Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
File:                     cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json)
Hash identifier:          LeOTV4Uu6IClU/O5pYZmx6zxndVmMPqEOFaj3fLa1DA=
Subject key identifier:   6E:10:1A:2A:C4:B0:E5:3D:65:0F:95:F6:F4:C4:32:33:CC:4B:E7:8C
Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
Certificate issuer:       /CN=70cee62b79472dcae51ead4d8ea06923870f5197
Certificate serial:       01987FE65268DB5087925B4548C2539C85F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 15:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:57 +0000
Files and hashes:         1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: KARLqDtacgwr/TZUdXCuBf1W3Zrr0u0SrSxHcA/bl4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:52:68:db:50:87:92:5b:45:48:c2:53:9c:85:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197
        Validity
            Not Before: Aug  6 15:00:57 2025 GMT
            Not After : Aug  7 15:00:57 2025 GMT
        Subject: CN=6e101a2ac4b0e53d650f95f6f4c43233cc4be78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:be:7e:50:f3:50:fb:3e:4d:00:c1:ef:25:
                    09:60:97:29:52:79:e5:b7:86:89:b0:ac:68:06:2a:
                    c6:73:8c:76:9b:c4:4e:5f:64:8c:05:ba:64:c8:79:
                    28:16:40:20:ee:3f:dd:e2:28:0a:c4:b0:ae:35:36:
                    44:6e:7b:d9:27:2a:63:12:2d:8b:d0:8b:08:fe:59:
                    59:4e:e3:e9:ae:ca:21:00:a3:82:81:f8:bd:f7:21:
                    fd:7c:6e:c2:f5:da:aa:76:65:10:3d:94:81:f6:2f:
                    6a:ba:c0:3e:78:8c:6b:55:c0:15:6d:d8:2c:6e:98:
                    99:b5:90:2d:b7:b1:e0:a2:96:4a:43:17:a0:04:a2:
                    61:54:63:54:e7:28:45:19:00:35:39:7c:5a:43:17:
                    dc:b9:e7:45:9e:44:09:07:98:e7:10:5c:3b:67:dd:
                    a6:3c:bb:6e:73:86:92:78:24:ea:8c:04:61:c3:09:
                    c9:fd:be:b2:4e:b1:ec:89:db:04:97:30:c0:6c:2c:
                    04:4a:f2:89:4c:af:7d:09:56:da:2f:81:0a:a2:ac:
                    65:98:de:b2:e2:eb:b0:bf:69:b3:23:08:0b:d1:10:
                    91:6d:32:01:2c:22:ef:9e:76:d2:c1:1a:3a:71:a8:
                    cc:f9:c5:2b:8c:7d:79:cc:ea:17:95:f0:a3:3e:12:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:1A:2A:C4:B0:E5:3D:65:0F:95:F6:F4:C4:32:33:CC:4B:E7:8C
            X509v3 Authority Key Identifier:
                keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:19:19:0e:20:38:8d:d6:59:5e:b3:a9:74:3b:cd:ca:d0:
         36:1e:9f:87:fd:cf:8b:ed:35:8c:f0:32:2d:10:44:f9:c2:d4:
         9c:84:bb:f1:f4:51:11:77:73:f2:94:1e:86:9a:69:59:71:a3:
         a5:eb:51:1f:a9:b2:34:ba:37:39:58:64:3c:56:c6:42:1b:ce:
         c7:6f:bb:88:55:22:92:4e:a8:6b:e6:b9:fd:31:7c:97:28:6a:
         47:91:ad:78:53:44:f4:c6:4e:c3:20:e1:44:19:81:73:4a:4f:
         f4:30:98:35:b7:38:d1:42:a7:0e:53:18:b7:75:2c:12:ed:74:
         bc:d4:90:d7:3f:c4:00:13:b5:4b:10:fe:fc:b8:92:07:be:c5:
         bb:8c:a3:e8:b9:25:67:e7:26:7c:b7:c1:00:77:01:31:eb:eb:
         77:d9:1e:d9:50:37:b9:31:45:45:11:f8:ba:7a:39:a3:a4:0e:
         85:f7:52:bc:c8:2c:74:f6:76:24:53:c2:c0:48:41:16:db:36:
         70:87:58:e3:9e:6b:c0:29:c9:0c:b0:40:4c:5e:44:3d:4d:b8:
         0a:67:42:23:fc:22:87:f1:2f:21:96:ae:9a:2e:d8:7c:d3:a6:
         de:a8:4a:43:da:f1:73:ea:24:51:33:a4:94:e1:c0:4e:7c:d0:
         76:a7:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:36:22 2025 by rpki-client