Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File:                     egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier:          TVukWgtMIA6/tGdstWtj28fb8IAnm31TcY7hZCecWkw=
Subject key identifier:   26:91:D3:DD:B8:9C:89:3C:26:38:56:8E:5B:4D:ED:63:B4:A4:19:81
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer:       /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial:       019873E31BFE3E919915F5E5ADA97E1B94A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:02:00 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:00 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:00 +0000
Files and hashes:         1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: bEOA1bm3jQ3o+V5kTGA4Ivx2BGi3437VB6B8J9HjcH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:1b:fe:3e:91:99:15:f5:e5:ad:a9:7e:1b:94:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
        Validity
            Not Before: Aug  4 07:02:00 2025 GMT
            Not After : Aug  5 07:02:00 2025 GMT
        Subject: CN=2691d3ddb89c893c2638568e5b4ded63b4a41981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:87:2c:15:1e:94:8d:eb:a4:50:c1:9e:21:
                    3f:a2:f7:ec:52:07:a0:d9:7a:6f:d8:e5:80:59:01:
                    9c:ac:5a:61:28:ed:cb:25:a2:7b:53:a0:2e:c7:9c:
                    d0:96:71:84:4e:b9:0e:8e:a7:8a:bc:c1:e6:92:07:
                    3a:61:c9:a2:43:61:9a:82:2d:fa:36:45:60:e5:c2:
                    41:b2:bf:98:0a:be:11:5c:01:05:1a:85:27:41:b9:
                    7d:e2:7b:88:38:8f:fe:78:50:d7:53:49:59:55:35:
                    4b:6e:ee:08:17:c6:1c:e2:72:d4:53:85:e0:f1:6a:
                    c8:f4:d7:6c:ee:f0:33:14:ba:8e:aa:7f:9d:d7:5e:
                    87:63:8b:1c:a3:b3:7a:a2:05:f0:c0:74:13:e4:9b:
                    3b:86:e4:f6:b0:2c:0b:fb:4d:f0:d7:a3:45:7a:ae:
                    8c:b7:ef:5c:50:c9:89:91:25:55:2c:2a:23:3e:b9:
                    be:46:14:bb:fd:c8:c8:3d:1e:cb:57:cc:57:ab:c8:
                    0c:7d:89:9d:8f:9e:21:77:1b:65:c4:92:ec:10:1e:
                    f1:00:77:ea:cf:e6:79:a5:5b:b3:85:c9:b9:16:d7:
                    66:87:bc:d2:15:05:d7:cb:08:61:3a:63:35:49:bc:
                    72:00:6b:da:0a:8f:4a:c8:cb:5a:f1:3a:33:b6:73:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:91:D3:DD:B8:9C:89:3C:26:38:56:8E:5B:4D:ED:63:B4:A4:19:81
            X509v3 Authority Key Identifier:
                keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:19:3a:ac:e9:e5:97:09:3f:11:05:e9:53:35:20:99:18:01:
         fc:5e:b5:e6:c3:10:90:ba:cd:11:72:8d:c0:7e:19:a7:52:0a:
         9e:8e:fd:e7:52:74:9f:f7:68:5e:5d:1f:1f:9a:62:54:e0:ae:
         3c:c4:c9:6c:3b:ff:dd:b7:9e:13:3d:0c:d4:69:94:9e:92:65:
         86:90:b9:2c:02:da:cb:df:78:43:4b:8a:d6:7a:f0:2e:29:fc:
         98:69:b6:c0:d0:af:0e:96:c5:4b:8e:c0:71:bd:dc:d4:70:f9:
         36:2c:46:d0:89:ab:ae:aa:89:d0:35:e9:54:28:4e:92:2a:d3:
         e5:78:d7:b0:24:a7:31:75:a8:70:c7:d5:5a:e0:cf:d3:12:63:
         a6:57:07:0e:06:cf:50:4b:56:2e:88:26:c7:84:32:2c:5e:f9:
         db:3a:07:62:1f:dc:5b:92:c9:74:0b:6d:a0:ba:b9:1c:6b:ce:
         8e:47:dc:be:cb:39:8b:fc:10:2e:2f:5b:e2:c4:fa:a0:0b:c4:
         5e:99:dd:14:3b:68:bf:16:e9:62:a8:21:58:f3:55:93:8a:d4:
         e3:96:2b:74:e2:9f:57:a4:86:05:26:35:0e:2c:fe:a6:a9:a3:
         4c:25:0a:04:c8:82:f0:66:50:ac:26:a2:0d:31:37:f7:c9:d8:
         13:76:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:47 2025 by rpki-client