Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
File:                     RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json)
Hash identifier:          HKlgp5aHUpHb7N6SUdi+mtqy7MxjJ7dIiiNQXqEy1jQ=
Subject key identifier:   D9:F8:5B:0A:D9:C9:62:38:F7:74:5C:09:5A:F5:15:65:DA:43:77:16
Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
Certificate issuer:       /CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Certificate serial:       0198960005849038B34DF9046B5549767E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
Manifest number:          07F7
Signing time:             Sun 10 Aug 2025 22:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:40 +0000
Files and hashes:         1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: Z+Qrw+kN2kDHOVJgbdIjeXOgXhf4UxR4WWSVL3mVURA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:05:84:90:38:b3:4d:f9:04:6b:55:49:76:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206
        Validity
            Not Before: Aug 10 22:00:40 2025 GMT
            Not After : Aug 11 22:00:40 2025 GMT
        Subject: CN=d9f85b0ad9c96238f7745c095af51565da437716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:41:31:32:a3:ba:d0:ff:f7:02:bd:89:14:
                    76:f6:f3:5e:ce:fc:5b:fb:a4:b6:7f:a2:0d:08:40:
                    fc:94:b7:2e:62:65:3f:e3:f9:2b:ad:3e:1b:24:27:
                    5e:e2:b9:d7:ab:e1:5a:61:84:9e:8f:d0:59:ec:e9:
                    2a:d3:3e:d3:de:ea:96:c3:e3:a1:15:00:86:cd:8f:
                    87:55:0c:55:6c:b8:10:cc:64:68:7e:0a:d8:1f:68:
                    38:2d:74:fd:71:1b:54:d6:7a:c6:3d:b1:12:c8:8c:
                    20:e2:cb:65:bf:cd:70:e9:b1:c3:65:cb:17:c9:8e:
                    b4:b1:97:b6:81:87:c9:bc:e2:cd:9f:85:15:14:67:
                    08:2d:36:cd:64:6b:58:48:9a:6f:39:10:88:87:3b:
                    45:6b:43:ea:9b:70:95:38:33:67:7b:8d:41:3a:57:
                    26:b2:3c:d8:52:dc:39:95:06:3d:4f:ca:74:df:0a:
                    6b:f6:8c:44:b2:37:71:ae:21:82:05:c1:1d:5c:b6:
                    1a:86:59:2c:3f:0c:da:58:5a:6d:3d:93:78:f6:6b:
                    13:80:40:50:cb:9a:dd:a6:52:33:c2:9d:fb:ae:e7:
                    96:e9:25:41:08:3c:b0:79:5a:9b:20:cd:ed:11:ac:
                    1a:3f:74:6e:7d:b0:1f:5c:8b:12:eb:d9:3d:cf:9a:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:5B:0A:D9:C9:62:38:F7:74:5C:09:5A:F5:15:65:DA:43:77:16
            X509v3 Authority Key Identifier:
                keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:19:00:ce:91:b5:07:bd:68:e6:87:2b:11:f8:33:63:80:
         3e:a5:3a:a7:0d:c9:be:00:e3:1c:69:88:1d:3b:42:c5:91:23:
         53:de:4f:6e:57:5f:fd:7e:50:e4:d4:fc:7d:10:e0:1b:24:26:
         d9:cb:6e:23:f9:09:3f:74:3c:49:2c:e7:97:e4:b0:1c:58:5d:
         78:57:81:8c:a9:d4:d7:15:37:9e:3d:69:ec:99:c0:35:3f:71:
         b2:93:cf:bb:24:64:bc:de:0e:f2:95:12:e6:26:ce:cb:b8:84:
         d7:d9:de:60:b4:75:a1:e9:55:6c:c2:21:5c:67:a5:0b:eb:65:
         ab:44:2a:b0:33:34:f8:43:c7:5a:6c:d7:df:66:f0:4a:df:ea:
         44:93:e5:bc:67:2c:2c:bd:61:a5:48:d8:42:1d:11:96:47:52:
         a0:76:0c:8a:57:5b:d7:2c:c3:fa:a9:c1:bd:78:67:40:5e:69:
         62:46:34:9f:fb:81:a8:be:26:78:a0:c4:91:74:d3:4e:a8:61:
         8e:dc:5e:9b:df:ec:cc:16:29:c3:8d:34:64:82:10:ad:76:6d:
         f8:28:a8:64:e3:ca:91:7a:98:3d:ba:88:04:54:b3:85:93:1c:
         90:62:7b:fb:e8:1c:6f:82:65:be:a9:05:a5:5e:73:48:d7:da:
         89:ae:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:31 2025 by rpki-client