Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
File:                     d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json)
Hash identifier:          n+LbnjhWl3OKjV+cqYgXKpacJsULIrsjXtD54lXOfQE=
Subject key identifier:   58:7D:6A:02:D6:D9:15:B0:22:73:52:BF:3B:E8:08:44:CC:B0:60:C1
Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
Certificate issuer:       /CN=77f33af25f95ab29711188e9ffea50cccb211d76
Certificate serial:       019892231F91054D74601E0E519A75574DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
Manifest number:          0D9C
Signing time:             Sun 10 Aug 2025 04:00:31 +0000
Manifest this update:     Sun 10 Aug 2025 04:00:31 +0000
Manifest next update:     Mon 11 Aug 2025 04:00:31 +0000
Files and hashes:         1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: Pge2DI7t9zQaDzrCMOOm74DYPRRH6tYDsnNbsVyFVLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:1f:91:05:4d:74:60:1e:0e:51:9a:75:57:4d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76
        Validity
            Not Before: Aug 10 04:00:31 2025 GMT
            Not After : Aug 11 04:00:31 2025 GMT
        Subject: CN=587d6a02d6d915b0227352bf3be80844ccb060c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:ed:7f:90:01:a9:a7:47:c1:f2:4f:40:56:
                    6e:e6:b6:0d:e2:15:31:8d:8d:5a:f3:93:b0:b8:39:
                    b1:4b:09:a6:13:ef:ff:b6:b3:55:f4:aa:b2:14:50:
                    72:3b:05:01:ec:1c:6a:3f:2c:60:6c:78:8c:00:e7:
                    11:ee:a4:d7:e2:9d:17:3f:bc:67:31:f9:a9:f3:c9:
                    ea:eb:66:37:11:b1:fc:de:58:dd:9c:65:0a:f1:b9:
                    26:9a:00:8e:60:97:2d:1c:63:d4:83:c0:42:66:d9:
                    18:c0:c8:27:cb:f1:23:5b:01:c6:15:4d:90:7b:04:
                    2b:2b:09:3f:55:01:6d:ee:7b:f8:a8:7a:c8:5d:24:
                    41:90:b3:bd:d4:d2:ea:8c:19:fd:90:7d:93:68:c8:
                    1d:81:14:65:c5:a3:3f:9f:1f:8a:de:bc:11:68:dc:
                    0d:21:b0:c5:f6:8b:30:1b:3f:f8:09:2c:b6:fb:58:
                    2a:e4:2f:b1:38:7c:75:7b:da:7a:86:17:9e:99:66:
                    dd:f0:f9:a6:02:e8:fc:49:b7:2c:1d:ef:03:5f:2f:
                    a9:b7:5d:f4:5a:8d:ee:16:d5:26:6f:c9:c2:6d:b9:
                    3d:0d:28:8a:89:21:8f:a0:6b:46:f8:ec:16:ff:8c:
                    3c:08:60:39:9b:62:a3:0d:56:32:dc:bf:d9:70:c7:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7D:6A:02:D6:D9:15:B0:22:73:52:BF:3B:E8:08:44:CC:B0:60:C1
            X509v3 Authority Key Identifier:
                keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:ec:1a:ab:50:04:7e:ab:d6:dc:23:06:1f:46:b9:db:7f:
         c9:f1:6c:8e:49:aa:c8:1a:2a:20:ec:a4:d7:62:f8:90:07:98:
         7c:2e:88:9f:8e:53:07:8c:1e:8f:3e:36:b5:42:a9:90:85:48:
         2e:cc:6c:b8:cd:c2:d8:1f:92:96:fd:f8:13:9e:ea:9d:38:fc:
         36:ae:31:e2:71:78:09:34:4b:a4:dd:f5:65:9e:c7:68:ef:b0:
         8c:67:23:04:e6:a7:64:93:ea:56:2e:d1:08:a5:6b:e0:e3:3d:
         41:13:2a:78:1e:fb:b3:24:17:b0:78:cf:eb:5e:69:fc:9b:1c:
         e2:17:75:97:10:9a:2f:c1:91:3e:d5:10:e6:2f:2e:ff:de:c1:
         73:93:17:e5:fc:1a:eb:8b:3f:99:c8:42:92:81:ef:ba:cc:87:
         2f:39:cc:4b:36:b7:2d:c4:12:91:d0:6b:8f:84:6a:6d:94:e7:
         e9:50:aa:c6:d1:b5:cb:fe:91:cf:87:d0:ec:03:1c:fd:e4:08:
         01:c0:9e:05:23:fa:67:8e:f9:c3:d8:02:61:45:00:c4:e8:5d:
         34:1d:6a:88:82:0c:28:a8:77:94:df:f6:37:41:85:40:d7:d4:
         20:c9:90:7e:a5:28:ad:06:52:e3:91:f7:40:eb:13:d8:fb:48:
         2e:b3:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:42:01 2025 by rpki-client