Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          o7ANyi9uzZ89TrI1nznSO7/MQ1mQ4mSsjR8a8k1/8fU=
Subject key identifier:   F2:51:6D:DB:6F:73:9D:B9:2D:D3:98:96:6D:D8:8A:8C:C8:07:BB:84
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       01987298A8CC2F7A6CEDDE552554B7F62417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 01:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:03 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: IULhOtQtv6QwmaGR/7XnZt/cOe+59E9JGWEm5bpoQLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:a8:cc:2f:7a:6c:ed:de:55:25:54:b7:f6:24:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: Aug  4 01:01:03 2025 GMT
            Not After : Aug  5 01:01:03 2025 GMT
        Subject: CN=f2516ddb6f739db92dd398966dd88a8cc807bb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:6a:32:c6:15:3e:fb:31:04:92:30:45:bd:
                    66:65:2e:86:9e:9a:2c:c6:23:06:9f:c2:61:88:1b:
                    7c:08:09:fa:59:34:ca:dc:06:21:5c:a7:51:75:48:
                    c1:76:5d:11:e4:45:5f:b6:a9:48:77:2a:29:4c:bb:
                    2d:87:6e:c9:86:b9:72:54:b1:42:16:ea:59:6d:b5:
                    2a:38:66:6c:09:13:5c:4e:38:09:53:12:c6:80:46:
                    e5:bf:40:1d:28:ab:ab:2c:b2:ac:9c:c6:ce:a2:4f:
                    33:90:af:b3:70:26:f8:eb:f2:c4:2e:3c:87:00:ab:
                    1f:55:b6:a2:23:3d:23:2e:9d:05:f2:63:5a:10:65:
                    4f:e7:3c:c8:e4:1d:2b:1b:28:fa:f0:1e:b6:7e:8f:
                    ff:e0:8b:e3:7b:0f:20:fe:5d:aa:41:32:b5:b5:a0:
                    a6:92:b0:ce:98:5e:4b:e7:a2:6d:6d:f1:a5:e0:60:
                    d7:de:93:78:07:62:ec:8a:80:86:c9:13:6f:47:82:
                    6f:fa:13:e6:09:11:05:c6:59:19:ea:d5:57:ac:d0:
                    70:f9:32:e1:fe:97:23:e5:b5:45:da:3c:b6:23:cd:
                    50:23:4c:c7:59:b1:ac:75:a3:7c:af:f5:ea:97:8f:
                    00:c6:b8:ee:2e:b3:97:27:60:7b:e3:d6:0c:c9:19:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:6D:DB:6F:73:9D:B9:2D:D3:98:96:6D:D8:8A:8C:C8:07:BB:84
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:ed:0d:00:eb:e1:4d:91:e5:a4:c4:f8:86:15:2c:6f:9f:
         fb:bf:ef:c1:d8:53:92:94:b2:a4:16:84:42:89:55:9c:9d:31:
         9d:63:38:fa:f3:4e:2d:f9:7f:cf:b8:ae:a5:75:b6:6a:b5:dc:
         5b:ec:a3:9e:ee:61:20:1c:3e:27:bb:6a:10:16:aa:2d:cc:16:
         da:5d:83:b1:55:73:58:3e:fa:f7:c4:cc:60:e9:92:5e:00:48:
         9b:c8:c4:96:31:f0:ec:a5:d7:27:48:42:6d:36:29:76:65:e2:
         a9:0b:0c:e2:5b:b6:2c:d3:ae:6e:5e:dd:99:ed:47:ef:ad:f8:
         f6:3c:24:15:78:a4:11:0c:65:73:3b:e8:a7:fa:f8:fb:8b:fc:
         69:75:e5:65:c8:6c:61:b3:63:bf:9d:2d:67:8b:37:9e:90:aa:
         38:50:90:0f:27:59:39:2c:1f:9f:9a:6e:21:d5:b9:f9:59:33:
         51:43:a0:1b:dd:49:e4:1d:25:e3:29:fc:01:58:53:df:5a:81:
         dd:c2:10:93:db:cb:7f:cc:f3:01:74:cf:92:42:2e:22:b3:c3:
         a1:3b:66:12:b4:f5:86:7e:b2:b1:2b:fc:b5:c0:91:74:8c:47:
         f1:3c:b2:a2:4a:32:6a:da:de:61:58:eb:eb:ff:2f:ef:c1:39:
         50:19:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:36 2025 by rpki-client