c:f3:ff:dc:fa:b2:f7:3c:d1:3e:e9:
                    d4:04:5c:b2:30:a6:a2:1b:f7:8c:9d:2a:ea:3a:e8:
                    67:ba:88:db:9d:ec:2c:f9:03:57:fe:44:be:12:b7:
                    e3:98:ec:10:34:e1:c0:ef:bb:0e:e3:a6:c2:d0:a6:
                    f6:26:44:ef:be:e2:1c:ed:43:47:e1:c1:ed:01:4d:
                    44:1b:fc:3f:f9:e6:a7:d3:11:8c:da:7d:c7:be:9a:
                    3f:7f:cb:6b:0b:73:e9:49:77:f4:3e:d6:cc:52:9d:
                    19:d0:4c:fa:db:6f:5e:b2:57:4e:3b:52:4b:de:be:
                    5d:6f:fe:48:5e:08:fb:3f:a2:30:57:1b:6f:83:c3:
                    b3:ca:64:2b:3b:cd:72:ed:ff:0a:3c:c1:af:6b:1e:
                    54:e2:17:73:0a:c6:7b:fc:c5:b4:6d:77:34:b2:a9:
                    20:13:08:bd:ce:58:89:7d:9c:72:fe:f9:5b:34:4d:
                    16:a3:d6:3c:04:fa:fb:05:b4:51:1f:ad:05:c5:0d:
                    a8:e5:13:66:e0:b9:f8:13:fe:f5:d2:a6:4e:76:b8:
                    12:cb:29:cd:f1:15:02:ea:b4:20:18:ab:2d:26:44:
                    85:a7:f4:05:2f:f1:25:f3:8f:81:f5:00:8e:73:21:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B1:EB:75:0C:AA:BE:0E:05:85:25:38:15:77:7B:C9:E6:D5:30:9F
            X509v3 Authority Key Identifier:
                keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:47:d1:52:63:1d:6f:e2:04:0e:d3:27:0d:84:56:92:26:3d:
         89:62:c3:9d:d5:13:fb:b9:75:b2:91:56:c1:ae:0e:09:61:d7:
         3d:bc:64:4b:f5:d7:6e:6b:2e:25:b7:92:16:ac:be:29:84:62:
         38:c4:ad:fe:6e:5c:02:86:0a:14:fc:8e:d2:1a:a7:71:29:c3:
         a4:e4:94:9e:18:84:c4:3c:f7:2a:39:02:c4:5a:27:b6:c3:76:
         ec:ff:d4:84:9d:07:35:6e:dd:d8:b0:4a:b7:7d:47:e2:e8:4d:
         7e:27:f4:f3:c6:88:c3:26:20:ac:21:07:90:b6:8e:e9:1a:17:
         81:1f:34:2b:62:01:4d:d4:5c:69:00:db:8b:61:37:02:cd:87:
         5f:b2:c3:dd:b6:f2:2e:da:f6:13:47:c9:9a:9e:fb:19:a4:a6:
         95:fe:ee:c9:df:8c:d0:3c:63:9d:85:de:ae:a5:b7:1a:bc:61:
         4a:bb:38:97:ae:0f:b9:48:1d:af:84:5c:60:53:85:fe:05:82:
         61:e3:99:5f:0e:66:db:05:e8:b2:30:70:b3:30:cc:b5:1b:ab:
         88:40:50:3c:34:c9:59:50:8b:77:47:ad:ea:6b:b4:ba:75:b0:
         94:4b:ff:37:e1:89:4c:a4:57:2b:90:b1:2a:d2:b6:03:be:a2:
         ea:a5:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:27 2025 by rpki-client