Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File:                     4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier:          AIa4TgVkuK+wAYFDjBo9+aVcBYVppVOSSpe8rTWo2NY=
Subject key identifier:   33:3F:48:79:FD:58:7F:92:D2:F1:8C:AF:01:8A:F7:A7:F3:37:A1:0C
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer:       /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial:       0198922345FB0C0048CCE37A096DDD830C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number:          06B8
Signing time:             Sun 10 Aug 2025 04:00:41 +0000
Manifest this update:     Sun 10 Aug 2025 04:00:41 +0000
Manifest next update:     Mon 11 Aug 2025 04:00:41 +0000
Files and hashes:         1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: EY+IPSAyBEa5iGDAeBXZeEHOwWsciAnTVZCSz8j1Ovw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:45:fb:0c:00:48:cc:e3:7a:09:6d:dd:83:0c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
        Validity
            Not Before: Aug 10 04:00:41 2025 GMT
            Not After : Aug 11 04:00:41 2025 GMT
        Subject: CN=333f4879fd587f92d2f18caf018af7a7f337a10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:80:8a:5c:6c:b7:bb:0b:8a:5f:62:c7:90:
                    be:81:69:f2:a5:75:8e:33:53:a4:af:42:f8:55:5c:
                    55:6e:e8:11:3c:62:4e:47:e9:b9:ef:da:2c:ac:84:
                    10:cd:2e:2c:6c:bd:6e:0b:4c:1d:e5:74:70:09:45:
                    41:9e:ca:2b:76:61:59:c5:ea:44:46:66:2c:12:5b:
                    1f:ec:b9:f6:cf:43:64:0d:43:f1:a9:26:05:7a:29:
                    b2:46:b8:14:39:fb:96:4b:c8:82:5d:c2:48:db:92:
                    e8:34:b5:40:a6:37:60:82:f6:f4:5d:a0:05:fb:c5:
                    5e:8b:17:ef:fd:30:11:c6:96:e6:35:ae:45:ae:14:
                    35:f3:7b:31:bc:ba:c5:c1:1c:d4:c0:87:61:fa:ef:
                    d1:de:fa:ad:d6:cc:5b:4c:ce:f0:a8:aa:41:25:f0:
                    63:b2:97:d6:cc:1c:e3:60:a4:a3:af:3a:13:a5:03:
                    44:f0:e6:34:fc:fc:f3:28:38:4a:13:04:3c:84:ce:
                    57:4d:5e:7f:7f:dd:e1:58:3e:bf:8b:75:e0:44:c3:
                    00:0d:ff:22:0d:19:7f:ed:7f:16:88:28:84:b3:94:
                    24:be:34:54:14:63:26:b6:9f:18:11:c5:71:ce:b2:
                    43:34:33:5b:9e:12:09:2d:f0:66:fb:0b:4f:7c:12:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:48:79:FD:58:7F:92:D2:F1:8C:AF:01:8A:F7:A7:F3:37:A1:0C
            X509v3 Authority Key Identifier:
                keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:16:ec:28:7c:fc:56:dc:b1:c3:ef:0b:c1:ff:89:56:b5:
         a5:f2:07:98:f2:dc:47:cc:9b:26:29:48:89:c5:00:72:b6:af:
         c3:a4:d3:ab:c1:74:20:d1:de:1e:05:89:c8:9c:b5:4b:15:c6:
         af:93:c9:76:cf:8f:13:c4:bf:51:a6:11:84:41:46:1a:45:e2:
         bc:60:28:b1:03:6e:2d:e6:07:29:fa:3d:52:40:fb:de:b1:10:
         c6:d1:db:d7:9c:f4:1e:24:ed:0c:54:99:ce:33:78:5e:f8:21:
         8d:4e:83:87:3b:4d:4e:d9:6c:fd:52:77:3c:d3:92:08:a7:09:
         0a:8d:56:33:bc:c5:14:e5:59:46:57:30:a4:3e:a2:aa:24:eb:
         35:61:22:1e:bd:bf:18:4b:36:d1:af:07:a8:06:1b:87:cb:23:
         82:2e:10:9a:b4:78:43:9f:10:52:a7:ea:55:4e:ac:c9:7a:be:
         9a:02:5a:f7:49:45:51:06:6c:bb:50:93:1b:32:f9:2c:a3:b3:
         a8:d0:d9:90:8d:da:5a:c6:75:4f:6d:7c:9a:ee:2d:63:d6:36:
         dc:fa:e7:f2:27:1a:06:8e:10:b1:b0:b2:58:bf:5f:05:22:ec:
         a3:70:08:f5:e3:64:a8:b0:ca:d5:7c:12:b4:37:b1:4e:75:10:
         ad:b1:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:21 2025 by rpki-client