Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          BoC46+mS1E5uGWJM4Vi8zGQK0GjNB5JK/ouCaLkIOJ4=
Subject key identifier:   DB:C5:E4:B9:63:A3:48:43:E1:09:3D:24:22:DC:1D:AD:A5:3C:B1:05
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       019874BE1D5C5DB48D461223B28BD65A9B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          152E
Signing time:             Mon 04 Aug 2025 11:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:12 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: RYNf5Jm7knpfcWHf+9G4c6b0nxIllOArskYbLIXOyl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:1d:5c:5d:b4:8d:46:12:23:b2:8b:d6:5a:9b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Aug  4 11:01:12 2025 GMT
            Not After : Aug  5 11:01:12 2025 GMT
        Subject: CN=dbc5e4b963a34843e1093d2422dc1dada53cb105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:cf:4e:da:d6:7c:54:3e:02:93:4e:c6:47:
                    65:fe:52:42:f7:0a:96:64:f9:a3:d1:9c:4b:e4:c5:
                    c6:e5:93:74:28:ba:f8:9d:87:38:bf:8b:2f:06:f0:
                    df:1b:4a:80:a6:11:57:67:f6:1f:3e:66:3d:17:c8:
                    ad:05:e5:42:46:f1:b4:11:00:25:f4:44:27:2e:8d:
                    5b:d3:fa:3b:59:18:58:70:4b:58:db:9a:f7:10:d5:
                    87:9d:f8:4f:5c:e3:19:d5:30:60:6b:03:83:a3:3a:
                    aa:c4:2e:97:38:67:62:85:db:e2:80:65:1e:af:ff:
                    10:09:ae:8a:ef:f6:a7:fe:af:54:2c:eb:50:e1:00:
                    15:27:4e:3d:cd:de:25:96:21:24:d2:28:14:d5:1d:
                    8b:e8:f6:02:69:49:32:93:51:08:77:d7:3f:2c:4e:
                    80:2d:1d:0d:a3:a7:25:dc:c3:bf:ae:59:91:5b:98:
                    1f:7f:89:63:0e:d2:37:53:c9:ee:76:ea:ed:82:d8:
                    37:71:25:5a:8c:74:b9:a3:03:1b:77:76:73:85:8d:
                    4e:2e:3a:3e:39:e4:50:92:72:1b:11:da:26:c9:94:
                    8c:9d:5a:a5:9c:c6:b2:66:17:1e:a2:3f:4e:86:fb:
                    cd:3a:dc:44:3b:95:23:ae:68:16:10:35:9b:27:3b:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:E4:B9:63:A3:48:43:E1:09:3D:24:22:DC:1D:AD:A5:3C:B1:05
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:5d:d4:4f:16:22:07:5c:9c:31:d3:c8:16:7f:e0:7e:18:
         a7:ab:c4:3b:51:98:04:d9:0f:c8:f9:38:40:7b:91:04:32:43:
         55:f8:51:31:0d:98:61:d1:a5:fc:8c:56:f7:32:b1:90:11:54:
         f0:5c:06:da:fc:52:05:0c:20:8c:77:da:a6:06:c9:c8:69:f4:
         5f:11:2e:40:ae:32:b7:77:fc:2f:3b:f1:df:99:19:02:14:94:
         e6:11:79:b2:b9:53:35:6c:3a:2b:87:c3:84:16:7b:f4:97:ce:
         a8:7e:a9:9b:82:d4:9e:7f:67:d9:93:0d:c2:07:51:5c:8d:88:
         e2:98:de:57:c7:f6:67:ae:51:9f:2d:52:39:33:05:34:d2:81:
         2b:f5:70:46:9c:b8:c6:ec:23:d5:95:8c:82:3d:6a:be:77:e0:
         95:93:5c:08:d4:91:c5:e0:73:19:b6:c2:07:b5:5f:65:0e:fe:
         2e:56:e7:0b:07:ac:dc:ce:bf:80:6d:ca:8f:68:bf:88:f7:55:
         11:33:4b:47:a8:58:d5:0c:55:92:d5:6f:46:3d:d5:30:06:03:
         e0:66:d8:7f:96:98:40:e1:8a:4a:93:8b:92:72:c9:dc:89:ae:
         a7:a6:38:74:85:e8:7c:5f:4e:69:47:c9:af:78:20:9b:26:19:
         86:d9:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:04 2025 by rpki-client