Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          kCtBYXmScmvuNrIbpVTgP13PAuYgnTphNQDHIkI/0NY=
Subject key identifier:   E1:8A:EE:83:D8:C9:89:EA:40:30:96:73:B4:CA:54:11:17:95:5F:D6
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       019873E35BB695B7E44268CAC422E2C3CCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          0596
Signing time:             Mon 04 Aug 2025 07:02:16 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:16 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:16 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: V7y/3LC+q07Kt5YZcVv5+63v30XjlhPrzSZYm+oHk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:5b:b6:95:b7:e4:42:68:ca:c4:22:e2:c3:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: Aug  4 07:02:16 2025 GMT
            Not After : Aug  5 07:02:16 2025 GMT
        Subject: CN=e18aee83d8c989ea40309673b4ca541117955fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:f4:08:fb:b5:89:6b:17:cb:cc:05:8e:5f:
                    e3:1d:d5:fa:2b:6a:16:f0:b0:7d:c3:dc:b9:59:12:
                    34:21:05:33:ca:a2:69:a0:64:d0:4a:83:e7:04:e8:
                    1c:8e:17:d6:d2:20:1e:eb:1a:af:4a:0e:62:83:28:
                    26:91:82:a4:8f:43:97:b5:5b:14:ef:4f:0b:5b:bc:
                    61:38:65:c3:0c:e5:b4:27:09:ba:a8:bb:31:27:11:
                    1c:c4:70:c5:a6:dc:f3:e8:1b:16:7a:55:e8:7e:2d:
                    ad:55:ab:e9:5b:3d:bd:ac:1d:f2:2b:65:28:d5:86:
                    fe:71:f0:f0:95:1b:95:69:dc:bd:52:87:14:e8:b6:
                    94:14:6a:c5:b3:3a:ea:07:19:73:13:63:fd:29:96:
                    24:ef:da:ef:6f:52:c8:82:5b:db:e1:06:ce:77:50:
                    e8:10:a4:a5:6a:91:e9:cd:d4:01:bd:52:ce:0a:cc:
                    6a:db:10:b6:31:61:4c:86:f4:42:7d:8f:cd:a1:ea:
                    23:1f:0b:0a:a4:ae:05:e2:49:d8:de:c0:fc:cf:16:
                    13:ca:3a:5c:5f:da:7b:3e:5f:27:dd:7b:49:b7:dd:
                    c2:09:9d:35:ee:b1:0f:0e:74:e6:b1:91:56:2b:8b:
                    b4:62:83:64:c9:98:b7:b5:d0:a0:b2:c9:e7:75:19:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:EE:83:D8:C9:89:EA:40:30:96:73:B4:CA:54:11:17:95:5F:D6
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:05:80:93:32:a2:20:cf:af:69:e5:cb:dd:3a:73:3d:57:
         32:7c:aa:6e:94:98:76:d7:a5:1b:8b:93:c6:81:6d:e5:c9:8b:
         28:98:05:2c:42:b1:59:4b:0b:c8:79:36:85:f4:7c:25:4b:e7:
         1c:cc:5d:37:3b:fb:ba:d7:46:63:3e:b5:b5:5a:54:5e:0a:2c:
         4e:b7:9c:2d:25:58:6c:66:e0:ef:80:2b:92:87:24:8f:b4:d4:
         07:7e:1c:10:3f:4b:c6:4f:d5:ef:f3:7d:be:ca:fd:b0:84:42:
         53:52:f0:6b:2b:92:3b:fe:f1:75:66:ce:ee:66:c6:eb:30:89:
         39:ba:83:57:4c:93:ef:94:d0:96:62:fd:25:8b:b9:ac:cb:39:
         f3:6c:49:4a:77:6a:03:8f:27:06:36:87:ed:a8:a9:86:56:c6:
         ca:c6:5b:88:64:78:ee:fd:de:1e:5f:ff:9b:a0:e8:3e:3a:de:
         74:29:af:0e:e8:f7:c0:83:cb:16:89:c8:05:e6:dc:a3:1e:65:
         ca:87:ad:ec:10:7e:d0:6d:58:5e:e0:69:4e:34:7c:c6:57:22:
         28:e2:fb:18:3c:ad:a1:8f:d1:d0:03:3b:84:c1:cc:a2:26:01:
         6a:41:d2:9e:9b:be:c4:0e:b0:ad:ea:02:5a:87:0f:6b:40:fb:
         c9:43:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:16 2025 by rpki-client