Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          g76bdbiPHx+Mhy8sg4E/DcnayoHehbS3qXc/gEHXJms=
Subject key identifier:   5D:73:B4:54:7E:75:4D:31:48:7A:58:54:FF:7C:94:C8:B4:00:A9:3C
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       019873E2350F00EAA3C6876BCA9BEC6DAB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          08B3
Signing time:             Mon 04 Aug 2025 07:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:01 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: m7RMsKORAApbI9Ufj/AhxqyLzdse9XhgS5FSBCxfSuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:35:0f:00:ea:a3:c6:87:6b:ca:9b:ec:6d:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: Aug  4 07:01:01 2025 GMT
            Not After : Aug  5 07:01:01 2025 GMT
        Subject: CN=5d73b4547e754d31487a5854ff7c94c8b400a93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:4d:a9:df:c5:e1:a5:e8:be:41:f8:37:96:
                    9d:f4:24:17:f9:3c:43:08:37:f7:80:aa:f9:f9:91:
                    b2:8c:d1:7a:03:18:53:55:70:e8:2f:1a:a2:a5:64:
                    dd:7d:86:c4:da:c9:8d:a0:47:8f:cf:d7:b0:3a:c2:
                    fd:21:43:0f:db:3c:60:78:20:b4:bd:57:8f:36:51:
                    9c:8e:14:82:bb:9c:07:7d:53:10:3b:89:ef:5f:9d:
                    42:c8:f3:ce:45:fd:06:e4:da:e3:c3:90:27:64:c5:
                    37:9a:eb:08:6a:e8:93:2d:fc:6b:bc:a6:0e:ff:55:
                    65:5a:37:7f:84:1f:67:83:04:aa:09:af:25:f5:50:
                    62:01:2b:02:c4:6e:7b:64:c9:0c:f4:fe:4c:d4:73:
                    55:80:b3:33:0b:8a:d2:ad:da:0d:34:d3:7f:b6:de:
                    11:ad:a5:35:a0:d7:48:6b:15:8b:0d:77:b8:df:c3:
                    6f:39:3e:9e:5e:5e:39:5b:29:2b:af:b9:08:a2:e8:
                    fd:75:a0:e9:e1:b0:4e:8a:c4:bf:63:6b:36:09:95:
                    36:fc:d4:38:b8:95:94:3d:83:22:1b:25:be:ad:5a:
                    8c:0e:64:50:b3:89:42:00:a2:44:63:e3:6d:1c:0a:
                    65:05:c8:c0:c8:94:5d:61:15:e1:ad:41:8f:3a:14:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:B4:54:7E:75:4D:31:48:7A:58:54:FF:7C:94:C8:B4:00:A9:3C
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:fb:ce:4a:6d:40:b0:37:bb:b4:c1:da:36:f7:6f:83:31:
         c7:ba:32:c1:be:e0:aa:18:f7:03:a7:f4:d9:e2:e1:c6:29:64:
         c7:c1:8e:98:24:be:02:70:f9:0d:fe:e3:f0:8e:e4:59:9d:d0:
         8e:86:6b:a3:6c:12:2f:9b:b4:7c:05:48:8e:2a:df:5a:46:b6:
         94:70:90:0b:6c:13:f6:69:01:54:5b:de:8f:9f:84:52:c5:f5:
         25:b0:a5:7e:55:03:5b:f0:56:d5:17:6c:c5:48:33:41:45:1f:
         4a:0e:42:26:bf:e8:fa:34:26:a9:cb:aa:6e:cf:ee:0e:73:15:
         e3:a5:32:ed:6e:6e:9e:78:29:a1:e9:29:44:7c:89:8c:dd:a4:
         1b:19:0f:8f:1e:be:8e:02:16:c7:5e:b7:75:89:cf:2a:b1:74:
         b8:99:e5:88:69:2a:3a:36:d9:62:6f:ea:e8:c2:a6:12:9f:6d:
         e0:1e:cf:b7:cc:bc:da:02:d3:11:45:82:15:bb:a8:6d:97:b4:
         d4:b2:e3:bc:d6:e0:51:fb:8d:40:dc:ea:91:7b:63:dd:e8:86:
         3f:db:0c:d8:94:14:ff:db:60:9d:2f:54:41:b6:da:9c:ef:f2:
         16:5c:fe:26:f7:0d:30:3d:9d:39:84:09:d4:3c:ae:92:c6:ae:
         c9:b9:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:34 2025 by rpki-client