Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File:                     n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier:          K8QLTIYKZEMS18Eyw8ZeptG9hkEj/QWwYoO77aCmwqE=
Subject key identifier:   64:6F:81:7B:58:40:98:FD:6B:D1:30:0F:6F:AF:9C:C4:0B:34:7B:54
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer:       /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial:       01988EECEA73947D254CCC17B62378209286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number:          0B69
Signing time:             Sat 09 Aug 2025 13:02:27 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:27 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:27 +0000
Files and hashes:         1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: 9rd5qRoou2+Stb7gqaYy/cOyuJLurmjvmUSq8BWcjXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:ea:73:94:7d:25:4c:cc:17:b6:23:78:20:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
        Validity
            Not Before: Aug  9 13:02:27 2025 GMT
            Not After : Aug 10 13:02:27 2025 GMT
        Subject: CN=646f817b584098fd6bd1300f6faf9cc40b347b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:39:64:6e:aa:ca:07:99:74:94:4e:b0:57:
                    6b:ea:28:6d:d0:3c:66:91:09:6b:65:e9:82:f0:84:
                    2f:25:b9:c2:c1:4e:2f:83:39:88:0a:11:59:b6:d9:
                    f4:88:93:bd:7f:7d:14:9d:3e:bb:b7:f7:66:54:c8:
                    2f:56:1f:75:a3:3b:85:65:fc:be:0b:c9:33:98:38:
                    fb:42:25:d6:16:86:f0:4f:60:cd:2e:04:8e:4c:4e:
                    a4:d4:cb:37:cf:fd:c0:ab:2b:e2:1d:7c:da:38:3c:
                    e2:5d:d9:9a:c1:99:8d:dd:99:c5:81:dc:88:59:b9:
                    10:51:fb:ab:ca:1b:c6:de:fe:97:d5:c1:d9:f4:3b:
                    a7:6b:8b:f3:14:68:f8:ab:5e:01:0f:09:7b:95:ad:
                    70:c5:61:49:4e:b6:f7:5c:de:1a:2a:fc:33:82:54:
                    b6:6f:59:7f:6f:e1:e4:ce:45:63:54:0c:8a:31:ab:
                    24:a2:8a:6b:68:b3:d8:cf:a0:28:f7:cd:6a:96:30:
                    60:d2:1b:15:0e:2b:ab:e3:03:46:a3:93:75:36:96:
                    4f:a7:05:92:af:5c:90:00:68:0a:a1:ec:52:1b:06:
                    ca:1e:af:a5:f8:1c:a1:51:ee:c8:d7:c3:c2:e6:91:
                    ad:70:f9:ea:f8:a8:69:7e:aa:a3:c0:3e:0d:a5:77:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:81:7B:58:40:98:FD:6B:D1:30:0F:6F:AF:9C:C4:0B:34:7B:54
            X509v3 Authority Key Identifier:
                keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:66:22:cd:2b:06:4d:8d:b3:6f:ff:62:7d:08:54:b4:a6:
         11:42:27:fd:95:23:7c:37:3d:bf:34:7c:e7:fe:05:4d:88:34:
         03:c9:85:7e:a0:6d:a1:92:39:f4:fa:ac:8a:5a:07:0e:cc:02:
         ee:28:fc:8f:3e:1e:e3:4d:7e:40:ce:3b:55:a1:80:25:cb:aa:
         a2:aa:aa:c2:88:98:06:a3:be:70:c7:07:0d:10:d9:16:3a:78:
         aa:2b:9f:24:68:02:50:a1:4d:d5:98:d5:98:46:c1:70:a6:7f:
         10:ba:0c:13:78:fd:ea:60:f5:6b:cc:b8:e0:38:4e:c0:8f:96:
         fb:3e:bf:6d:0e:8a:ec:bb:d0:7f:9d:08:9f:7c:9d:5b:4d:6d:
         93:55:7e:c7:43:27:4f:08:f7:a8:97:c0:d6:85:d5:9f:2e:e0:
         e5:bb:7a:a4:8c:c0:06:dd:85:f5:fc:47:5e:b2:6f:59:27:c3:
         ab:1d:29:ce:44:bd:5f:1c:43:2c:b5:e4:41:47:67:de:9b:29:
         56:0c:b1:67:59:20:62:a0:86:d5:ed:ab:60:50:9c:80:c3:ca:
         a3:6a:c7:2e:2c:89:17:d6:81:58:80:91:8b:f8:10:c7:a9:58:
         b8:99:ee:54:ec:68:47:77:88:3d:69:68:5f:c5:e2:9a:62:fd:
         06:16:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:01 2025 by rpki-client