Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File:                     dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier:          e0r6UaVzsdJKTBEUtMsc1LWUm3M94nx07j0HXO1uz0Q=
Subject key identifier:   D7:98:07:55:1D:89:D8:39:F0:37:39:37:60:02:B2:58:E8:85:2E:3F
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer:       /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial:       019873E2F8CCE23B60A61DA67EFC82B29566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number:          0308
Signing time:             Mon 04 Aug 2025 07:01:51 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:51 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:51 +0000
Files and hashes:         1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: MFP8P+TTLfH9hcNBbsOO0ZzUvdgYxOHXpRG8YP7iMG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:f8:cc:e2:3b:60:a6:1d:a6:7e:fc:82:b2:95:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
        Validity
            Not Before: Aug  4 07:01:51 2025 GMT
            Not After : Aug  5 07:01:51 2025 GMT
        Subject: CN=d79807551d89d839f03739376002b258e8852e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:22:0b:00:d6:09:80:ad:98:d9:de:6c:02:
                    e8:86:64:d8:1b:c2:11:25:88:5c:44:00:11:cb:98:
                    e0:ea:f1:62:e8:26:bb:fc:dc:34:07:a7:8f:bd:86:
                    95:6d:93:8f:0f:0e:d7:b4:a2:31:60:2f:9a:4f:d5:
                    f9:33:74:3a:8a:e0:a2:03:75:10:69:17:66:c7:8c:
                    c1:26:3f:4c:de:c9:0d:2a:83:52:7f:a1:2c:31:0f:
                    b3:a6:d9:b2:eb:8c:cc:3b:97:76:ca:8f:4f:38:33:
                    ff:93:53:d7:5c:89:42:a0:ed:5f:b7:fd:67:76:60:
                    93:7b:b1:eb:b4:a2:19:dd:e3:7a:ab:62:71:38:7f:
                    03:3f:55:f3:8e:26:d3:07:65:8a:1d:26:57:98:ab:
                    44:bf:73:42:96:cf:09:f5:79:ee:4a:88:83:82:61:
                    30:ca:db:af:94:fe:a4:d5:ae:10:59:90:45:c8:ba:
                    d2:9c:24:37:3d:10:60:13:77:6b:60:94:e1:94:12:
                    b1:68:31:3a:6e:39:2f:87:36:13:89:0d:de:55:7a:
                    cf:2f:a9:36:f0:22:42:56:a8:91:df:19:64:c1:21:
                    84:e0:10:09:b8:c9:55:ca:58:ed:65:76:1a:ac:af:
                    ee:6a:90:22:b0:55:12:fc:8f:03:19:ac:07:00:13:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:07:55:1D:89:D8:39:F0:37:39:37:60:02:B2:58:E8:85:2E:3F
            X509v3 Authority Key Identifier:
                keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:69:c8:76:17:d5:ab:21:3a:ad:06:20:94:e2:5c:44:80:d2:
         41:5f:f7:bb:89:27:88:cc:8b:4d:5f:d7:ee:9d:ee:55:bd:f7:
         19:cb:da:5f:f4:3c:df:a8:b0:25:e7:26:00:85:d1:4a:50:ee:
         e7:2d:6a:1e:8e:f2:ed:2d:c8:64:44:d2:61:61:f8:7b:e9:f3:
         e0:5e:d1:8f:9d:8f:31:30:5b:1c:c1:f8:5f:af:6a:03:1f:a6:
         df:9c:4f:2c:92:d4:be:f1:75:77:4f:d9:3b:0c:d5:33:f1:17:
         f9:0a:a2:0d:2d:0b:93:53:41:0a:6a:57:ec:62:fa:38:dd:1e:
         f7:31:0c:b9:3e:3c:45:d3:bb:3e:c1:5e:2e:a1:06:cb:23:19:
         76:06:76:02:54:3c:20:f9:6f:0b:d1:7e:68:cb:b2:ee:e9:ea:
         dc:dd:e0:53:cc:33:22:7b:ad:c6:7e:99:32:15:36:cf:d3:57:
         d2:82:87:c4:68:9e:fc:5e:d2:89:58:3d:4b:b3:1c:dd:d5:64:
         68:6e:b7:38:59:c2:77:ec:3e:d1:6e:38:2e:e4:75:43:6d:0d:
         56:ab:fa:13:74:96:61:c5:05:75:7e:67:a7:74:8a:eb:2c:8a:
         bd:83:37:b4:6d:de:6a:ab:17:a0:16:6c:fa:f1:86:fd:61:02:
         4f:17:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:23 2025 by rpki-client