Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File:                     g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier:          pzL3tN0Ya+p5iEIzAC4P6Hz/Ylbe/2INIj/4Y9C3fiw=
Subject key identifier:   7E:0F:61:38:3C:71:5D:74:F0:CC:E4:D7:A9:FA:80:80:05:A1:AF:2A
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer:       /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial:       0198816856E00847FED62DEE7CFF2A4E8FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number:          09A2
Signing time:             Wed 06 Aug 2025 22:02:35 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:35 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:35 +0000
Files and hashes:         1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: UViuC1fLSkTYm65tn75SzRc9y4UmN+qqmEgIoJelFBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:56:e0:08:47:fe:d6:2d:ee:7c:ff:2a:4e:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
        Validity
            Not Before: Aug  6 22:02:35 2025 GMT
            Not After : Aug  7 22:02:35 2025 GMT
        Subject: CN=7e0f61383c715d74f0cce4d7a9fa808005a1af2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:54:97:80:4b:7a:48:7f:10:86:12:2f:65:
                    4a:cd:0c:75:34:a4:eb:f5:a7:8e:b1:de:e6:c8:c6:
                    1b:34:b7:f4:a0:1d:50:da:2f:e7:88:79:cf:cd:17:
                    cc:57:9a:be:11:dd:6c:3b:8e:02:93:64:22:86:51:
                    d8:c3:13:53:4e:9b:69:4e:dd:73:7e:d5:5d:c5:af:
                    3c:f2:d4:e8:d1:15:2c:21:1d:cf:e1:e4:35:df:88:
                    60:13:71:2b:43:41:30:37:22:96:5b:e0:00:20:f3:
                    e7:80:57:c6:ee:5a:bb:70:5a:68:06:35:fb:9e:00:
                    a6:af:9b:26:5c:63:c6:18:21:69:b4:be:37:3c:df:
                    a0:c2:34:1c:cb:10:a4:ed:49:9d:84:ab:23:a0:f5:
                    7f:ff:e5:bc:ee:d3:95:81:e1:89:11:99:f4:f3:2f:
                    8c:45:07:13:f5:63:82:73:67:3e:9e:54:69:8e:5d:
                    da:f9:6a:64:dc:56:71:03:0f:f4:fe:98:be:d3:31:
                    48:ab:c3:12:90:a5:c2:92:54:25:5f:48:52:35:e5:
                    d8:99:e4:0c:8d:db:ff:01:fd:28:bd:09:60:00:df:
                    82:72:cd:67:3b:a3:cd:f1:c7:21:61:48:a9:4f:b5:
                    fe:8e:ec:63:40:56:f0:cf:5c:71:00:d4:5e:38:fa:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:61:38:3C:71:5D:74:F0:CC:E4:D7:A9:FA:80:80:05:A1:AF:2A
            X509v3 Authority Key Identifier:
                keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:22:6d:ff:2e:1b:fe:20:03:08:62:d4:87:ad:cc:b0:6a:b0:
         f6:d7:71:9d:fa:a5:c3:97:a9:ab:ff:eb:81:f0:c2:4e:25:5b:
         52:e0:c4:ca:7f:ca:e2:63:a4:de:5f:4f:18:55:12:c0:6d:da:
         d2:a8:a0:c6:cc:ad:b3:9b:6a:a8:f6:dd:a6:35:fa:6a:dd:4b:
         26:6f:f2:a5:42:59:5e:29:33:9a:e3:bf:c9:c8:32:b8:89:f2:
         93:72:02:05:b8:d2:fd:75:5f:0c:b6:19:e3:0b:da:73:eb:0b:
         81:dd:fd:8e:08:07:70:31:7c:99:12:40:47:28:5b:24:e5:55:
         05:78:b2:8d:b8:0c:80:64:58:b4:b4:eb:8f:f9:5d:b8:e6:e0:
         f1:97:70:c8:01:d6:14:c3:5f:da:7d:d2:1f:16:a2:bf:03:b2:
         be:55:71:21:e6:d7:c2:08:e9:ff:3e:f4:f9:5e:23:46:83:31:
         0b:fb:1a:d2:e0:74:5f:37:ba:63:87:d2:33:48:da:23:41:18:
         65:b0:31:b3:52:90:47:f7:68:4c:fd:95:91:3a:74:b0:e2:bd:
         38:f4:a7:42:32:21:fe:45:5f:39:d2:64:6e:fb:6d:59:19:f6:
         ae:b0:f8:5b:41:f9:12:2b:8f:75:b4:72:b9:17:69:47:a8:8a:
         98:6c:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:07 2025 by rpki-client