Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          CELFKV5ZCynKzVr/EjjNQDyTq7FjL1VODLiiPRraCbo=
Subject key identifier:   DC:3B:9A:F7:9B:BE:94:37:50:03:90:F1:57:E9:47:DC:7A:63:07:DE
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       01987A51BD4C7C4EA5CF3CFF683411B887EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          07C0
Signing time:             Tue 05 Aug 2025 13:00:33 +0000
Manifest this update:     Tue 05 Aug 2025 13:00:33 +0000
Manifest next update:     Wed 06 Aug 2025 13:00:33 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: WOW6NWTvjF8sU9kOph5lbQZtoP/8ikz1oNziyWCTfjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:51:bd:4c:7c:4e:a5:cf:3c:ff:68:34:11:b8:87:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: Aug  5 13:00:33 2025 GMT
            Not After : Aug  6 13:00:33 2025 GMT
        Subject: CN=dc3b9af79bbe9437500390f157e947dc7a6307de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:a4:28:f9:ed:62:38:b7:0f:e0:0b:a4:54:
                    16:cc:3f:fc:aa:e8:76:11:c1:61:84:7e:f8:85:1b:
                    c6:f4:2b:1f:80:a1:7f:5c:5f:5d:33:0a:86:47:d6:
                    07:60:e5:b6:2e:8b:6b:92:af:20:d7:47:60:9d:7d:
                    36:f2:f6:c3:1a:e0:72:1b:52:75:bb:6e:4a:02:22:
                    41:c6:af:0a:4c:d7:69:e5:79:e8:5c:40:84:1d:a0:
                    3a:32:d5:06:bb:91:58:5e:72:85:cd:80:d0:c2:92:
                    fc:78:94:29:fa:22:d5:48:78:a1:a3:4b:e7:09:bd:
                    81:84:d7:03:4b:3d:b9:46:e5:47:9d:66:d0:f5:57:
                    74:a0:8d:92:88:68:eb:a5:e5:34:37:33:56:96:8f:
                    75:bb:ad:e0:92:07:fe:18:50:2f:3f:42:3c:06:e0:
                    32:50:1b:6c:80:bd:55:48:aa:eb:5f:29:c6:00:77:
                    88:b2:8c:4d:2c:bb:e7:26:3a:6e:24:27:13:c7:24:
                    f4:4b:5c:e8:68:28:5a:72:2f:11:e3:76:b0:10:05:
                    d6:06:72:fe:54:78:c7:cb:ce:9f:cc:bd:4a:15:1b:
                    7c:d2:f8:ba:ab:ba:e3:9e:e2:df:8a:90:42:e4:1d:
                    25:91:29:63:98:a5:17:c6:7e:68:bf:c1:80:fe:bc:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3B:9A:F7:9B:BE:94:37:50:03:90:F1:57:E9:47:DC:7A:63:07:DE
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:82:f6:bb:07:0f:5e:54:c4:b4:66:6a:75:d0:ec:a1:7c:06:
         33:d5:4c:85:d1:90:3b:92:cb:22:f3:0c:e3:61:55:08:5d:d9:
         e5:24:ff:90:2a:de:89:dc:de:c8:66:9c:e4:7f:4b:65:4e:76:
         bd:62:af:25:8c:32:57:02:66:12:5b:81:2c:2e:67:f4:71:24:
         7f:c4:d8:af:74:45:b3:18:8d:23:6f:0b:b1:65:80:0e:7a:d2:
         30:ad:e7:71:02:b7:6c:8e:16:68:8e:cc:c1:fd:39:12:89:19:
         2e:c6:7f:17:22:d5:8e:5d:07:d7:1a:57:08:ef:1f:2a:57:18:
         48:f9:30:76:f5:ee:2e:fc:5c:46:4c:04:f8:23:b6:0b:b0:00:
         b2:30:71:b2:c9:03:b3:dd:08:e2:c8:1c:91:a6:6d:ce:4c:50:
         5a:b7:56:62:85:de:68:06:f8:5e:69:29:a6:b2:32:e5:e6:30:
         cc:94:e6:e5:a5:90:2b:39:e8:6a:12:df:e7:fe:4f:fc:37:da:
         0f:30:38:c2:ab:21:45:4d:1a:51:7f:d9:00:e4:15:c0:48:e3:
         7a:45:f4:f7:32:76:74:b5:89:2a:65:b2:48:a4:22:06:d0:69:
         bf:04:55:50:8e:b2:56:06:41:8d:e0:e8:ee:bb:11:2a:d6:db:
         06:23:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:59 2025 by rpki-client