Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File:                     qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier:          BzTppL9TIosZHAgQlvEuqHUn0p9On6N+wWDq6MXO8Nw=
Subject key identifier:   DF:E8:15:C7:C4:7F:06:FD:0E:4C:0E:D3:22:B9:2E:CC:FF:5C:1C:38
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer:       /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial:       01988B7D51133E7AE0AB1624DE5A116A5C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number:          0572
Signing time:             Fri 08 Aug 2025 21:01:42 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:42 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:42 +0000
Files and hashes:         1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: iSw1tfF138Pa23JP5U5VMyKvubjwYyN45j2uMELjAqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:51:13:3e:7a:e0:ab:16:24:de:5a:11:6a:5c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
        Validity
            Not Before: Aug  8 21:01:42 2025 GMT
            Not After : Aug  9 21:01:42 2025 GMT
        Subject: CN=dfe815c7c47f06fd0e4c0ed322b92eccff5c1c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:5a:be:04:db:f6:ab:40:3a:e8:d7:bf:19:
                    81:71:30:ed:42:5a:60:a0:0c:e4:1d:b2:94:d7:79:
                    73:32:2a:dc:d6:53:35:01:4b:fe:88:68:cf:2d:5b:
                    b6:51:51:ce:e7:65:eb:1f:0c:29:d3:e1:52:af:c0:
                    18:eb:1c:1b:7a:8b:9a:fe:bf:d2:1c:dd:b6:b8:a5:
                    88:98:5f:90:99:e8:d0:2b:7e:db:5a:d2:82:85:38:
                    2a:28:89:54:a9:87:1d:56:9b:e5:94:b0:b9:2e:ef:
                    74:d7:20:e8:c1:04:15:03:03:e0:32:69:00:5c:95:
                    e1:f2:bb:3a:57:e9:57:c6:a1:6e:35:b0:29:f2:7e:
                    8a:d6:b0:44:09:9e:bd:d7:b7:5f:a9:cf:0f:d0:05:
                    4e:83:6a:87:96:2c:67:b8:6c:bc:d6:8c:80:f4:ea:
                    a4:8d:e8:f6:b9:4b:e5:1d:15:bd:55:56:32:6e:a9:
                    20:b6:63:ed:cc:d0:b4:86:e0:63:12:72:88:39:69:
                    3b:39:bb:ea:e1:f9:62:9b:78:2c:dd:f1:71:d3:2e:
                    40:3b:52:8e:ea:6f:01:6b:f3:6b:16:42:6d:76:68:
                    43:b3:b9:36:29:98:04:32:d3:28:d0:ba:4f:aa:62:
                    f5:f8:4d:26:c8:ef:da:f2:c5:3c:74:1c:72:f7:33:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E8:15:C7:C4:7F:06:FD:0E:4C:0E:D3:22:B9:2E:CC:FF:5C:1C:38
            X509v3 Authority Key Identifier:
                keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:9b:d0:24:4d:21:78:ed:54:f0:b3:65:7d:07:7e:a8:23:
         5f:16:b8:2d:52:52:7a:c0:fb:00:68:c5:a4:97:e5:1c:6b:db:
         09:8f:bf:0c:0a:c3:13:f8:41:21:9b:50:4c:34:b3:22:5e:b0:
         cb:7e:e4:73:d3:3c:73:b8:fa:26:05:6b:0f:b0:c9:13:b4:51:
         de:4c:9d:61:d9:55:45:65:81:3c:8a:7d:ff:9d:35:80:8b:ea:
         de:c3:aa:9d:3b:34:70:5a:f4:ab:e0:ec:bb:e2:66:27:b4:88:
         6f:27:d2:e5:3d:9b:c2:aa:5e:ef:d3:40:1f:97:58:81:c0:e5:
         9d:ef:ef:e3:42:5e:36:dd:d9:2e:78:43:d4:6f:c8:aa:f5:7f:
         8e:ce:c0:99:9e:ea:c9:a1:73:e7:ed:d3:6f:14:66:04:4f:d1:
         25:91:ab:97:2d:18:14:a2:5b:b6:35:ca:4d:1c:da:36:ab:42:
         ef:3a:87:47:e6:dc:ad:06:fd:1f:67:02:5c:44:1a:28:2a:21:
         ef:0c:3d:cf:a2:34:1f:62:12:67:32:6d:82:56:9c:af:60:e9:
         f2:d1:6a:2c:9a:50:be:29:3f:60:30:a6:8c:40:9a:ed:1d:bd:
         4a:af:62:98:46:43:67:f6:ae:ab:e5:98:a7:2d:e3:b1:62:ac:
         b2:9c:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:08 2025 by rpki-client