Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File:                     bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier:          CWJ7BqmU+5P91HiTvI/mYhnSx5qBwifZoBPw8xZT8Fc=
Subject key identifier:   83:21:0F:94:97:60:32:01:E7:E7:90:00:25:9C:94:97:ED:02:E1:17
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer:       /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial:       019885B18E4C586DBA266BB134DBF138CEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number:          12B0
Signing time:             Thu 07 Aug 2025 18:01:02 +0000
Manifest this update:     Thu 07 Aug 2025 18:01:02 +0000
Manifest next update:     Fri 08 Aug 2025 18:01:02 +0000
Files and hashes:         1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: lgG6XPupZAgMfwMS/esxTBwGpbvVsZu8UegeML98V1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:b1:8e:4c:58:6d:ba:26:6b:b1:34:db:f1:38:ce:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
        Validity
            Not Before: Aug  7 18:01:02 2025 GMT
            Not After : Aug  8 18:01:02 2025 GMT
        Subject: CN=83210f9497603201e7e79000259c9497ed02e117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a5:dd:63:ce:f3:9d:a9:26:cc:f2:f0:9c:f4:
                    c0:13:c1:88:16:b6:af:f6:7a:61:f7:d7:2a:34:39:
                    fe:6b:37:cf:a6:5b:c8:26:52:12:ce:d9:dc:59:22:
                    3c:09:36:eb:5d:1c:30:eb:d8:03:c1:dd:e4:b8:cb:
                    54:ed:58:ed:48:66:ab:06:56:82:a7:86:b6:26:54:
                    66:e7:67:a2:f6:99:a4:86:7f:33:bf:1a:a3:08:c4:
                    0c:59:a3:43:af:f6:43:c7:ee:e0:5b:de:1a:8f:77:
                    93:db:4a:3d:25:5b:98:c6:c0:9c:0c:fe:1a:f3:1c:
                    5b:39:80:4f:e0:45:14:91:19:08:03:c1:c5:ec:fe:
                    7e:23:38:95:0f:51:db:80:9f:fc:5a:cd:fe:24:e1:
                    aa:65:ca:0f:d2:d3:39:fd:fa:eb:05:92:28:49:e9:
                    85:7a:5c:a5:be:51:2b:5a:33:c6:df:a4:96:ab:de:
                    fb:c6:86:14:55:c8:c9:22:91:92:ba:d0:4c:0d:cf:
                    7d:0f:fb:dd:49:72:39:08:32:a1:3e:40:7e:9d:23:
                    3e:fa:27:86:e0:88:54:2d:b1:e3:11:d3:65:65:eb:
                    0b:07:ef:63:f3:26:6d:f1:16:c1:74:b8:de:17:7d:
                    e1:cd:5d:ad:ab:d0:c2:35:75:43:c2:17:6a:e2:66:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:0F:94:97:60:32:01:E7:E7:90:00:25:9C:94:97:ED:02:E1:17
            X509v3 Authority Key Identifier:
                keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:8b:73:52:90:a0:6c:fa:f3:50:39:e4:3e:f1:8e:d9:fc:
         f7:e9:ac:82:29:a9:35:14:42:eb:8f:d0:e3:eb:59:70:7a:9d:
         95:bd:b3:63:71:5c:04:05:7e:cd:e0:dd:76:68:0b:f6:5c:68:
         31:c3:50:69:78:3f:95:98:cb:47:77:db:a0:92:aa:5f:37:76:
         85:11:3c:d6:91:e4:ac:da:ec:6f:9d:62:be:b9:dd:c6:b6:e7:
         2a:ba:15:24:33:f8:58:4e:1c:82:88:b1:5d:91:62:3d:f0:0e:
         af:4a:e9:21:e5:fa:77:e0:50:e4:c5:21:33:4e:f0:de:09:7b:
         89:89:62:73:69:0c:c8:35:e5:f6:e3:c0:56:03:60:66:93:a3:
         0f:03:70:8f:57:1b:33:23:46:7f:8a:47:b5:76:81:d2:26:69:
         df:37:70:a4:35:46:fe:c7:fa:0e:cb:ad:dc:c8:1c:50:07:d4:
         33:f6:13:c1:ee:a6:25:4e:b9:2f:31:11:63:43:f5:1a:0e:9b:
         3f:c6:3f:9e:f8:2e:4d:6e:ad:ee:3d:56:48:6d:d4:ff:3f:f2:
         78:5b:ee:c2:a0:a9:7c:c7:1e:67:48:f7:48:fb:08:18:ce:24:
         8d:f7:a4:ed:7f:af:88:5c:bc:11:83:7a:94:1a:eb:83:ba:ea:
         e1:3b:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:52 2025 by rpki-client