Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          9qsELR3HF6HlIlSiJMI2An2w4SrkxDlAsUjqog7tZP4=
Subject key identifier:   D6:13:4A:B3:E7:ED:FC:10:0F:CA:B4:DB:73:4E:A2:68:81:C1:6F:7B
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       019872CF9785F3052737305591474E050B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          12A7
Signing time:             Mon 04 Aug 2025 02:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:03 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: LW0gnrUMWhIEz5igyFtif9kcQZCHfegADDvRWhAoAlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:97:85:f3:05:27:37:30:55:91:47:4e:05:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Aug  4 02:01:03 2025 GMT
            Not After : Aug  5 02:01:03 2025 GMT
        Subject: CN=d6134ab3e7edfc100fcab4db734ea26881c16f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:ef:4d:46:a1:a8:4f:af:f8:88:68:03:7b:
                    d7:c1:af:8d:c1:41:74:48:64:a6:56:0a:00:1c:9a:
                    ca:34:6c:80:c9:76:9e:34:1a:43:fd:f1:88:8f:96:
                    c8:86:ec:a1:03:b2:52:66:b6:8b:ca:50:84:0b:62:
                    eb:49:2f:b0:83:8f:ec:72:be:48:73:fa:14:8c:56:
                    4e:a2:31:a1:f5:b9:9e:3d:ca:8f:ad:84:6b:a2:4c:
                    f6:8b:db:a7:87:7b:c5:d8:d2:a8:5c:04:c1:fd:5e:
                    c5:31:af:c4:70:73:f1:e0:96:23:90:a6:20:31:1e:
                    c4:07:89:5e:e4:e6:ed:e3:57:a3:d5:56:d7:4d:d0:
                    01:10:df:f9:a6:b6:24:d9:75:af:3c:67:d1:c5:45:
                    7e:f9:16:b0:91:1d:2b:45:cd:02:e7:b4:c4:c2:7c:
                    06:74:08:99:37:51:3b:25:de:71:58:4d:da:bb:86:
                    61:ff:54:0c:bd:50:55:17:7e:41:c9:62:38:c0:b3:
                    29:4d:f7:b0:c7:2d:a1:03:e8:f8:8c:38:82:6e:c5:
                    ae:95:ec:66:6f:bb:c4:65:5f:28:02:13:c9:e1:0e:
                    71:b9:1e:83:01:f2:71:91:79:1c:ba:94:c3:ce:11:
                    c6:12:65:89:88:be:b0:03:2c:bd:fc:f5:56:e5:23:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:13:4A:B3:E7:ED:FC:10:0F:CA:B4:DB:73:4E:A2:68:81:C1:6F:7B
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1e:56:50:83:5c:11:07:a6:f6:14:36:fb:cb:c0:b3:59:a6:
         05:cf:0f:8c:76:68:0e:0e:e9:76:39:56:20:55:22:49:2f:cc:
         ba:fc:d0:7e:47:07:26:7b:fd:e9:44:e8:34:e6:af:94:db:a6:
         73:d5:45:43:a5:fa:40:18:42:7c:f9:5f:b5:4d:74:c2:8b:4c:
         ac:f8:6f:18:0a:fc:0a:53:95:9b:2d:db:1d:be:57:47:2c:ed:
         21:7e:85:46:03:db:c8:bf:f4:53:38:a7:37:e5:08:df:13:2a:
         38:43:9d:59:36:a4:40:cb:80:95:c6:73:0e:29:49:d4:8b:9a:
         59:18:02:43:61:60:ee:ce:fb:78:f8:1a:1c:5c:d5:ba:10:52:
         45:c1:d5:24:60:90:53:15:11:f3:e1:f1:3c:24:37:97:e5:2b:
         8c:dc:a6:97:30:5c:1d:92:bf:8c:ca:bb:40:f9:63:af:a1:27:
         e5:34:d4:a6:0b:ae:3a:9c:69:5f:89:e4:82:93:4a:08:42:e1:
         e1:0c:3e:6b:3a:6c:20:ac:0d:c8:4d:65:4d:53:39:d9:db:40:
         a1:50:52:ac:4a:b0:48:da:24:81:05:8d:92:56:04:ce:23:7c:
         ef:ac:e7:2b:00:dd:5e:f6:60:99:60:04:9e:07:c9:37:c3:30:
         e5:a6:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:50 2025 by rpki-client