Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          wtKN7qcx3tJET30X4H5ol0I1XrMvxaNBvLvNM3/xTKY=
Subject key identifier:   7F:41:7E:D6:E7:F2:E8:02:C4:05:57:7F:58:A0:67:AE:D7:B4:60:AC
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       0198A15F4DB0D1F8E782305CD361B5F5DC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          0606
Signing time:             Wed 13 Aug 2025 03:00:34 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:34 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:34 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: ObCYUpvmVmixFaVRaIzvrxq0NpCqiQrfh7Df2+iM6kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:4d:b0:d1:f8:e7:82:30:5c:d3:61:b5:f5:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: Aug 13 03:00:34 2025 GMT
            Not After : Aug 14 03:00:34 2025 GMT
        Subject: CN=7f417ed6e7f2e802c405577f58a067aed7b460ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:bb:61:b1:0b:f6:e0:20:7e:c5:86:1f:e7:
                    1a:28:85:d2:35:6f:ba:ae:57:58:86:f3:b8:f9:2d:
                    64:86:73:62:f0:d7:bd:7d:eb:d7:71:e5:40:5c:39:
                    ba:d8:57:2d:8d:d1:25:76:e9:c2:ec:94:00:bb:01:
                    59:c5:98:37:0f:fc:cf:79:f9:78:16:2d:11:fa:f8:
                    43:12:90:63:a2:50:29:7d:3d:7b:29:8b:3f:18:09:
                    65:6c:79:8b:1e:ae:26:e1:87:36:2b:2a:16:0d:61:
                    2d:73:9b:7a:ab:78:79:33:cc:f8:42:e3:c2:39:e5:
                    be:e3:33:e8:7e:c7:be:7f:d7:8b:77:35:04:c4:46:
                    27:cf:62:d5:b2:18:04:d3:d4:d3:69:1d:2a:22:81:
                    3d:24:89:db:65:a4:a6:0f:9f:ae:e5:d0:80:a7:75:
                    50:5a:07:cc:66:4e:81:1e:f1:db:ab:6f:4a:db:e3:
                    6c:6e:bc:e2:1a:4a:ce:e8:75:f3:5b:78:5e:02:37:
                    ad:74:88:b6:aa:97:63:bb:da:d4:ad:10:e4:df:22:
                    ff:6e:18:ed:8e:59:82:6c:9e:c5:28:73:5e:de:72:
                    48:60:0e:bd:23:ce:a9:d1:7b:97:cc:26:a7:f4:80:
                    d4:63:3f:3e:39:6f:b2:07:12:a1:2f:f7:41:9b:d0:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:7E:D6:E7:F2:E8:02:C4:05:57:7F:58:A0:67:AE:D7:B4:60:AC
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:c3:ee:95:61:6f:fe:1e:d3:c8:26:07:3a:8e:dc:68:97:
         b5:fc:c6:0f:d6:b5:33:30:e1:6c:f0:5f:07:f5:07:b9:17:aa:
         ae:32:c5:80:3a:4f:db:2a:aa:b6:34:e1:44:f9:65:d8:7b:69:
         0b:45:b9:b0:bc:66:f6:c8:70:53:5e:06:75:61:eb:57:0b:34:
         3e:10:5a:8e:d0:dc:82:64:51:6e:dc:b5:a9:91:6a:33:15:71:
         1d:23:45:3a:95:15:eb:9f:57:2a:f0:ca:57:36:88:14:c4:6f:
         db:24:7c:0d:91:39:35:01:5d:67:82:0f:ab:bb:17:f6:84:a2:
         57:07:e8:21:43:38:f2:24:92:06:c6:4f:f1:7b:aa:a0:e4:12:
         39:23:d9:8a:e6:fd:e7:fb:e8:d4:f6:aa:c6:ce:50:ed:2e:22:
         d9:2d:91:34:43:13:1a:75:de:98:e2:fe:3b:3e:9d:ac:50:c7:
         75:7b:e0:af:0e:ec:ab:79:64:96:08:92:25:59:94:8d:7f:c2:
         1a:29:eb:1a:e9:8e:75:f0:c6:06:22:89:d6:72:1e:de:7e:a4:
         ba:73:92:1e:b6:8d:d5:0b:d2:a3:71:9d:b6:40:a4:1a:c3:c0:
         51:00:39:eb:5f:c5:10:65:cd:7e:95:fc:bc:e7:a2:77:71:1e:
         ad:29:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:33 2025 by rpki-client