Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File:                     n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier:          19uWy7shT2zudyfJDns6gcvw26VGkIJsKQQgq+zSqV0=
Subject key identifier:   8C:90:6C:EC:F5:DE:29:5F:FA:7D:B2:EE:CE:54:7A:E5:F2:C5:8C:63
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer:       /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial:       01988BEA83A847A5398BC45EF9745B784F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number:          15F1
Signing time:             Fri 08 Aug 2025 23:00:58 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:58 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:58 +0000
Files and hashes:         1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: 0ipH+3kfEcxXMF5EM0V4pAFU7XR0MRYXQO1LP7KazjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:83:a8:47:a5:39:8b:c4:5e:f9:74:5b:78:4f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
        Validity
            Not Before: Aug  8 23:00:58 2025 GMT
            Not After : Aug  9 23:00:58 2025 GMT
        Subject: CN=8c906cecf5de295ffa7db2eece547ae5f2c58c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:12:3a:41:ed:53:90:f0:5e:cb:ed:25:6e:
                    9d:08:67:fb:f4:dc:5a:e0:eb:00:ec:86:25:3f:80:
                    3d:4e:57:f0:6d:0f:9b:54:40:42:59:56:83:e5:dd:
                    c5:3e:e0:ba:30:58:b6:70:e8:7e:6b:a1:88:71:df:
                    17:7e:7b:22:bf:f8:c0:31:41:88:01:3c:bd:6b:b4:
                    09:52:06:c1:67:36:cf:35:5e:25:a6:39:fc:e0:b0:
                    b3:1f:b9:75:ae:6a:c2:a6:3f:18:2a:2f:03:98:2c:
                    20:89:41:26:f8:da:7b:49:76:67:80:93:19:ff:c4:
                    ed:5e:db:a2:1b:76:3d:a7:3d:3e:d0:f9:e0:fd:60:
                    49:13:04:51:7d:43:3c:02:9a:ee:1e:7f:e3:df:ac:
                    b5:ad:05:3b:1c:ba:a7:2c:27:c7:05:2c:bd:b2:ff:
                    2f:1e:21:1d:b6:1a:32:e4:f1:df:fd:dd:4a:b7:9f:
                    f2:98:82:07:a7:fc:57:18:e2:b4:5f:06:23:79:b3:
                    be:26:6f:d0:6b:61:d1:9b:f3:f0:ad:1f:96:ee:36:
                    b2:eb:12:de:9c:64:2a:98:5b:80:69:00:a7:31:11:
                    f7:1f:96:02:9c:13:75:dc:3e:83:32:b4:44:a0:ee:
                    26:07:67:c6:6a:5a:71:03:34:2a:46:e0:2c:96:2e:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:6C:EC:F5:DE:29:5F:FA:7D:B2:EE:CE:54:7A:E5:F2:C5:8C:63
            X509v3 Authority Key Identifier:
                keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:77:93:8f:80:c8:1c:d0:a5:10:7f:2e:70:7c:64:b7:ad:
         08:97:b7:9a:0c:25:ce:56:37:89:e1:4e:66:0a:ba:59:60:f6:
         90:55:82:d7:10:d4:3e:c2:7f:68:c0:a4:00:85:1e:36:8f:35:
         e1:31:e6:a7:14:83:73:83:a0:67:83:05:02:c0:eb:55:fb:af:
         dc:03:dd:13:39:40:36:d8:a4:69:a5:00:4d:9c:21:d9:e2:5a:
         44:21:a9:0a:b7:e6:e0:91:92:9d:ba:d5:ba:9c:d6:88:73:1d:
         99:26:e9:a8:65:5d:21:fd:0a:5a:84:9d:a3:e8:57:7b:79:a4:
         cb:1f:a0:d6:53:cd:f0:c6:08:8d:51:e5:64:5b:93:44:03:34:
         b8:97:fa:59:d9:5e:e0:7c:11:d4:8d:de:0b:aa:1a:a4:86:a2:
         76:e3:28:32:45:e0:84:75:84:da:eb:17:be:d0:e7:b4:d7:35:
         1e:36:10:cc:6e:3b:b7:5d:86:60:1a:ef:01:92:4c:f4:1c:3b:
         8c:e5:e6:98:1b:77:7d:91:02:15:b6:9b:0e:0d:f8:72:9b:a2:
         a1:2a:63:b5:6e:5b:d9:81:f3:a6:b6:1e:65:af:52:68:c5:07:
         34:74:ce:fd:1b:3a:38:db:0a:9e:1b:d7:9e:d0:44:4c:8c:07:
         90:d2:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:50 2025 by rpki-client